Ignore branches when assigning via +=

* Update to use RubyParser 3.5.0 (Patrick Toomey)
* Improve default route detection in Rails 3/4 (Jeff Jarmoc)
* Handle controllers and models split across files (Patrick Toomey)
* Fix handling of `protected_attributes` gem in Rails 4 (Geoffrey
* Hichborn)
* Ignore more model methods in redirects
* Fix CheckRender with nested render calls

Merge pull request #492

Improve route checking for HTTP verb routes.

bump ruby_parser to 3.5.0 to support ruby 2.1 syntax

Process controllers defined in multiple files

Option documentation updates

Add more Rails 4 model methods in redirect check

Fixed treatment of protected_attributes gem for Rails 4

as mentioned in #486

Fix CheckRender error with nested render calls

Fixes #484

This reverts commit 5f788264.

* Add support for RailsLTS 2.3.18.7 and 2.3.18.8
* Add support for Rails 4 `before_actions` and friends
* Move SQLi CVE checks to `CheckSQLCVEs`
* Check for protected_attributes gem
* Fix SQLi detection in chain calls in scopes
* Add GitHub-flavored Markdown output format (Greg Ose)

Add support for Rails LTS 2.3.17 and 2.3.18

Support before_action family of aliases in Rails 4

Add append_before_action, prepend_before_action, skip_before_action and
skip_action_callback

Move SQL CVEs to their own check

Check for protected_attributes gem in Rails 4 apps

and treat mass assignment as if it is allowed instead
of using strong parameters.

Fixes #475

Fix checking chained SQL calls in scopes

should fix #471