Improve route checking for HTTP verb routes.

bump ruby_parser to 3.5.0 to support ruby 2.1 syntax

Process controllers defined in multiple files

Option documentation updates

Add more Rails 4 model methods in redirect check

Fixed treatment of protected_attributes gem for Rails 4

as mentioned in #486

Fix CheckRender error with nested render calls

Fixes #484

This reverts commit 5f788264.

* Add support for RailsLTS 2.3.18.7 and 2.3.18.8
* Add support for Rails 4 `before_actions` and friends
* Move SQLi CVE checks to `CheckSQLCVEs`
* Check for protected_attributes gem
* Fix SQLi detection in chain calls in scopes
* Add GitHub-flavored Markdown output format (Greg Ose)

Add support for Rails LTS 2.3.17 and 2.3.18

Support before_action family of aliases in Rails 4

Add append_before_action, prepend_before_action, skip_before_action and
skip_action_callback

Move SQL CVEs to their own check

Check for protected_attributes gem in Rails 4 apps

and treat mass assignment as if it is allowed instead
of using strong parameters.

Fixes #475

Fix checking chained SQL calls in scopes

should fix #471

GitHub flavored markdown output

markdown formatting tweaks, github file links, and test

support subpath in repo

github url support in HTML output

use to_markdown in format call

update non ruby1.9 line count

add markdown to valid format list

escape file names

move repo validation and parsing to Brakeman#set_options

 * Fix false positives when sanitize() is used in SQL (Jeff Yip)
 * Add String#intern and Hash#symbolize_keys DoS check (Jan Rusnacko)
 * Check all arguments in Model.select for SQLi
 * Fix false positive when :host is specified in redirect
 * Handle more non-literals in routes

Check all arguments in Model.select for SQLi

Add String#intern and Hash#symbolize_keys DoS check