FEATURES in brakeman-min-3.7.2 vs FEATURES in brakeman-min-4.0.0

- old
+ new

@@ -1,6 +1,6 @@ Can detect: --Possibly unescaped model attributes or parameters in views (Cross Site Scripting) +-Possibly unescaped model attributes or parameters in views (Cross-Site Scripting) -Bad string interpolation in calls to Model.find, Model.last, Model.first, etc., as well as chained calls (SQL Injection) -String interpolation in find_by_sql (SQL Injection) -String interpolation or params in calls to system, exec, and syscall and `` (Command Injection) -Unrestricted mass assignments -Global restriction of mass assignment