CHANGES.md in brakeman-4.5.0 vs CHANGES.md in brakeman-4.5.1

- old
+ new

@@ -1,4 +1,19 @@ +# 4.5.1 + +* Add `Brakeman::FilePath` to represent file paths +* Handle trailing comma in block args +* Properly handle empty partial name +* Use relative paths for `__FILE__` +* Convert `!!` calls to boolean value +* Add optional check for `config.force_ssl` +* Remove code for Ruby versions prior to 1.9 +* Check `link_to` with block for href XSS +* Add SQL injection checks for `find_or_create_by` and friends +* Add deserialization warning for `Oj.load/object_load` +* Add initial Rails 6 support +* Add SQL injection checks for `destroy_by`/`delete_by` + # 4.5.0 * Update `ruby_parser`, use `ruby_parser-legacy` * More thoroughly handle `Shellwords` escaping * Handle non-integer version number comparisons