Added a find_vulnerability_by_name to retrieve a vulnerability and
changed is_vulnerable_to? to use it
Introduce the negative_search flag. If set to true, the vuln? method
returns true if pattern has not been found
Made $logger a global variable, now it can be called everywhere
Added a status field telling the latest vuln? call result
Added an option telling the combo check to marked as vulnerable even if
only a signle check in the combo is vuln?
Added a debug attribute every single check can handle to put itself in
debug mode to enable more verbosity
Added codesake logging facilities to have them also in specs
Introduced test for CSRF
Added some debug prints if check is in debug mode
Test for CSRF protection token presence. It's a negative pattern
matching search... if the pattern has been found, the vuln? method
returns false; true otherwise.
Added some debug prints
Introduced the CSRF check and enabled this combo check to be marked as
vulnerable only if a single check is true
Added the best practice of storing sessions in database when writing a
Rails application
Renamed check
Changed the name... twice in a couple of minutes :)
Added Mass Assignment in model security check. As a best practice, model
should never have attr_accessor attributes
Merge branch 'master' of github.com:codesake/codesake_dawn