Check all arguments in Model.select for SQLi
Add String#intern and Hash#symbolize_keys DoS check
Merge pull request #470 from jrusnack/add_intern_dos_check

Add String#intern and Hash#symbolize_keys DoS check
Merge pull request #468 from presidentbeef/fix_sqli_check_in_select

Check all arguments in Model.select for SQLi
Add :sanitize to IGNORE_METHODS_IN_SQL
Add test for sanitize() in SQL strings
Merge branch 'treat_sanitize_as_safe_in_sql'
Update CHANGES

 * Fix false positives when sanitize() is used in SQL (Jeff Yip)
 * Add String#intern and Hash#symbolize_keys DoS check (Jan Rusnacko)
 * Check all arguments in Model.select for SQLi
 * Fix false positive when :host is specified in redirect
 * Handle more non-literals in routes
GFM report format

markdown formatting tweaks, github file links, and test

support subpath in repo

github url support in HTML output

use to_markdown in format call

update non ruby1.9 line count

add markdown to valid format list

escape file names

move repo validation and parsing to Brakeman#set_options
Merge remote-tracking branch 'github/gfm-output-upstream'

GitHub flavored markdown output
Fix checking chained SQL calls in scopes

should fix #471
Merge pull request #472 from presidentbeef/fix_chained_calls_in_single_line_scopes

Fix checking chained SQL calls in scopes
Request no modifications to rails2/rails3.2 tests
Check for protected_attributes gem in Rails 4 apps

and treat mass assignment as if it is allowed instead
of using strong parameters.

Fixes #475
Merge pull request #477 from presidentbeef/check_for_protected_parameters_gem

Check for protected_attributes gem in Rails 4 apps
Move SQL CVEs to their own check
Merge pull request #478 from presidentbeef/move_sql_cves

Move SQL CVEs to their own check
Support before_action family of aliases in Rails 4

Add append_before_action, prepend_before_action, skip_before_action and
skip_action_callback
Add support for Rails LTS 2.3.17 and 2.3.18
Merge pull request #480 from presidentbeef/support_rails4_before_actions

Support before_action family of aliases in Rails 4