Update CHANGES

* Add check for regex denial of service (Ben Toews)
Handle more cases of non-literals in routes

Fixes #461
Merge pull request #462 from presidentbeef/fix_more_routes_without_literals

Handle more cases of non-literals in routes
Avoid warning on redirects when :host is specified

unless that host is a param in which case still warn.

Fixes #464
Merge pull request #465 from presidentbeef/fix_false_positive_on_redict_with_explicit_host

Avoid warning on redirects when :host is specified
Check all arguments in Model.select for SQLi
Add String#intern and Hash#symbolize_keys DoS check
Merge pull request #470 from jrusnack/add_intern_dos_check

Add String#intern and Hash#symbolize_keys DoS check
Merge pull request #468 from presidentbeef/fix_sqli_check_in_select

Check all arguments in Model.select for SQLi
Add :sanitize to IGNORE_METHODS_IN_SQL
Add test for sanitize() in SQL strings
Merge branch 'treat_sanitize_as_safe_in_sql'
Update CHANGES

 * Fix false positives when sanitize() is used in SQL (Jeff Yip)
 * Add String#intern and Hash#symbolize_keys DoS check (Jan Rusnacko)
 * Check all arguments in Model.select for SQLi
 * Fix false positive when :host is specified in redirect
 * Handle more non-literals in routes
GFM report format

markdown formatting tweaks, github file links, and test

support subpath in repo

github url support in HTML output

use to_markdown in format call

update non ruby1.9 line count

add markdown to valid format list

escape file names

move repo validation and parsing to Brakeman#set_options
Merge remote-tracking branch 'github/gfm-output-upstream'

GitHub flavored markdown output
Fix checking chained SQL calls in scopes

should fix #471
Merge pull request #472 from presidentbeef/fix_chained_calls_in_single_line_scopes

Fix checking chained SQL calls in scopes
Request no modifications to rails2/rails3.2 tests
Check for protected_attributes gem in Rails 4 apps

and treat mass assignment as if it is allowed instead
of using strong parameters.

Fixes #475
Merge pull request #477 from presidentbeef/check_for_protected_parameters_gem

Check for protected_attributes gem in Rails 4 apps