presidentbeef/brakeman — Issue #52: Marking a method as "safe" doesn't work in this case
Author: oreoshake
Created: 2012-03-06 23:30:38+00:00
State: open

Without rails_xss on a Rails 2.x project, marking a method as safe doesn't seem to work if the method call is in a block

brakeman . -s made_up

```ruby
link_to 'http://brakemanscanner.org' do
made_up
end
```

Triggers a warning but

```ruby
link_to made_up, 'http://brakemanscanner.org'
```

does not.