presidentbeef/brakeman — pull request #61 by oreoshake (2012-03-23 02:19:46+00:00)
Title: Check send

Woohoo this was an easy one. Check user supplied data being used in #send

Model.send(params[:arbitrary_method]) == bad

params[:arbitrary_method] = 'destroy_all'