presidentbeef/brakeman — pull request #70 by presidentbeef (2012-04-06 03:21:19+00:00)
Title: Only check eval args for user input

Calls to eval were checking the whole call for user input, including the target. But if `class_eval` were called on something like a model, we don't want to warn on that if no user input was actually used in the body of the eval.