presidentbeef/brakeman — pull request #118 by presidentbeef (2012-07-27 23:20:09+00:00)
Title: Add check for CVE-2012-3424

This adds a check for [CVE-2012-3424](https://groups.google.com/d/topic/rubyonrails-security/vxJjrc15qYM/discussion), a denial of service vulnerability caused by converting HTTP digest authentication input to symbols.

This check will raise a high confidence warning if the `authenticate_or_request_with_http_digest` or `authenticate_with_http_digest` methods are used, low confidence otherwise, assuming it is a vulnerable version of Rails.