presidentbeef/brakeman — pull request #126 by presidentbeef (2012-08-10 21:06:59+00:00)
Title: Add check for CVE-2012-3464

As cool as it would be, this check does not find cases where unescaped single quotes would be dangerous.

Instead, it warns on vulnerable versions unless the suggested workaround is found in an initializer (overriding `ERB::Util.html_escape` with `Rack::Utils.escape_html`).