presidentbeef/brakeman — pull request #139 by presidentbeef (2012-08-31 02:11:52+00:00)
Title: Fix `redirect_to` false negative

Per #120, Brakeman was accepting `only_path => true` in any argument to `redirect_to`. However, it only makes sense (and works) as part of the first argument to `redirect_to`. The [docs](http://api.rubyonrails.org/classes/ActionController/Redirecting.html#method-i-redirect_to) confirm this.