presidentbeef/brakeman — pull request #152 by oreoshake (2012-09-21 05:43:34+00:00)
Title: #143 Treat models and arrays of models as safe input to redirect_to

This is an enhancement and and a bug fix. Models use polymorphic routes and should be considered safe as do arrays. Treat arrays containing things other than models as unsafe as well.