presidentbeef/brakeman — pull request #219 by presidentbeef (2012-12-21 00:26:16+00:00)
Title: Ignore route information by default

Since statically determining routes is painful, error-prone, and fails silently, let's ignore routes. The only thing (besides warning on default routes) routes were used for was to determine when a controller method should implicitly render a view. That's it.

This change basically turns `-a` on by default. Also, it adds checking if a method is public before treating it as a route.

This can be turned off with `--no-assume-routes`