presidentbeef/brakeman — pull request #436 by presidentbeef (2014-01-31 07:57:31+00:00)
Title: Expand methods checked for SQLi significantly

Expands SQL methods to include methods from `ActiveRecord::ConnectionAdapters::DatabaseStatements` (e.g., `Model.connection.execute`) as well as `destroy_all` and `delete_all`.

Also ignores values which are escaped with one of the `quote*` methods.