presidentbeef/brakeman — pull request #468 by presidentbeef (2014-04-07 05:04:45+00:00)
Title: Check all arguments in Model.select for SQLi

As pointed out by @forced-request, Brakeman was only checking the first argument.