One year ago, Brakeman 0.0.1 was released as a gem. Then it was promptly yanked and replaced with Brakeman 0.0.2.
In celebration of this grand anniversary, there have been several new releases today.
The first is Brakeman 0.7.2, a minor release adding CVE numbers for the latest vulnerabilities and fixing how nested params/cookie accesses are handled (e.g., params[:user][:name]
is now considered a direct use of a parameter).
Next up, Brakeman has its own Twitter feed @BrakemanScanner.
Lastly, there is this new website. Look forward to tutorials and more in-depth information about how to use Brakeman effectively.
Reporting Issues
Thank you to everyone who reported bugs and contributed to this release!
Please report any issues with this release. Take a look at this guide to reporting Brakeman problems.
Hang out on GitHub for questions and discussion.