Upgrading brakeman 0.7 to 0.8
Review needed0.7.2 → 0.8.4Security1New8Changed6Fixed5Other1
Review neededUpgrade verdict
6 changed defaults and a security fix.
In plain terms
- Error messages are now HTML-escaped so they cannot inject markup into reports.
Must act 1 item needs code or config changes
What you must change
Security1
Escapes HTML in error messages to prevent injection in output.