Jason Barnabe

Allow users to agree with script reviews to prevent duplicate discussions. This would affect the ratings calculations.

@mcasimir Can you archive/mark-as-read-only this project. Per the readme note, everyone should be using https://github.com/tigrish/devise-i18n now.

False positive - SQL injection when using IDs in second query

8

```ruby newest_sv_ids = Script.connection.select_values('SELECT MAX(id) FROM script_versions GROUP BY script_id') script_to_code_ids = Script.connection.select_rows("SELECT script_id, script_code_id FROM script_versions WHERE ID IN (#{newest_sv_ids.join(',')})") ``` Could brakeman see based on the SQL that...

False positive - unescaped model attribute with escape_javascript

2

```ruby labels: [], ``` "Unescaped model attribute", but it's being escaped.

XSS false positive when doing math on parameter values

1

```haml :javascript unitCount = #{params[:desired_package_quantity]}; // 'Unescaped parameter value' warning - correct unitCount = #{params[:desired_package_quantity].to_f}; // No warning - correct unitCount = #{params[:desired_package_quantity].to_f * 2}; // 'Unescaped parameter value' warning...

Do not prune ignore file entries for other types when running specific checks

1

If I run `brakeman -t Send -I`, I get the option to "Prune obsolete ignored warnings". This should only prune the ignored warnings for the "Send" check, not all the...

```ruby s.id)).html_safe}.join(', ').html_safe%> ``` "Unescaped model attribute". The model attribute goes through link_to first and so should be OK.