提交 66fb4de1 编写于 作者: J Justin Collins

If Rails version is in Gemfile, use it

and process Gemfile before config, because config location
depends on Rails version.

Fixes #398
上级 c3525e80
......@@ -19,6 +19,11 @@ class Brakeman::GemProcessor < Brakeman::BaseProcessor
@tracker.config[:rails_version] = $1
end
if @tracker.config[:rails_version] =~ /^(3|4)\./ and not @tracker.options[:rails3]
@tracker.options[:rails3] = true
Brakeman.notify "[Notice] Detected Rails #$1 application"
end
if @tracker.config[:gems][:rails_xss]
@tracker.config[:escape_html] = true
......
......@@ -47,10 +47,10 @@ class Brakeman::Scanner
#Process everything in the Rails application
def process
Brakeman.notify "Processing configuration..."
process_config
Brakeman.notify "Processing gems..."
process_gems
Brakeman.notify "Processing configuration..."
process_config
Brakeman.notify "Processing initializers..."
process_initializers
Brakeman.notify "Processing libs..."
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册