Add option to assume all controller methods are actions

bin/brakeman

@@ -34,6 +34,10 @@ OptionParser.new do |opts|
   opts.separator ""
   opts.separator "Scanning options:"
 
+  opts.on "-a", "--assume-routes", "Assume all controller methods are actions" do
+    options[:assume_all_routes] = true
+  end
+
   opts.on "--ignore-model-output", "Consider model attributes XSS-safe" do
     options[:ignore_model_output] = true
   end

lib/processors/controller_alias_processor.rb

@@ -131,7 +131,7 @@ class ControllerAliasProcessor < AliasProcessor
 
   #Returns true if the given method name is also a route
   def route? method
-    return true if @tracker.routes[:allow_all_actions]
+    return true if @tracker.routes[:allow_all_actions] or OPTIONS[:assume_all_routes]
     routes = @tracker.routes[@current_class]
     routes and (routes == :allow_all_actions or routes.include? method)
   end