Signed-off-by: NChris Aniszczyk <zx@twitter.com>

Add charset for html template in order to correctly display the unicode characters

Add check for CVE-2012-3424

Improve Rails 3 route processing

Fix negative array indexing

so checks that use has_immediate_user_input? will
report it as high confidence.

like `params[:x] || nil` which should be considered
immediate user input.

Don't bail out on processing a class if an error is raised when
determining the parent class name.

it doesn't make sense to carry the controller value between route
matchers unless they are in the same block.

it just leads to confusing errors in reports like
"wrong number of arguments (0 for 1)"

especially empty arrays

message changed

Although in the future has_immediate_model? should
probably return a Match object