Better config locations, warn on old deprecated ones

ignore lock

make bundle && bundle exec rake work so we do not need an explanation of...

make license easier to discover + visible on rubygems.org/automated tool...

Call indexing performance improvement

Ignore more Rails 2 route options

The only thing this is used for is matching regexes
against known call targets. We only want to store these
strings if the call target is a symbol, not a full Sexp.
Big performance improvement for large apps.

per deprecation warning

ugh this is why I wrote those helpers...

Several false positive fixes for redirect check

Do not process appending to HAML template variable

Use multi_json instead of json_pure gem

gotta keep @tw-ngreen happy

fixes #111

to other methods. E.g.,

  redirect_to blah(User.first)

Don't warn on safe values as args, second argument,
or model associations

fixes #98

Don't report calls to `to_i` on user input as XSS

Fix YAML.load false positive