Update CHANGES

* Fix false positives when sanitize() is used in SQL (Jeff Yip) * Add String#intern and Hash#symbolize_keys DoS check (Jan Rusnacko) * Check all arguments in Model.select for SQLi * Fix false positive when :host is specified in redirect * Handle more non-literals in routes
presidentbeef · Apr 11, 2014 · c093c3d · c093c3d
1 parent cd9093d
commit c093c3d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/CHANGES b/CHANGES
@@ -1,5 +1,10 @@
 # Unreleased
 
+ * Fix false positives when sanitize() is used in SQL (Jeff Yip)
+ * Add String#intern and Hash#symbolize_keys DoS check (Jan Rusnacko)
+ * Check all arguments in Model.select for SQLi
+ * Fix false positive when :host is specified in redirect
+ * Handle more non-literals in routes
  * Add check for regex denial of service (Ben Toews) 
 
 # 2.4.3