Marking a method as "safe" doesn't work in this case

[oreoshake]

Without rails_xss on a Rails 2.x project, marking a method as safe doesn't seem to work if the method call is in a block

brakeman . -s made_up

link_to 'http://brakemanscanner.org' do
   made_up
end

Triggers a warning but

link_to made_up, 'http://brakemanscanner.org' 

does not.

[presidentbeef]

Hmmm...I can't repro this.

I used this in a view:

<%= link_to 'http://brakemanscanner.org' do
  made_up params[:x]
end %>

Which raised a warning. Then ran with -s made_up and it didn't raise a warning.