<commit_before># Codesake Dawn - roadmap

This is an ongoing roadmap for the dawn source code review tool.

Dawn is a static analysis security scanner for ruby written web applications.
It supports [Sinatra](http://www.sinatrarb.com),
[Padrino](http://www.padrinorb.com) and [Ruby on Rails](http://rubyonrails.org)
frameworks. 

This is an ongoing roadmap for the project.

_latest update: Mon May 13 18:56:06 CEST 2013_

## Version 0.50 (2013-05-13) - First public release

* adding test for CVE\_2013\_0269
* adding test for CVE\_2013\_0155
* adding test for CVE\_2011\_2931
* adding test for CVE\_2012\_3465

## Version 0.60

* adding cucumber dependency
* make output less verbose. Only vulnerabilities and severity will be shown 
* adding a '--verbose' option to see also the whole knowledge base info about each findings
* grepping views for XSS attempts (sinatra)

## Version 0.70 

* add ruby\_parser dependency
* support sinatra application controllers parsing for XSS
* grepping views for XSS attempts (rails)

## Version 0.80

* support sinatra application controllers parsing for SQLi
* support rails application controllers parsing for XSS
* grepping views for XSS attempts (padrino)

## Version 1.00

* dedicated web site under dawn.codesake.com
* support rails application controllers parsing for SQLi
* support padrino application controllers parsing for XSS
* support padrino application controllers parsing for SQLi
* integration with [codesake.com](http://codesake.com) with a public available
  APIs to be consumed by codesake users.

## Version 1.50

* support for node.js<commit_msg>Adding '--output' and JSON output format as 0.60 release goals<commit_after># Codesake Dawn - roadmap

This is an ongoing roadmap for the dawn source code review tool.

Dawn is a static analysis security scanner for ruby written web applications.
It supports [Sinatra](http://www.sinatrarb.com),
[Padrino](http://www.padrinorb.com) and [Ruby on Rails](http://rubyonrails.org)
frameworks. 

This is an ongoing roadmap for the project.

_latest update: Mon May 13 18:56:06 CEST 2013_

## Version 0.50 (2013-05-13) - First public release

* adding test for CVE\_2013\_0269
* adding test for CVE\_2013\_0155
* adding test for CVE\_2011\_2931
* adding test for CVE\_2012\_3465

## Version 0.60

* adding cucumber dependency
* make output less verbose. Only vulnerabilities and severity will be shown 
* adding a '--verbose' option to see also the whole knowledge base info about each findings
* adding a '--output' option
* support JSON output
* grepping views for XSS attempts (sinatra)

## Version 0.70 

* add ruby\_parser dependency
* support sinatra application controllers parsing for XSS
* grepping views for XSS attempts (rails)

## Version 0.80

* support sinatra application controllers parsing for SQLi
* support rails application controllers parsing for XSS
* grepping views for XSS attempts (padrino)

## Version 1.00

* dedicated web site under dawn.codesake.com
* support rails application controllers parsing for SQLi
* support padrino application controllers parsing for XSS
* support padrino application controllers parsing for SQLi
* integration with [codesake.com](http://codesake.com) with a public available
  APIs to be consumed by codesake users.

## Version 1.50

* support for node.js
{'fraction_non_alphanumeric': 0.07280966767371601, 'fraction_numerical': 0.043202416918429, 'mean_word_length': 4.4457236842105265, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 4, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4897091', 'n_tokens_mistral': 1070, 'n_tokens_neox': 912, 'n_words': 413}