Brakeman

A Rails-aware static analyzer that models controllers, routes and views to find injection, mass assignment and unsafe redirect flaws in Ruby code.