actionpack 3.0.15 → 3.0.16

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of actionpack might be problematic. Click here for more details.

Files changed (4) hide show
  1. data/CHANGELOG +4 -0
  2. data/lib/action_controller/metal/http_authentication.rb +2 -2
  3. data/lib/action_pack/version.rb +1 -1
  4. metadata +124 -143
data/CHANGELOG CHANGED
@@ -1,3 +1,7 @@
1
+ ## Rails 3.0.16 (Jul 26, 2012)
2
+
3
+ * Do not convert digest auth strings to symbols. CVE-2012-3424
4
+
1
5
  ## Rails 3.0.14 (Jun 12, 2012)
2
6
 
3
7
  * nil is removed from array parameter values
data/lib/action_controller/metal/http_authentication.rb CHANGED
@@ -217,9 +217,9 @@ module ActionController
217
217
  end
218
218
 
219
219
  def decode_credentials(header)
220
- Hash[header.to_s.gsub(/^Digest\s+/,'').split(',').map do |pair|
220
+ HashWithIndifferentAccess[header.to_s.gsub(/^Digest\s+/,'').split(',').map do |pair|
221
221
  key, value = pair.split('=', 2)
222
- [key.strip.to_sym, value.to_s.gsub(/^"|"$/,'').gsub(/'/, '')]
222
+ [key.strip, value.to_s.gsub(/^"|"$/,'').delete('\'')]
223
223
  end]
224
224
  end
225
225
 
data/lib/action_pack/version.rb CHANGED
@@ -2,7 +2,7 @@ module ActionPack
2
2
  module VERSION #:nodoc:
3
3
  MAJOR = 3
4
4
  MINOR = 0
5
- TINY = 15
5
+ TINY = 16
6
6
  PRE = nil
7
7
 
8
8
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join('.')
metadata CHANGED
@@ -1,175 +1,167 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: actionpack
3
- version: !ruby/object:Gem::Version
4
- hash: 25
3
+ version: !ruby/object:Gem::Version
4
+ version: 3.0.16
5
5
  prerelease:
6
- segments:
7
- - 3
8
- - 0
9
- - 15
10
- version: 3.0.15
11
6
  platform: ruby
12
- authors:
7
+ authors:
13
8
  - David Heinemeier Hansson
14
9
  autorequire:
15
10
  bindir: bin
16
11
  cert_chain: []
17
-
18
- date: 2012-06-13 00:00:00 Z
19
- dependencies:
20
- - !ruby/object:Gem::Dependency
12
+ date: 2012-07-26 00:00:00.000000000 Z
13
+ dependencies:
14
+ - !ruby/object:Gem::Dependency
21
15
  name: activesupport
22
- prerelease: false
23
- requirement: &id001 !ruby/object:Gem::Requirement
16
+ requirement: !ruby/object:Gem::Requirement
24
17
  none: false
25
- requirements:
26
- - - "="
27
- - !ruby/object:Gem::Version
28
- hash: 25
29
- segments:
30
- - 3
31
- - 0
32
- - 15
33
- version: 3.0.15
18
+ requirements:
19
+ - - '='
20
+ - !ruby/object:Gem::Version
21
+ version: 3.0.16
34
22
  type: :runtime
35
- version_requirements: *id001
36
- - !ruby/object:Gem::Dependency
37
- name: activemodel
38
23
  prerelease: false
39
- requirement: &id002 !ruby/object:Gem::Requirement
24
+ version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
26
+ requirements:
27
+ - - '='
28
+ - !ruby/object:Gem::Version
29
+ version: 3.0.16
30
+ - !ruby/object:Gem::Dependency
31
+ name: activemodel
32
+ requirement: !ruby/object:Gem::Requirement
40
33
  none: false
41
- requirements:
42
- - - "="
43
- - !ruby/object:Gem::Version
44
- hash: 25
45
- segments:
46
- - 3
47
- - 0
48
- - 15
49
- version: 3.0.15
34
+ requirements:
35
+ - - '='
36
+ - !ruby/object:Gem::Version
37
+ version: 3.0.16
50
38
  type: :runtime
51
- version_requirements: *id002
52
- - !ruby/object:Gem::Dependency
53
- name: builder
54
39
  prerelease: false
55
- requirement: &id003 !ruby/object:Gem::Requirement
40
+ version_requirements: !ruby/object:Gem::Requirement
56
41
  none: false
57
- requirements:
42
+ requirements:
43
+ - - '='
44
+ - !ruby/object:Gem::Version
45
+ version: 3.0.16
46
+ - !ruby/object:Gem::Dependency
47
+ name: builder
48
+ requirement: !ruby/object:Gem::Requirement
49
+ none: false
50
+ requirements:
58
51
  - - ~>
59
- - !ruby/object:Gem::Version
60
- hash: 15
61
- segments:
62
- - 2
63
- - 1
64
- - 2
52
+ - !ruby/object:Gem::Version
65
53
  version: 2.1.2
66
54
  type: :runtime
67
- version_requirements: *id003
68
- - !ruby/object:Gem::Dependency
69
- name: i18n
70
55
  prerelease: false
71
- requirement: &id004 !ruby/object:Gem::Requirement
56
+ version_requirements: !ruby/object:Gem::Requirement
72
57
  none: false
73
- requirements:
58
+ requirements:
74
59
  - - ~>
75
- - !ruby/object:Gem::Version
76
- hash: 11
77
- segments:
78
- - 0
79
- - 5
80
- - 0
60
+ - !ruby/object:Gem::Version
61
+ version: 2.1.2
62
+ - !ruby/object:Gem::Dependency
63
+ name: i18n
64
+ requirement: !ruby/object:Gem::Requirement
65
+ none: false
66
+ requirements:
67
+ - - ~>
68
+ - !ruby/object:Gem::Version
81
69
  version: 0.5.0
82
70
  type: :runtime
83
- version_requirements: *id004
84
- - !ruby/object:Gem::Dependency
85
- name: rack
86
71
  prerelease: false
87
- requirement: &id005 !ruby/object:Gem::Requirement
72
+ version_requirements: !ruby/object:Gem::Requirement
73
+ none: false
74
+ requirements:
75
+ - - ~>
76
+ - !ruby/object:Gem::Version
77
+ version: 0.5.0
78
+ - !ruby/object:Gem::Dependency
79
+ name: rack
80
+ requirement: !ruby/object:Gem::Requirement
88
81
  none: false
89
- requirements:
82
+ requirements:
90
83
  - - ~>
91
- - !ruby/object:Gem::Version
92
- hash: 21
93
- segments:
94
- - 1
95
- - 2
96
- - 5
84
+ - !ruby/object:Gem::Version
97
85
  version: 1.2.5
98
86
  type: :runtime
99
- version_requirements: *id005
100
- - !ruby/object:Gem::Dependency
101
- name: rack-test
102
87
  prerelease: false
103
- requirement: &id006 !ruby/object:Gem::Requirement
88
+ version_requirements: !ruby/object:Gem::Requirement
104
89
  none: false
105
- requirements:
90
+ requirements:
106
91
  - - ~>
107
- - !ruby/object:Gem::Version
108
- hash: 5
109
- segments:
110
- - 0
111
- - 5
112
- - 7
92
+ - !ruby/object:Gem::Version
93
+ version: 1.2.5
94
+ - !ruby/object:Gem::Dependency
95
+ name: rack-test
96
+ requirement: !ruby/object:Gem::Requirement
97
+ none: false
98
+ requirements:
99
+ - - ~>
100
+ - !ruby/object:Gem::Version
113
101
  version: 0.5.7
114
102
  type: :runtime
115
- version_requirements: *id006
116
- - !ruby/object:Gem::Dependency
117
- name: rack-mount
118
103
  prerelease: false
119
- requirement: &id007 !ruby/object:Gem::Requirement
104
+ version_requirements: !ruby/object:Gem::Requirement
105
+ none: false
106
+ requirements:
107
+ - - ~>
108
+ - !ruby/object:Gem::Version
109
+ version: 0.5.7
110
+ - !ruby/object:Gem::Dependency
111
+ name: rack-mount
112
+ requirement: !ruby/object:Gem::Requirement
120
113
  none: false
121
- requirements:
114
+ requirements:
122
115
  - - ~>
123
- - !ruby/object:Gem::Version
124
- hash: 27
125
- segments:
126
- - 0
127
- - 6
128
- - 14
116
+ - !ruby/object:Gem::Version
129
117
  version: 0.6.14
130
118
  type: :runtime
131
- version_requirements: *id007
132
- - !ruby/object:Gem::Dependency
133
- name: tzinfo
134
119
  prerelease: false
135
- requirement: &id008 !ruby/object:Gem::Requirement
120
+ version_requirements: !ruby/object:Gem::Requirement
121
+ none: false
122
+ requirements:
123
+ - - ~>
124
+ - !ruby/object:Gem::Version
125
+ version: 0.6.14
126
+ - !ruby/object:Gem::Dependency
127
+ name: tzinfo
128
+ requirement: !ruby/object:Gem::Requirement
136
129
  none: false
137
- requirements:
130
+ requirements:
138
131
  - - ~>
139
- - !ruby/object:Gem::Version
140
- hash: 61
141
- segments:
142
- - 0
143
- - 3
144
- - 23
132
+ - !ruby/object:Gem::Version
145
133
  version: 0.3.23
146
134
  type: :runtime
147
- version_requirements: *id008
148
- - !ruby/object:Gem::Dependency
149
- name: erubis
150
135
  prerelease: false
151
- requirement: &id009 !ruby/object:Gem::Requirement
136
+ version_requirements: !ruby/object:Gem::Requirement
137
+ none: false
138
+ requirements:
139
+ - - ~>
140
+ - !ruby/object:Gem::Version
141
+ version: 0.3.23
142
+ - !ruby/object:Gem::Dependency
143
+ name: erubis
144
+ requirement: !ruby/object:Gem::Requirement
152
145
  none: false
153
- requirements:
146
+ requirements:
154
147
  - - ~>
155
- - !ruby/object:Gem::Version
156
- hash: 27
157
- segments:
158
- - 2
159
- - 6
160
- - 6
148
+ - !ruby/object:Gem::Version
161
149
  version: 2.6.6
162
150
  type: :runtime
163
- version_requirements: *id009
164
- description: Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.
151
+ prerelease: false
152
+ version_requirements: !ruby/object:Gem::Requirement
153
+ none: false
154
+ requirements:
155
+ - - ~>
156
+ - !ruby/object:Gem::Version
157
+ version: 2.6.6
158
+ description: Web apps on Rails. Simple, battle-tested conventions for building and
159
+ testing MVC web applications. Works with any Rack-compatible server.
165
160
  email: david@loudthinking.com
166
161
  executables: []
167
-
168
162
  extensions: []
169
-
170
163
  extra_rdoc_files: []
171
-
172
- files:
164
+ files:
173
165
  - CHANGELOG
174
166
  - README.rdoc
175
167
  - MIT-LICENSE
@@ -336,38 +328,27 @@ files:
336
328
  - lib/action_view.rb
337
329
  homepage: http://www.rubyonrails.org
338
330
  licenses: []
339
-
340
331
  post_install_message:
341
332
  rdoc_options: []
342
-
343
- require_paths:
333
+ require_paths:
344
334
  - lib
345
- required_ruby_version: !ruby/object:Gem::Requirement
335
+ required_ruby_version: !ruby/object:Gem::Requirement
346
336
  none: false
347
- requirements:
348
- - - ">="
349
- - !ruby/object:Gem::Version
350
- hash: 57
351
- segments:
352
- - 1
353
- - 8
354
- - 7
337
+ requirements:
338
+ - - ! '>='
339
+ - !ruby/object:Gem::Version
355
340
  version: 1.8.7
356
- required_rubygems_version: !ruby/object:Gem::Requirement
341
+ required_rubygems_version: !ruby/object:Gem::Requirement
357
342
  none: false
358
- requirements:
359
- - - ">="
360
- - !ruby/object:Gem::Version
361
- hash: 3
362
- segments:
363
- - 0
364
- version: "0"
365
- requirements:
343
+ requirements:
344
+ - - ! '>='
345
+ - !ruby/object:Gem::Version
346
+ version: '0'
347
+ requirements:
366
348
  - none
367
349
  rubyforge_project: actionpack
368
- rubygems_version: 1.8.22
350
+ rubygems_version: 1.8.23
369
351
  signing_key:
370
352
  specification_version: 3
371
353
  summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
372
354
  test_files: []
373
-