actionpack 3.2.7.rc1 → 3.2.7

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of actionpack might be problematic. Click here for more details.

Files changed (4) hide show
  1. data/CHANGELOG.md +2 -0
  2. data/lib/action_controller/metal/http_authentication.rb +2 -2
  3. data/lib/action_pack/version.rb +1 -1
  4. metadata +137 -163
data/CHANGELOG.md CHANGED
@@ -1,5 +1,7 @@
1
1
  ## Rails 3.2.7 (unreleased) ##
2
2
 
3
+ * Do not convert digest auth strings to symbols. CVE-2012-3424
4
+
3
5
  * Bump Journey requirements to 1.0.4
4
6
 
5
7
  * Add support for optional root segments containing slashes
data/lib/action_controller/metal/http_authentication.rb CHANGED
@@ -227,9 +227,9 @@ module ActionController
227
227
  end
228
228
 
229
229
  def decode_credentials(header)
230
- Hash[header.to_s.gsub(/^Digest\s+/,'').split(',').map do |pair|
230
+ HashWithIndifferentAccess[header.to_s.gsub(/^Digest\s+/,'').split(',').map do |pair|
231
231
  key, value = pair.split('=', 2)
232
- [key.strip.to_sym, value.to_s.gsub(/^"|"$/,'').gsub(/'/, '')]
232
+ [key.strip, value.to_s.gsub(/^"|"$/,'').delete('\'')]
233
233
  end]
234
234
  end
235
235
 
data/lib/action_pack/version.rb CHANGED
@@ -3,7 +3,7 @@ module ActionPack
3
3
  MAJOR = 3
4
4
  MINOR = 2
5
5
  TINY = 7
6
- PRE = "rc1"
6
+ PRE = nil
7
7
 
8
8
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join('.')
9
9
  end
metadata CHANGED
@@ -1,196 +1,183 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: actionpack
3
- version: !ruby/object:Gem::Version
4
- hash: 2249827423
5
- prerelease: 6
6
- segments:
7
- - 3
8
- - 2
9
- - 7
10
- - rc
11
- - 1
12
- version: 3.2.7.rc1
3
+ version: !ruby/object:Gem::Version
4
+ version: 3.2.7
5
+ prerelease:
13
6
  platform: ruby
14
- authors:
7
+ authors:
15
8
  - David Heinemeier Hansson
16
9
  autorequire:
17
10
  bindir: bin
18
11
  cert_chain: []
19
-
20
- date: 2012-07-23 00:00:00 Z
21
- dependencies:
22
- - !ruby/object:Gem::Dependency
12
+ date: 2012-07-26 00:00:00.000000000 Z
13
+ dependencies:
14
+ - !ruby/object:Gem::Dependency
23
15
  name: activesupport
24
- prerelease: false
25
- requirement: &id001 !ruby/object:Gem::Requirement
16
+ requirement: !ruby/object:Gem::Requirement
26
17
  none: false
27
- requirements:
28
- - - "="
29
- - !ruby/object:Gem::Version
30
- hash: 2249827423
31
- segments:
32
- - 3
33
- - 2
34
- - 7
35
- - rc
36
- - 1
37
- version: 3.2.7.rc1
18
+ requirements:
19
+ - - '='
20
+ - !ruby/object:Gem::Version
21
+ version: 3.2.7
38
22
  type: :runtime
39
- version_requirements: *id001
40
- - !ruby/object:Gem::Dependency
41
- name: activemodel
42
23
  prerelease: false
43
- requirement: &id002 !ruby/object:Gem::Requirement
24
+ version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
26
+ requirements:
27
+ - - '='
28
+ - !ruby/object:Gem::Version
29
+ version: 3.2.7
30
+ - !ruby/object:Gem::Dependency
31
+ name: activemodel
32
+ requirement: !ruby/object:Gem::Requirement
44
33
  none: false
45
- requirements:
46
- - - "="
47
- - !ruby/object:Gem::Version
48
- hash: 2249827423
49
- segments:
50
- - 3
51
- - 2
52
- - 7
53
- - rc
54
- - 1
55
- version: 3.2.7.rc1
34
+ requirements:
35
+ - - '='
36
+ - !ruby/object:Gem::Version
37
+ version: 3.2.7
56
38
  type: :runtime
57
- version_requirements: *id002
58
- - !ruby/object:Gem::Dependency
59
- name: rack-cache
60
39
  prerelease: false
61
- requirement: &id003 !ruby/object:Gem::Requirement
40
+ version_requirements: !ruby/object:Gem::Requirement
41
+ none: false
42
+ requirements:
43
+ - - '='
44
+ - !ruby/object:Gem::Version
45
+ version: 3.2.7
46
+ - !ruby/object:Gem::Dependency
47
+ name: rack-cache
48
+ requirement: !ruby/object:Gem::Requirement
62
49
  none: false
63
- requirements:
50
+ requirements:
64
51
  - - ~>
65
- - !ruby/object:Gem::Version
66
- hash: 11
67
- segments:
68
- - 1
69
- - 2
70
- version: "1.2"
52
+ - !ruby/object:Gem::Version
53
+ version: '1.2'
71
54
  type: :runtime
72
- version_requirements: *id003
73
- - !ruby/object:Gem::Dependency
74
- name: builder
75
55
  prerelease: false
76
- requirement: &id004 !ruby/object:Gem::Requirement
56
+ version_requirements: !ruby/object:Gem::Requirement
57
+ none: false
58
+ requirements:
59
+ - - ~>
60
+ - !ruby/object:Gem::Version
61
+ version: '1.2'
62
+ - !ruby/object:Gem::Dependency
63
+ name: builder
64
+ requirement: !ruby/object:Gem::Requirement
77
65
  none: false
78
- requirements:
66
+ requirements:
79
67
  - - ~>
80
- - !ruby/object:Gem::Version
81
- hash: 7
82
- segments:
83
- - 3
84
- - 0
85
- - 0
68
+ - !ruby/object:Gem::Version
86
69
  version: 3.0.0
87
70
  type: :runtime
88
- version_requirements: *id004
89
- - !ruby/object:Gem::Dependency
90
- name: rack
91
71
  prerelease: false
92
- requirement: &id005 !ruby/object:Gem::Requirement
72
+ version_requirements: !ruby/object:Gem::Requirement
93
73
  none: false
94
- requirements:
74
+ requirements:
95
75
  - - ~>
96
- - !ruby/object:Gem::Version
97
- hash: 7
98
- segments:
99
- - 1
100
- - 4
101
- - 0
76
+ - !ruby/object:Gem::Version
77
+ version: 3.0.0
78
+ - !ruby/object:Gem::Dependency
79
+ name: rack
80
+ requirement: !ruby/object:Gem::Requirement
81
+ none: false
82
+ requirements:
83
+ - - ~>
84
+ - !ruby/object:Gem::Version
102
85
  version: 1.4.0
103
86
  type: :runtime
104
- version_requirements: *id005
105
- - !ruby/object:Gem::Dependency
106
- name: rack-test
107
87
  prerelease: false
108
- requirement: &id006 !ruby/object:Gem::Requirement
88
+ version_requirements: !ruby/object:Gem::Requirement
109
89
  none: false
110
- requirements:
90
+ requirements:
111
91
  - - ~>
112
- - !ruby/object:Gem::Version
113
- hash: 5
114
- segments:
115
- - 0
116
- - 6
117
- - 1
92
+ - !ruby/object:Gem::Version
93
+ version: 1.4.0
94
+ - !ruby/object:Gem::Dependency
95
+ name: rack-test
96
+ requirement: !ruby/object:Gem::Requirement
97
+ none: false
98
+ requirements:
99
+ - - ~>
100
+ - !ruby/object:Gem::Version
118
101
  version: 0.6.1
119
102
  type: :runtime
120
- version_requirements: *id006
121
- - !ruby/object:Gem::Dependency
122
- name: journey
123
103
  prerelease: false
124
- requirement: &id007 !ruby/object:Gem::Requirement
104
+ version_requirements: !ruby/object:Gem::Requirement
125
105
  none: false
126
- requirements:
106
+ requirements:
127
107
  - - ~>
128
- - !ruby/object:Gem::Version
129
- hash: 31
130
- segments:
131
- - 1
132
- - 0
133
- - 4
108
+ - !ruby/object:Gem::Version
109
+ version: 0.6.1
110
+ - !ruby/object:Gem::Dependency
111
+ name: journey
112
+ requirement: !ruby/object:Gem::Requirement
113
+ none: false
114
+ requirements:
115
+ - - ~>
116
+ - !ruby/object:Gem::Version
134
117
  version: 1.0.4
135
118
  type: :runtime
136
- version_requirements: *id007
137
- - !ruby/object:Gem::Dependency
138
- name: sprockets
139
119
  prerelease: false
140
- requirement: &id008 !ruby/object:Gem::Requirement
120
+ version_requirements: !ruby/object:Gem::Requirement
141
121
  none: false
142
- requirements:
122
+ requirements:
143
123
  - - ~>
144
- - !ruby/object:Gem::Version
145
- hash: 13
146
- segments:
147
- - 2
148
- - 1
149
- - 3
124
+ - !ruby/object:Gem::Version
125
+ version: 1.0.4
126
+ - !ruby/object:Gem::Dependency
127
+ name: sprockets
128
+ requirement: !ruby/object:Gem::Requirement
129
+ none: false
130
+ requirements:
131
+ - - ~>
132
+ - !ruby/object:Gem::Version
150
133
  version: 2.1.3
151
134
  type: :runtime
152
- version_requirements: *id008
153
- - !ruby/object:Gem::Dependency
154
- name: erubis
155
135
  prerelease: false
156
- requirement: &id009 !ruby/object:Gem::Requirement
136
+ version_requirements: !ruby/object:Gem::Requirement
137
+ none: false
138
+ requirements:
139
+ - - ~>
140
+ - !ruby/object:Gem::Version
141
+ version: 2.1.3
142
+ - !ruby/object:Gem::Dependency
143
+ name: erubis
144
+ requirement: !ruby/object:Gem::Requirement
157
145
  none: false
158
- requirements:
146
+ requirements:
159
147
  - - ~>
160
- - !ruby/object:Gem::Version
161
- hash: 19
162
- segments:
163
- - 2
164
- - 7
165
- - 0
148
+ - !ruby/object:Gem::Version
166
149
  version: 2.7.0
167
150
  type: :runtime
168
- version_requirements: *id009
169
- - !ruby/object:Gem::Dependency
170
- name: tzinfo
171
151
  prerelease: false
172
- requirement: &id010 !ruby/object:Gem::Requirement
152
+ version_requirements: !ruby/object:Gem::Requirement
173
153
  none: false
174
- requirements:
154
+ requirements:
175
155
  - - ~>
176
- - !ruby/object:Gem::Version
177
- hash: 41
178
- segments:
179
- - 0
180
- - 3
181
- - 29
156
+ - !ruby/object:Gem::Version
157
+ version: 2.7.0
158
+ - !ruby/object:Gem::Dependency
159
+ name: tzinfo
160
+ requirement: !ruby/object:Gem::Requirement
161
+ none: false
162
+ requirements:
163
+ - - ~>
164
+ - !ruby/object:Gem::Version
182
165
  version: 0.3.29
183
166
  type: :development
184
- version_requirements: *id010
185
- description: Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.
167
+ prerelease: false
168
+ version_requirements: !ruby/object:Gem::Requirement
169
+ none: false
170
+ requirements:
171
+ - - ~>
172
+ - !ruby/object:Gem::Version
173
+ version: 0.3.29
174
+ description: Web apps on Rails. Simple, battle-tested conventions for building and
175
+ testing MVC web applications. Works with any Rack-compatible server.
186
176
  email: david@loudthinking.com
187
177
  executables: []
188
-
189
178
  extensions: []
190
-
191
179
  extra_rdoc_files: []
192
-
193
- files:
180
+ files:
194
181
  - CHANGELOG.md
195
182
  - README.rdoc
196
183
  - MIT-LICENSE
@@ -384,40 +371,27 @@ files:
384
371
  - lib/sprockets/static_compiler.rb
385
372
  homepage: http://www.rubyonrails.org
386
373
  licenses: []
387
-
388
374
  post_install_message:
389
375
  rdoc_options: []
390
-
391
- require_paths:
376
+ require_paths:
392
377
  - lib
393
- required_ruby_version: !ruby/object:Gem::Requirement
378
+ required_ruby_version: !ruby/object:Gem::Requirement
394
379
  none: false
395
- requirements:
396
- - - ">="
397
- - !ruby/object:Gem::Version
398
- hash: 57
399
- segments:
400
- - 1
401
- - 8
402
- - 7
380
+ requirements:
381
+ - - ! '>='
382
+ - !ruby/object:Gem::Version
403
383
  version: 1.8.7
404
- required_rubygems_version: !ruby/object:Gem::Requirement
384
+ required_rubygems_version: !ruby/object:Gem::Requirement
405
385
  none: false
406
- requirements:
407
- - - ">"
408
- - !ruby/object:Gem::Version
409
- hash: 25
410
- segments:
411
- - 1
412
- - 3
413
- - 1
414
- version: 1.3.1
415
- requirements:
386
+ requirements:
387
+ - - ! '>='
388
+ - !ruby/object:Gem::Version
389
+ version: '0'
390
+ requirements:
416
391
  - none
417
392
  rubyforge_project:
418
- rubygems_version: 1.8.22
393
+ rubygems_version: 1.8.23
419
394
  signing_key:
420
395
  specification_version: 3
421
396
  summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
422
397
  test_files: []
423
-