actionpack 6.0.4.7 → 6.0.5.1
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of actionpack might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CHANGELOG.md +16 -0
- data/lib/action_controller/renderer.rb +1 -0
- data/lib/action_dispatch/http/content_security_policy.rb +0 -7
- data/lib/action_dispatch/middleware/templates/rescues/blocked_host.html.erb +1 -1
- data/lib/action_dispatch/middleware/templates/rescues/blocked_host.text.erb +1 -1
- data/lib/action_pack/gem_version.rb +2 -2
- metadata +13 -12
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: e7d14dbcb3901913f6102365ba7a723df25e154d44b172f4cfb26fecf63efff7
|
4
|
+
data.tar.gz: b33cf652a528f64db6ea7ec834a90d806ef6873b1ddcf0cbd7dcd67d63399a50
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: b068174c9e314ddf3d512e17f394bae40d490fe9d512743f32a76f50481010631b0c42045ed3dd6cf243ae3f456bc7e0db3bd9818fb6c1bada93639e7709c67d
|
7
|
+
data.tar.gz: 2a322fd964198b3852b31d3f36b91564ea12a9e0aaa1936101facdb1210653d2daa47de8cbc0319df3aca2f3236db8c6f57a8d74a2e3bfb3a34491d9ee8e76ab
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,19 @@
|
|
1
|
+
## Rails 6.0.5.1 (July 12, 2022) ##
|
2
|
+
|
3
|
+
* No changes.
|
4
|
+
|
5
|
+
|
6
|
+
## Rails 6.0.5 (May 09, 2022) ##
|
7
|
+
|
8
|
+
* No changes.
|
9
|
+
|
10
|
+
|
11
|
+
## Rails 6.0.4.8 (April 26, 2022) ##
|
12
|
+
|
13
|
+
* Allow Content Security Policy DSL to generate for API responses.
|
14
|
+
|
15
|
+
*Tim Wade*
|
16
|
+
|
1
17
|
## Rails 6.0.4.7 (March 08, 2022) ##
|
2
18
|
|
3
19
|
* No changes.
|
@@ -17,7 +17,6 @@ module ActionDispatch #:nodoc:
|
|
17
17
|
request = ActionDispatch::Request.new env
|
18
18
|
_, headers, _ = response = @app.call(env)
|
19
19
|
|
20
|
-
return response unless html_response?(headers)
|
21
20
|
return response if policy_present?(headers)
|
22
21
|
|
23
22
|
if policy = request.content_security_policy
|
@@ -31,12 +30,6 @@ module ActionDispatch #:nodoc:
|
|
31
30
|
end
|
32
31
|
|
33
32
|
private
|
34
|
-
def html_response?(headers)
|
35
|
-
if content_type = headers[CONTENT_TYPE]
|
36
|
-
content_type =~ /html/
|
37
|
-
end
|
38
|
-
end
|
39
|
-
|
40
33
|
def header_name(request)
|
41
34
|
if request.content_security_policy_report_only
|
42
35
|
POLICY_REPORT_ONLY
|
@@ -2,6 +2,6 @@
|
|
2
2
|
<h1>Blocked host: <%= @host %></h1>
|
3
3
|
</header>
|
4
4
|
<div id="container">
|
5
|
-
<h2>To allow requests to <%= @host
|
5
|
+
<h2>To allow requests to <%= @host %> make sure it is a valid hostname (containing only numbers, letters, dashes and dots), then add the following to your environment configuration:</h2>
|
6
6
|
<pre>config.hosts << "<%= @host %>"</pre>
|
7
7
|
</div>
|
@@ -1,5 +1,5 @@
|
|
1
1
|
Blocked host: <%= @host %>
|
2
2
|
|
3
|
-
To allow requests to <%= @host
|
3
|
+
To allow requests to <%= @host %> make sure it is a valid hostname (containing only numbers, letters, dashes and dots), then add the following to your environment configuration:
|
4
4
|
|
5
5
|
config.hosts << "<%= @host %>"
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: actionpack
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 6.0.
|
4
|
+
version: 6.0.5.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- David Heinemeier Hansson
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2022-
|
11
|
+
date: 2022-07-12 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 6.0.
|
19
|
+
version: 6.0.5.1
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 6.0.
|
26
|
+
version: 6.0.5.1
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: rack
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -98,28 +98,28 @@ dependencies:
|
|
98
98
|
requirements:
|
99
99
|
- - '='
|
100
100
|
- !ruby/object:Gem::Version
|
101
|
-
version: 6.0.
|
101
|
+
version: 6.0.5.1
|
102
102
|
type: :runtime
|
103
103
|
prerelease: false
|
104
104
|
version_requirements: !ruby/object:Gem::Requirement
|
105
105
|
requirements:
|
106
106
|
- - '='
|
107
107
|
- !ruby/object:Gem::Version
|
108
|
-
version: 6.0.
|
108
|
+
version: 6.0.5.1
|
109
109
|
- !ruby/object:Gem::Dependency
|
110
110
|
name: activemodel
|
111
111
|
requirement: !ruby/object:Gem::Requirement
|
112
112
|
requirements:
|
113
113
|
- - '='
|
114
114
|
- !ruby/object:Gem::Version
|
115
|
-
version: 6.0.
|
115
|
+
version: 6.0.5.1
|
116
116
|
type: :development
|
117
117
|
prerelease: false
|
118
118
|
version_requirements: !ruby/object:Gem::Requirement
|
119
119
|
requirements:
|
120
120
|
- - '='
|
121
121
|
- !ruby/object:Gem::Version
|
122
|
-
version: 6.0.
|
122
|
+
version: 6.0.5.1
|
123
123
|
description: Web apps on Rails. Simple, battle-tested conventions for building and
|
124
124
|
testing MVC web applications. Works with any Rack-compatible server.
|
125
125
|
email: david@loudthinking.com
|
@@ -310,10 +310,11 @@ licenses:
|
|
310
310
|
- MIT
|
311
311
|
metadata:
|
312
312
|
bug_tracker_uri: https://github.com/rails/rails/issues
|
313
|
-
changelog_uri: https://github.com/rails/rails/blob/v6.0.
|
314
|
-
documentation_uri: https://api.rubyonrails.org/v6.0.
|
313
|
+
changelog_uri: https://github.com/rails/rails/blob/v6.0.5.1/actionpack/CHANGELOG.md
|
314
|
+
documentation_uri: https://api.rubyonrails.org/v6.0.5.1/
|
315
315
|
mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
|
316
|
-
source_code_uri: https://github.com/rails/rails/tree/v6.0.
|
316
|
+
source_code_uri: https://github.com/rails/rails/tree/v6.0.5.1/actionpack
|
317
|
+
rubygems_mfa_required: 'true'
|
317
318
|
post_install_message:
|
318
319
|
rdoc_options: []
|
319
320
|
require_paths:
|
@@ -330,7 +331,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
330
331
|
version: '0'
|
331
332
|
requirements:
|
332
333
|
- none
|
333
|
-
rubygems_version: 3.
|
334
|
+
rubygems_version: 3.3.3
|
334
335
|
signing_key:
|
335
336
|
specification_version: 4
|
336
337
|
summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
|