actionpack 7.2.0.beta2 → 7.2.0.rc1
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of actionpack might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CHANGELOG.md +12 -0
- data/lib/action_controller/base.rb +46 -15
- data/lib/action_controller/metal.rb +32 -7
- data/lib/action_dispatch/http/response.rb +13 -1
- data/lib/action_pack/gem_version.rb +1 -1
- metadata +20 -14
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 80bcc9f23223bce78f4446cdbf4b363b4a2c75ee8293240f5cefaa26a12458fb
|
4
|
+
data.tar.gz: cb3c691b0de2c215d210e8ee20141483e5003c0c92b492d6b3dc273d82884d7c
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: f09f3561fb2ba4ab69e694994f68b65e11c40520fa6e7cc1fb96acc204194b3ef0c95cbe23dba8a142724f330e0600f5fc8fe87aba937c35d2780728c67dd584
|
7
|
+
data.tar.gz: 21e9e1b256fd80d3ad26d3ec0c46b8ac1a5e50d4aba59dd15554761dfbf38be9c68b2caba5e0277940931fe098189a90994a767f1d5a76d56fd1ca909012c41d
|
data/CHANGELOG.md
CHANGED
@@ -1,8 +1,20 @@
|
|
1
|
+
## Rails 7.2.0.rc1 (August 06, 2024) ##
|
2
|
+
|
3
|
+
* No changes.
|
4
|
+
|
5
|
+
|
6
|
+
## Rails 7.2.0.beta3 (July 11, 2024) ##
|
7
|
+
|
8
|
+
* No changes.
|
9
|
+
|
10
|
+
|
1
11
|
## Rails 7.2.0.beta2 (June 04, 2024) ##
|
2
12
|
|
3
13
|
* Include the HTTP Permissions-Policy on non-HTML Content-Types
|
4
14
|
[CVE-2024-28103]
|
5
15
|
|
16
|
+
*Aaron Patterson*, *Zack Deveau*
|
17
|
+
|
6
18
|
|
7
19
|
## Rails 7.2.0.beta1 (May 29, 2024) ##
|
8
20
|
|
@@ -231,7 +231,6 @@ module ActionController
|
|
231
231
|
AbstractController::Rendering,
|
232
232
|
AbstractController::Translation,
|
233
233
|
AbstractController::AssetPaths,
|
234
|
-
|
235
234
|
Helpers,
|
236
235
|
UrlFor,
|
237
236
|
Redirecting,
|
@@ -261,26 +260,58 @@ module ActionController
|
|
261
260
|
HttpAuthentication::Token::ControllerMethods,
|
262
261
|
DefaultHeaders,
|
263
262
|
Logging,
|
264
|
-
|
265
|
-
# Before callbacks should also be executed as early as possible, so also include
|
266
|
-
# them at the bottom.
|
267
263
|
AbstractController::Callbacks,
|
268
|
-
|
269
|
-
# Append rescue at the bottom to wrap as much as possible.
|
270
264
|
Rescue,
|
271
|
-
|
272
|
-
# Add instrumentations hooks at the bottom, to ensure they instrument all the
|
273
|
-
# methods properly.
|
274
265
|
Instrumentation,
|
275
|
-
|
276
|
-
# Params wrapper should come before instrumentation so they are properly showed
|
277
|
-
# in logs
|
278
266
|
ParamsWrapper
|
279
267
|
]
|
280
268
|
|
281
|
-
|
282
|
-
|
283
|
-
|
269
|
+
# Note: Documenting these severely degrates the performance of rdoc
|
270
|
+
# :stopdoc:
|
271
|
+
include AbstractController::Rendering
|
272
|
+
include AbstractController::Translation
|
273
|
+
include AbstractController::AssetPaths
|
274
|
+
include Helpers
|
275
|
+
include UrlFor
|
276
|
+
include Redirecting
|
277
|
+
include ActionView::Layouts
|
278
|
+
include Rendering
|
279
|
+
include Renderers::All
|
280
|
+
include ConditionalGet
|
281
|
+
include EtagWithTemplateDigest
|
282
|
+
include EtagWithFlash
|
283
|
+
include Caching
|
284
|
+
include MimeResponds
|
285
|
+
include ImplicitRender
|
286
|
+
include StrongParameters
|
287
|
+
include ParameterEncoding
|
288
|
+
include Cookies
|
289
|
+
include Flash
|
290
|
+
include FormBuilder
|
291
|
+
include RequestForgeryProtection
|
292
|
+
include ContentSecurityPolicy
|
293
|
+
include PermissionsPolicy
|
294
|
+
include RateLimiting
|
295
|
+
include AllowBrowser
|
296
|
+
include Streaming
|
297
|
+
include DataStreaming
|
298
|
+
include HttpAuthentication::Basic::ControllerMethods
|
299
|
+
include HttpAuthentication::Digest::ControllerMethods
|
300
|
+
include HttpAuthentication::Token::ControllerMethods
|
301
|
+
include DefaultHeaders
|
302
|
+
include Logging
|
303
|
+
# Before callbacks should also be executed as early as possible, so also include
|
304
|
+
# them at the bottom.
|
305
|
+
include AbstractController::Callbacks
|
306
|
+
# Append rescue at the bottom to wrap as much as possible.
|
307
|
+
include Rescue
|
308
|
+
# Add instrumentations hooks at the bottom, to ensure they instrument all the
|
309
|
+
# methods properly.
|
310
|
+
include Instrumentation
|
311
|
+
# Params wrapper should come before instrumentation so they are properly showed
|
312
|
+
# in logs
|
313
|
+
include ParamsWrapper
|
314
|
+
# :startdoc:
|
284
315
|
setup_renderer!
|
285
316
|
|
286
317
|
# Define some internal variables that should not be propagated to the view.
|
@@ -81,14 +81,14 @@ module ActionController
|
|
81
81
|
#
|
82
82
|
# get 'hello', to: HelloController.action(:index)
|
83
83
|
#
|
84
|
-
# The
|
84
|
+
# The ::action method returns a valid Rack application for the Rails router to
|
85
85
|
# dispatch to.
|
86
86
|
#
|
87
87
|
# ## Rendering Helpers
|
88
88
|
#
|
89
|
-
# `ActionController::Metal`
|
90
|
-
# views, partials, or other responses aside from
|
91
|
-
#
|
89
|
+
# By default, `ActionController::Metal` provides no utilities for rendering
|
90
|
+
# views, partials, or other responses aside from some low-level setters such
|
91
|
+
# as #response_body=, #content_type=, and #status=. To add the render helpers
|
92
92
|
# you're used to having in a normal controller, you can do the following:
|
93
93
|
#
|
94
94
|
# class HelloController < ActionController::Metal
|
@@ -179,8 +179,33 @@ module ActionController
|
|
179
179
|
# Delegates to ActionDispatch::Response#headers.
|
180
180
|
delegate :headers, to: "@_response"
|
181
181
|
|
182
|
-
|
183
|
-
|
182
|
+
##
|
183
|
+
# Delegates to ActionDispatch::Response#status=
|
184
|
+
delegate :status=, to: "@_response"
|
185
|
+
|
186
|
+
##
|
187
|
+
# Delegates to ActionDispatch::Response#location=
|
188
|
+
delegate :location=, to: "@_response"
|
189
|
+
|
190
|
+
##
|
191
|
+
# Delegates to ActionDispatch::Response#content_type=
|
192
|
+
delegate :content_type=, to: "@_response"
|
193
|
+
|
194
|
+
##
|
195
|
+
# Delegates to ActionDispatch::Response#status
|
196
|
+
delegate :status, to: "@_response"
|
197
|
+
|
198
|
+
##
|
199
|
+
# Delegates to ActionDispatch::Response#location
|
200
|
+
delegate :location, to: "@_response"
|
201
|
+
|
202
|
+
##
|
203
|
+
# Delegates to ActionDispatch::Response#content_type
|
204
|
+
delegate :content_type, to: "@_response"
|
205
|
+
|
206
|
+
##
|
207
|
+
# Delegates to ActionDispatch::Response#media_type
|
208
|
+
delegate :media_type, to: "@_response"
|
184
209
|
|
185
210
|
def initialize
|
186
211
|
@_request = nil
|
@@ -201,7 +226,7 @@ module ActionController
|
|
201
226
|
|
202
227
|
alias :response_code :status # :nodoc:
|
203
228
|
|
204
|
-
# Basic url_for that can be overridden for more robust functionality.
|
229
|
+
# Basic `url_for` that can be overridden for more robust functionality.
|
205
230
|
def url_for(string)
|
206
231
|
string
|
207
232
|
end
|
@@ -231,6 +231,18 @@ module ActionDispatch # :nodoc:
|
|
231
231
|
def committed?; synchronize { @committed }; end
|
232
232
|
def sent?; synchronize { @sent }; end
|
233
233
|
|
234
|
+
##
|
235
|
+
# :method: location
|
236
|
+
#
|
237
|
+
# Location of the response.
|
238
|
+
|
239
|
+
##
|
240
|
+
# :method: location=
|
241
|
+
#
|
242
|
+
# :call-seq: location=(location)
|
243
|
+
#
|
244
|
+
# Sets the location of the response
|
245
|
+
|
234
246
|
# Sets the HTTP status code.
|
235
247
|
def status=(status)
|
236
248
|
@status = Rack::Utils.status_code(status)
|
@@ -241,7 +253,7 @@ module ActionDispatch # :nodoc:
|
|
241
253
|
#
|
242
254
|
# response.content_type = "text/plain"
|
243
255
|
#
|
244
|
-
# If a character set has been defined for this response (see charset=) then the
|
256
|
+
# If a character set has been defined for this response (see #charset=) then the
|
245
257
|
# character set information will also be included in the content type
|
246
258
|
# information.
|
247
259
|
def content_type=(content_type)
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: actionpack
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 7.2.0.
|
4
|
+
version: 7.2.0.rc1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- David Heinemeier Hansson
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2024-06
|
11
|
+
date: 2024-08-06 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 7.2.0.
|
19
|
+
version: 7.2.0.rc1
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 7.2.0.
|
26
|
+
version: 7.2.0.rc1
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: nokogiri
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -59,6 +59,9 @@ dependencies:
|
|
59
59
|
- - ">="
|
60
60
|
- !ruby/object:Gem::Version
|
61
61
|
version: 2.2.4
|
62
|
+
- - "<"
|
63
|
+
- !ruby/object:Gem::Version
|
64
|
+
version: '3.2'
|
62
65
|
type: :runtime
|
63
66
|
prerelease: false
|
64
67
|
version_requirements: !ruby/object:Gem::Requirement
|
@@ -66,6 +69,9 @@ dependencies:
|
|
66
69
|
- - ">="
|
67
70
|
- !ruby/object:Gem::Version
|
68
71
|
version: 2.2.4
|
72
|
+
- - "<"
|
73
|
+
- !ruby/object:Gem::Version
|
74
|
+
version: '3.2'
|
69
75
|
- !ruby/object:Gem::Dependency
|
70
76
|
name: rack-session
|
71
77
|
requirement: !ruby/object:Gem::Requirement
|
@@ -142,28 +148,28 @@ dependencies:
|
|
142
148
|
requirements:
|
143
149
|
- - '='
|
144
150
|
- !ruby/object:Gem::Version
|
145
|
-
version: 7.2.0.
|
151
|
+
version: 7.2.0.rc1
|
146
152
|
type: :runtime
|
147
153
|
prerelease: false
|
148
154
|
version_requirements: !ruby/object:Gem::Requirement
|
149
155
|
requirements:
|
150
156
|
- - '='
|
151
157
|
- !ruby/object:Gem::Version
|
152
|
-
version: 7.2.0.
|
158
|
+
version: 7.2.0.rc1
|
153
159
|
- !ruby/object:Gem::Dependency
|
154
160
|
name: activemodel
|
155
161
|
requirement: !ruby/object:Gem::Requirement
|
156
162
|
requirements:
|
157
163
|
- - '='
|
158
164
|
- !ruby/object:Gem::Version
|
159
|
-
version: 7.2.0.
|
165
|
+
version: 7.2.0.rc1
|
160
166
|
type: :development
|
161
167
|
prerelease: false
|
162
168
|
version_requirements: !ruby/object:Gem::Requirement
|
163
169
|
requirements:
|
164
170
|
- - '='
|
165
171
|
- !ruby/object:Gem::Version
|
166
|
-
version: 7.2.0.
|
172
|
+
version: 7.2.0.rc1
|
167
173
|
description: Web apps on Rails. Simple, battle-tested conventions for building and
|
168
174
|
testing MVC web applications. Works with any Rack-compatible server.
|
169
175
|
email: david@loudthinking.com
|
@@ -363,10 +369,10 @@ licenses:
|
|
363
369
|
- MIT
|
364
370
|
metadata:
|
365
371
|
bug_tracker_uri: https://github.com/rails/rails/issues
|
366
|
-
changelog_uri: https://github.com/rails/rails/blob/v7.2.0.
|
367
|
-
documentation_uri: https://api.rubyonrails.org/v7.2.0.
|
372
|
+
changelog_uri: https://github.com/rails/rails/blob/v7.2.0.rc1/actionpack/CHANGELOG.md
|
373
|
+
documentation_uri: https://api.rubyonrails.org/v7.2.0.rc1/
|
368
374
|
mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
|
369
|
-
source_code_uri: https://github.com/rails/rails/tree/v7.2.0.
|
375
|
+
source_code_uri: https://github.com/rails/rails/tree/v7.2.0.rc1/actionpack
|
370
376
|
rubygems_mfa_required: 'true'
|
371
377
|
post_install_message:
|
372
378
|
rdoc_options: []
|
@@ -379,12 +385,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
|
|
379
385
|
version: 3.1.0
|
380
386
|
required_rubygems_version: !ruby/object:Gem::Requirement
|
381
387
|
requirements:
|
382
|
-
- - "
|
388
|
+
- - ">="
|
383
389
|
- !ruby/object:Gem::Version
|
384
|
-
version:
|
390
|
+
version: '0'
|
385
391
|
requirements:
|
386
392
|
- none
|
387
|
-
rubygems_version: 3.
|
393
|
+
rubygems_version: 3.5.11
|
388
394
|
signing_key:
|
389
395
|
specification_version: 4
|
390
396
|
summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
|