actionpack 3.1.6 → 3.1.7

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of actionpack might be problematic. Click here for more details.

Files changed (4) hide show
  1. data/CHANGELOG.md +4 -0
  2. data/lib/action_controller/metal/http_authentication.rb +2 -2
  3. data/lib/action_pack/version.rb +1 -1
  4. metadata +148 -165
data/CHANGELOG.md CHANGED
@@ -1,3 +1,7 @@
1
+ ## Rails 3.1.7 (Jul 26, 2012)
2
+
3
+ * Do not convert digest auth strings to symbols. CVE-2012-3424
4
+
1
5
  ## Rails 3.1.6 (Jun 12, 2012)
2
6
 
3
7
  * nil is removed from array parameter values
data/lib/action_controller/metal/http_authentication.rb CHANGED
@@ -227,9 +227,9 @@ module ActionController
227
227
  end
228
228
 
229
229
  def decode_credentials(header)
230
- Hash[header.to_s.gsub(/^Digest\s+/,'').split(',').map do |pair|
230
+ HashWithIndifferentAccess[header.to_s.gsub(/^Digest\s+/,'').split(',').map do |pair|
231
231
  key, value = pair.split('=', 2)
232
- [key.strip.to_sym, value.to_s.gsub(/^"|"$/,'').gsub(/'/, '')]
232
+ [key.strip, value.to_s.gsub(/^"|"$/,'').delete('\'')]
233
233
  end]
234
234
  end
235
235
 
data/lib/action_pack/version.rb CHANGED
@@ -2,7 +2,7 @@ module ActionPack
2
2
  module VERSION #:nodoc:
3
3
  MAJOR = 3
4
4
  MINOR = 1
5
- TINY = 6
5
+ TINY = 7
6
6
  PRE = nil
7
7
 
8
8
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join('.')
metadata CHANGED
@@ -1,205 +1,199 @@
1
- --- !ruby/object:Gem::Specification
1
+ --- !ruby/object:Gem::Specification
2
2
  name: actionpack
3
- version: !ruby/object:Gem::Version
4
- hash: 15
3
+ version: !ruby/object:Gem::Version
4
+ version: 3.1.7
5
5
  prerelease:
6
- segments:
7
- - 3
8
- - 1
9
- - 6
10
- version: 3.1.6
11
6
  platform: ruby
12
- authors:
7
+ authors:
13
8
  - David Heinemeier Hansson
14
9
  autorequire:
15
10
  bindir: bin
16
11
  cert_chain: []
17
-
18
- date: 2012-06-12 00:00:00 Z
19
- dependencies:
20
- - !ruby/object:Gem::Dependency
12
+ date: 2012-07-26 00:00:00.000000000 Z
13
+ dependencies:
14
+ - !ruby/object:Gem::Dependency
21
15
  name: activesupport
22
- prerelease: false
23
- requirement: &id001 !ruby/object:Gem::Requirement
16
+ requirement: !ruby/object:Gem::Requirement
24
17
  none: false
25
- requirements:
26
- - - "="
27
- - !ruby/object:Gem::Version
28
- hash: 15
29
- segments:
30
- - 3
31
- - 1
32
- - 6
33
- version: 3.1.6
18
+ requirements:
19
+ - - '='
20
+ - !ruby/object:Gem::Version
21
+ version: 3.1.7
34
22
  type: :runtime
35
- version_requirements: *id001
36
- - !ruby/object:Gem::Dependency
37
- name: activemodel
38
23
  prerelease: false
39
- requirement: &id002 !ruby/object:Gem::Requirement
24
+ version_requirements: !ruby/object:Gem::Requirement
25
+ none: false
26
+ requirements:
27
+ - - '='
28
+ - !ruby/object:Gem::Version
29
+ version: 3.1.7
30
+ - !ruby/object:Gem::Dependency
31
+ name: activemodel
32
+ requirement: !ruby/object:Gem::Requirement
40
33
  none: false
41
- requirements:
42
- - - "="
43
- - !ruby/object:Gem::Version
44
- hash: 15
45
- segments:
46
- - 3
47
- - 1
48
- - 6
49
- version: 3.1.6
34
+ requirements:
35
+ - - '='
36
+ - !ruby/object:Gem::Version
37
+ version: 3.1.7
50
38
  type: :runtime
51
- version_requirements: *id002
52
- - !ruby/object:Gem::Dependency
53
- name: rack-cache
54
39
  prerelease: false
55
- requirement: &id003 !ruby/object:Gem::Requirement
40
+ version_requirements: !ruby/object:Gem::Requirement
41
+ none: false
42
+ requirements:
43
+ - - '='
44
+ - !ruby/object:Gem::Version
45
+ version: 3.1.7
46
+ - !ruby/object:Gem::Dependency
47
+ name: rack-cache
48
+ requirement: !ruby/object:Gem::Requirement
56
49
  none: false
57
- requirements:
50
+ requirements:
58
51
  - - ~>
59
- - !ruby/object:Gem::Version
60
- hash: 11
61
- segments:
62
- - 1
63
- - 2
64
- version: "1.2"
52
+ - !ruby/object:Gem::Version
53
+ version: '1.2'
65
54
  type: :runtime
66
- version_requirements: *id003
67
- - !ruby/object:Gem::Dependency
68
- name: builder
69
55
  prerelease: false
70
- requirement: &id004 !ruby/object:Gem::Requirement
56
+ version_requirements: !ruby/object:Gem::Requirement
57
+ none: false
58
+ requirements:
59
+ - - ~>
60
+ - !ruby/object:Gem::Version
61
+ version: '1.2'
62
+ - !ruby/object:Gem::Dependency
63
+ name: builder
64
+ requirement: !ruby/object:Gem::Requirement
71
65
  none: false
72
- requirements:
66
+ requirements:
73
67
  - - ~>
74
- - !ruby/object:Gem::Version
75
- hash: 7
76
- segments:
77
- - 3
78
- - 0
79
- - 0
68
+ - !ruby/object:Gem::Version
80
69
  version: 3.0.0
81
70
  type: :runtime
82
- version_requirements: *id004
83
- - !ruby/object:Gem::Dependency
84
- name: i18n
85
71
  prerelease: false
86
- requirement: &id005 !ruby/object:Gem::Requirement
72
+ version_requirements: !ruby/object:Gem::Requirement
87
73
  none: false
88
- requirements:
74
+ requirements:
89
75
  - - ~>
90
- - !ruby/object:Gem::Version
91
- hash: 7
92
- segments:
93
- - 0
94
- - 6
95
- version: "0.6"
76
+ - !ruby/object:Gem::Version
77
+ version: 3.0.0
78
+ - !ruby/object:Gem::Dependency
79
+ name: i18n
80
+ requirement: !ruby/object:Gem::Requirement
81
+ none: false
82
+ requirements:
83
+ - - ~>
84
+ - !ruby/object:Gem::Version
85
+ version: '0.6'
96
86
  type: :runtime
97
- version_requirements: *id005
98
- - !ruby/object:Gem::Dependency
99
- name: rack
100
87
  prerelease: false
101
- requirement: &id006 !ruby/object:Gem::Requirement
88
+ version_requirements: !ruby/object:Gem::Requirement
89
+ none: false
90
+ requirements:
91
+ - - ~>
92
+ - !ruby/object:Gem::Version
93
+ version: '0.6'
94
+ - !ruby/object:Gem::Dependency
95
+ name: rack
96
+ requirement: !ruby/object:Gem::Requirement
102
97
  none: false
103
- requirements:
98
+ requirements:
104
99
  - - ~>
105
- - !ruby/object:Gem::Version
106
- hash: 23
107
- segments:
108
- - 1
109
- - 3
110
- - 6
100
+ - !ruby/object:Gem::Version
111
101
  version: 1.3.6
112
102
  type: :runtime
113
- version_requirements: *id006
114
- - !ruby/object:Gem::Dependency
115
- name: rack-test
116
103
  prerelease: false
117
- requirement: &id007 !ruby/object:Gem::Requirement
104
+ version_requirements: !ruby/object:Gem::Requirement
105
+ none: false
106
+ requirements:
107
+ - - ~>
108
+ - !ruby/object:Gem::Version
109
+ version: 1.3.6
110
+ - !ruby/object:Gem::Dependency
111
+ name: rack-test
112
+ requirement: !ruby/object:Gem::Requirement
118
113
  none: false
119
- requirements:
114
+ requirements:
120
115
  - - ~>
121
- - !ruby/object:Gem::Version
122
- hash: 5
123
- segments:
124
- - 0
125
- - 6
126
- - 1
116
+ - !ruby/object:Gem::Version
127
117
  version: 0.6.1
128
118
  type: :runtime
129
- version_requirements: *id007
130
- - !ruby/object:Gem::Dependency
131
- name: rack-mount
132
119
  prerelease: false
133
- requirement: &id008 !ruby/object:Gem::Requirement
120
+ version_requirements: !ruby/object:Gem::Requirement
121
+ none: false
122
+ requirements:
123
+ - - ~>
124
+ - !ruby/object:Gem::Version
125
+ version: 0.6.1
126
+ - !ruby/object:Gem::Dependency
127
+ name: rack-mount
128
+ requirement: !ruby/object:Gem::Requirement
134
129
  none: false
135
- requirements:
130
+ requirements:
136
131
  - - ~>
137
- - !ruby/object:Gem::Version
138
- hash: 59
139
- segments:
140
- - 0
141
- - 8
142
- - 2
132
+ - !ruby/object:Gem::Version
143
133
  version: 0.8.2
144
134
  type: :runtime
145
- version_requirements: *id008
146
- - !ruby/object:Gem::Dependency
147
- name: sprockets
148
135
  prerelease: false
149
- requirement: &id009 !ruby/object:Gem::Requirement
136
+ version_requirements: !ruby/object:Gem::Requirement
150
137
  none: false
151
- requirements:
138
+ requirements:
152
139
  - - ~>
153
- - !ruby/object:Gem::Version
154
- hash: 7
155
- segments:
156
- - 2
157
- - 0
158
- - 4
140
+ - !ruby/object:Gem::Version
141
+ version: 0.8.2
142
+ - !ruby/object:Gem::Dependency
143
+ name: sprockets
144
+ requirement: !ruby/object:Gem::Requirement
145
+ none: false
146
+ requirements:
147
+ - - ~>
148
+ - !ruby/object:Gem::Version
159
149
  version: 2.0.4
160
150
  type: :runtime
161
- version_requirements: *id009
162
- - !ruby/object:Gem::Dependency
163
- name: erubis
164
151
  prerelease: false
165
- requirement: &id010 !ruby/object:Gem::Requirement
152
+ version_requirements: !ruby/object:Gem::Requirement
153
+ none: false
154
+ requirements:
155
+ - - ~>
156
+ - !ruby/object:Gem::Version
157
+ version: 2.0.4
158
+ - !ruby/object:Gem::Dependency
159
+ name: erubis
160
+ requirement: !ruby/object:Gem::Requirement
166
161
  none: false
167
- requirements:
162
+ requirements:
168
163
  - - ~>
169
- - !ruby/object:Gem::Version
170
- hash: 19
171
- segments:
172
- - 2
173
- - 7
174
- - 0
164
+ - !ruby/object:Gem::Version
175
165
  version: 2.7.0
176
166
  type: :runtime
177
- version_requirements: *id010
178
- - !ruby/object:Gem::Dependency
179
- name: tzinfo
180
167
  prerelease: false
181
- requirement: &id011 !ruby/object:Gem::Requirement
168
+ version_requirements: !ruby/object:Gem::Requirement
169
+ none: false
170
+ requirements:
171
+ - - ~>
172
+ - !ruby/object:Gem::Version
173
+ version: 2.7.0
174
+ - !ruby/object:Gem::Dependency
175
+ name: tzinfo
176
+ requirement: !ruby/object:Gem::Requirement
182
177
  none: false
183
- requirements:
178
+ requirements:
184
179
  - - ~>
185
- - !ruby/object:Gem::Version
186
- hash: 41
187
- segments:
188
- - 0
189
- - 3
190
- - 29
180
+ - !ruby/object:Gem::Version
191
181
  version: 0.3.29
192
182
  type: :development
193
- version_requirements: *id011
194
- description: Web apps on Rails. Simple, battle-tested conventions for building and testing MVC web applications. Works with any Rack-compatible server.
183
+ prerelease: false
184
+ version_requirements: !ruby/object:Gem::Requirement
185
+ none: false
186
+ requirements:
187
+ - - ~>
188
+ - !ruby/object:Gem::Version
189
+ version: 0.3.29
190
+ description: Web apps on Rails. Simple, battle-tested conventions for building and
191
+ testing MVC web applications. Works with any Rack-compatible server.
195
192
  email: david@loudthinking.com
196
193
  executables: []
197
-
198
194
  extensions: []
199
-
200
195
  extra_rdoc_files: []
201
-
202
- files:
196
+ files:
203
197
  - CHANGELOG.md
204
198
  - README.rdoc
205
199
  - MIT-LICENSE
@@ -390,38 +384,27 @@ files:
390
384
  - lib/sprockets/static_compiler.rb
391
385
  homepage: http://www.rubyonrails.org
392
386
  licenses: []
393
-
394
387
  post_install_message:
395
388
  rdoc_options: []
396
-
397
- require_paths:
389
+ require_paths:
398
390
  - lib
399
- required_ruby_version: !ruby/object:Gem::Requirement
391
+ required_ruby_version: !ruby/object:Gem::Requirement
400
392
  none: false
401
- requirements:
402
- - - ">="
403
- - !ruby/object:Gem::Version
404
- hash: 57
405
- segments:
406
- - 1
407
- - 8
408
- - 7
393
+ requirements:
394
+ - - ! '>='
395
+ - !ruby/object:Gem::Version
409
396
  version: 1.8.7
410
- required_rubygems_version: !ruby/object:Gem::Requirement
397
+ required_rubygems_version: !ruby/object:Gem::Requirement
411
398
  none: false
412
- requirements:
413
- - - ">="
414
- - !ruby/object:Gem::Version
415
- hash: 3
416
- segments:
417
- - 0
418
- version: "0"
419
- requirements:
399
+ requirements:
400
+ - - ! '>='
401
+ - !ruby/object:Gem::Version
402
+ version: '0'
403
+ requirements:
420
404
  - none
421
405
  rubyforge_project:
422
- rubygems_version: 1.8.22
406
+ rubygems_version: 1.8.23
423
407
  signing_key:
424
408
  specification_version: 3
425
409
  summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
426
410
  test_files: []
427
-