actionpack 4.1.2.rc2 → 4.1.2.rc3
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of actionpack might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CHANGELOG.md +73 -71
- data/lib/action_pack/gem_version.rb +1 -1
- metadata +8 -8
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 6787b8103915bc9a105f37058904ef58f962f056
|
4
|
+
data.tar.gz: f63987730f8d6ee1a856f33f64af783505166c8b
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: b3b7ae7032c5a8b4d2faa2c34eff69c26fe325ad303a5989735b56069dc7c974efa53b96b7aabb91fc5b267145990b9aec45b37511333c4abf77c1941dc732eb
|
7
|
+
data.tar.gz: fc396bd45f7da794976665d64fce39fccb2c0ea00ad9795ee9320361c61528aa4e212693a0dcb206c7ce41ffe78d61d2373655958675b192747e9b879f24b5e8
|
data/CHANGELOG.md
CHANGED
@@ -1,24 +1,24 @@
|
|
1
|
-
## Rails 4.1.2 (
|
1
|
+
## Rails 4.1.2 (June 23, 2014) ##
|
2
2
|
|
3
3
|
* Fix URL generation with `:trailing_slash` such that it does not add
|
4
4
|
a trailing slash after `.:format`
|
5
5
|
|
6
6
|
*Dan Langevin*
|
7
7
|
|
8
|
-
*
|
8
|
+
* Fix an issue with migrating legacy json cookies.
|
9
9
|
|
10
|
-
Previously, the `VerifyAndUpgradeLegacySignedMessage`
|
11
|
-
cookies
|
10
|
+
Previously, the `VerifyAndUpgradeLegacySignedMessage` assumed all incoming
|
11
|
+
cookies were marshal-encoded. This was not the case when `secret_token` was
|
12
12
|
used in conjunction with the `:json` or `:hybrid` serializer.
|
13
13
|
|
14
|
-
In those
|
14
|
+
In those cases, when upgrading to use `secret_key_base`, this would cause a
|
15
15
|
`TypeError: incompatible marshal file format` and a 500 error for the user.
|
16
16
|
|
17
17
|
Fixes #14774.
|
18
18
|
|
19
19
|
*Godfrey Chan*
|
20
20
|
|
21
|
-
* `http_basic_authenticate_with` only
|
21
|
+
* `http_basic_authenticate_with` only checks the authentication if the schema is
|
22
22
|
`Basic`.
|
23
23
|
|
24
24
|
Fixes #10257.
|
@@ -38,7 +38,7 @@
|
|
38
38
|
|
39
39
|
*Guilherme Cavalcanti*, *Andrew White*
|
40
40
|
|
41
|
-
* Append link to bad code
|
41
|
+
* Append a link in the backtrace to the bad code when a `SyntaxError` exception occurs.
|
42
42
|
|
43
43
|
*Boris Kuznetsov*
|
44
44
|
|
@@ -58,14 +58,14 @@
|
|
58
58
|
|
59
59
|
*Andrew White*, *Edho Arief*
|
60
60
|
|
61
|
-
* Returns null type format when format is not
|
62
|
-
format block.
|
61
|
+
* Returns a null type format when the format is not known and the controller is using an
|
62
|
+
`any` format block.
|
63
63
|
|
64
64
|
Fixes #14462.
|
65
65
|
|
66
66
|
*Rafael Mendonça França*
|
67
67
|
|
68
|
-
* Only make deeply nested routes shallow when parent is shallow.
|
68
|
+
* Only make deeply nested routes shallow when the parent is shallow.
|
69
69
|
|
70
70
|
Fixes #14684.
|
71
71
|
|
@@ -74,7 +74,7 @@
|
|
74
74
|
|
75
75
|
## Rails 4.1.1 (May 6, 2014) ##
|
76
76
|
|
77
|
-
* Only accept actions without File::SEPARATOR in the name.
|
77
|
+
* Only accept actions without `File::SEPARATOR` in the name.
|
78
78
|
|
79
79
|
This will avoid directory traversal in implicit render.
|
80
80
|
|
@@ -85,14 +85,14 @@
|
|
85
85
|
|
86
86
|
## Rails 4.1.0 (April 8, 2014) ##
|
87
87
|
|
88
|
-
*
|
89
|
-
proper values
|
88
|
+
* Swap the parameters of assert_equal in `assert_select` so that the
|
89
|
+
proper values are printed correctly
|
90
90
|
|
91
91
|
Fixes #14422.
|
92
92
|
|
93
93
|
*Vishal Lal*
|
94
94
|
|
95
|
-
* The method `shallow?` returns false if the parent resource is a singleton so
|
95
|
+
* The method `shallow?` returns false if the parent resource is a singleton, so
|
96
96
|
we need to check if we're not inside a nested scope before copying the :path
|
97
97
|
and :as options to their shallow equivalents.
|
98
98
|
|
@@ -110,8 +110,8 @@
|
|
110
110
|
|
111
111
|
* Introduce `render :html` as an option to render HTML content with a content
|
112
112
|
type of `text/html`. This rendering option calls `ERB::Util.html_escape`
|
113
|
-
internally to escape unsafe HTML
|
114
|
-
string as
|
113
|
+
internally to escape unsafe HTML strings, so you will need to mark a
|
114
|
+
string as `html_safe` if it contains any HTML tag.
|
115
115
|
|
116
116
|
See #14062, #12374.
|
117
117
|
|
@@ -138,13 +138,13 @@
|
|
138
138
|
*Prem Sichanugrist*
|
139
139
|
|
140
140
|
* Set stream status to 500 (or 400 on BadRequest) when an error is thrown
|
141
|
-
before
|
141
|
+
before committing.
|
142
142
|
|
143
143
|
Fixes #12552.
|
144
144
|
|
145
145
|
*Kevin Casey*
|
146
146
|
|
147
|
-
* Add new config option `config.action_dispatch.cookies_serializer` for
|
147
|
+
* Add a new config option `config.action_dispatch.cookies_serializer` for
|
148
148
|
specifying a serializer for the signed and encrypted cookie jars.
|
149
149
|
|
150
150
|
The possible values are:
|
@@ -153,7 +153,7 @@
|
|
153
153
|
* `:marshal` - serialize cookie values with `Marshal`
|
154
154
|
* `:hybrid` - transparently migrate existing `Marshal` cookie values to `JSON`
|
155
155
|
|
156
|
-
For new apps `:json` option is added by default and `:marshal` is used
|
156
|
+
For new apps the `:json` option is added by default and `:marshal` is used
|
157
157
|
when no option is specified to maintain backwards compatibility.
|
158
158
|
|
159
159
|
*Łukasz Sarnacki*, *Matt Aimonetti*, *Guillermo Iguaran*, *Godfrey Chan*, *Rafael Mendonça França*
|
@@ -171,7 +171,7 @@
|
|
171
171
|
*Andrew White*, *Aleksi Aalto*
|
172
172
|
|
173
173
|
* Properly require `action_view` in `AbstractController::Rendering` to prevent
|
174
|
-
uninitialized constant error for `ENCODING_FLAG`.
|
174
|
+
an uninitialized constant error for `ENCODING_FLAG`.
|
175
175
|
|
176
176
|
*Philipe Fatio*
|
177
177
|
|
@@ -195,9 +195,9 @@
|
|
195
195
|
|
196
196
|
* Log which keys were affected by deep munge.
|
197
197
|
|
198
|
-
Deep munge solves CVE-2013-0155 security vulnerability, but its
|
199
|
-
behaviour is
|
200
|
-
|
198
|
+
Deep munge solves the CVE-2013-0155 security vulnerability, but its
|
199
|
+
behaviour is confusing. With this commit, the information about which
|
200
|
+
key values were set to nil is now visible in logs.
|
201
201
|
|
202
202
|
*Łukasz Sarnacki*
|
203
203
|
|
@@ -243,11 +243,11 @@
|
|
243
243
|
|
244
244
|
* Unique the segment keys array for non-optimized url helpers
|
245
245
|
|
246
|
-
In Rails 3.2 you only needed pass an argument for dynamic segment
|
247
|
-
unique the segment keys array to match the number of args. Since
|
248
|
-
of args is less than required parts the non-optimized code
|
249
|
-
|
250
|
-
specified as many times as it appears in the path.
|
246
|
+
In Rails 3.2 you only needed to pass an argument for a dynamic segment
|
247
|
+
once so unique the segment keys array to match the number of args. Since
|
248
|
+
the number of args is less than the required parts, the non-optimized code
|
249
|
+
path is selected. To benefit from optimized url generation, the arg needs
|
250
|
+
to be specified as many times as it appears in the path.
|
251
251
|
|
252
252
|
Fixes #12808.
|
253
253
|
|
@@ -279,7 +279,7 @@
|
|
279
279
|
|
280
280
|
This now redirects to the path `/blog`, whereas before it would redirect
|
281
281
|
to the application root path. In the case of a path redirect or a custom
|
282
|
-
redirect if the path returned contains a host then the path is treated as
|
282
|
+
redirect, if the path returned contains a host then the path is treated as
|
283
283
|
absolute. Similarly for option redirects, if the options hash returned
|
284
284
|
contains a `:host` or `:domain` key then the path is treated as absolute.
|
285
285
|
|
@@ -289,10 +289,11 @@
|
|
289
289
|
|
290
290
|
* Fix `Encoding::CompatibilityError` when public path is UTF-8
|
291
291
|
|
292
|
-
In #5337 we forced the path encoding to ASCII-8BIT to prevent static file
|
293
|
-
from blowing up before an application has had chance to deal
|
294
|
-
urls. However this has a negative side effect of
|
295
|
-
if the application's public path has
|
292
|
+
In #5337 we forced the path encoding to ASCII-8BIT to prevent static file
|
293
|
+
handling from blowing up before an application has had a chance to deal
|
294
|
+
with possibly invalid urls. However this has a negative side effect of
|
295
|
+
making it an incompatible encoding if the application's public path has
|
296
|
+
UTF-8 characters in it.
|
296
297
|
|
297
298
|
To work around the problem we check to see if the path has a valid encoding once
|
298
299
|
it has been unescaped. If it is not valid then we can return early since it will
|
@@ -313,7 +314,7 @@
|
|
313
314
|
*Xavier Noria*
|
314
315
|
|
315
316
|
* New config option to opt out of params "deep munging" that was used to
|
316
|
-
address security vulnerability CVE-2013-0155. In your app config:
|
317
|
+
address the security vulnerability CVE-2013-0155. In your app config:
|
317
318
|
|
318
319
|
config.action_dispatch.perform_deep_munge = false
|
319
320
|
|
@@ -331,7 +332,7 @@
|
|
331
332
|
|
332
333
|
*Jeremy Kemper*
|
333
334
|
|
334
|
-
* Fix generating a path for engine inside a resources block.
|
335
|
+
* Fix generating a path for an engine inside a resources block.
|
335
336
|
|
336
337
|
Fixes #8533.
|
337
338
|
|
@@ -388,7 +389,7 @@
|
|
388
389
|
format.html.none { render "trash" }
|
389
390
|
end
|
390
391
|
|
391
|
-
Variants also support common `any`/`all` block that formats have.
|
392
|
+
Variants also support the common `any`/`all` block that formats have.
|
392
393
|
|
393
394
|
It works for both inline:
|
394
395
|
|
@@ -408,7 +409,7 @@
|
|
408
409
|
|
409
410
|
*Łukasz Strzałkowski*
|
410
411
|
|
411
|
-
* Fix
|
412
|
+
* Fix rendering localized templates without an explicit format using wrong
|
412
413
|
content header and not passing correct formats to template due to the
|
413
414
|
introduction of the `NullType` for mimes.
|
414
415
|
|
@@ -424,7 +425,7 @@
|
|
424
425
|
|
425
426
|
*Andrew White*
|
426
427
|
|
427
|
-
* Better error message for typos in assert_response
|
428
|
+
* Better error message for typos in assert_response arguments.
|
428
429
|
|
429
430
|
When the response type argument to `assert_response` is not a known
|
430
431
|
response type, `assert_response` now throws an ArgumentError with a clear
|
@@ -436,7 +437,7 @@
|
|
436
437
|
|
437
438
|
*Sıtkı Bağdat*
|
438
439
|
|
439
|
-
*
|
440
|
+
* Accept an options hash inside the array in `#url_for`.
|
440
441
|
|
441
442
|
Example:
|
442
443
|
|
@@ -451,9 +452,9 @@
|
|
451
452
|
It returns a value from the hash for the given key.
|
452
453
|
If the key can’t be found, there are several options:
|
453
454
|
|
454
|
-
* With no other arguments, it will raise
|
455
|
-
* If a default value is given, then
|
456
|
-
* If the optional code block is specified, then
|
455
|
+
* With no other arguments, it will raise a KeyError exception.
|
456
|
+
* If a default value is given, then it will be returned.
|
457
|
+
* If the optional code block is specified, then it will be run and its result returned.
|
457
458
|
|
458
459
|
*Damien Mathieu*
|
459
460
|
|
@@ -465,12 +466,12 @@
|
|
465
466
|
|
466
467
|
*Brendon Murphy*, *Doug Cole*
|
467
468
|
|
468
|
-
* Add `params` option to `button_to` form helper
|
469
|
-
as hidden form fields.
|
469
|
+
* Add a `params` option to the `button_to` form helper which renders
|
470
|
+
the given hash as hidden form fields.
|
470
471
|
|
471
472
|
*Andy Waite*
|
472
473
|
|
473
|
-
*
|
474
|
+
* Enable assets helpers to work in the controllers like they do in the views.
|
474
475
|
|
475
476
|
Example:
|
476
477
|
|
@@ -494,18 +495,18 @@
|
|
494
495
|
# engine routes.rb
|
495
496
|
get '/admin' => redirect('admin/dashboard')
|
496
497
|
|
497
|
-
This now redirects to the path `/blog/admin/dashboard`, whereas before it would
|
498
|
-
generated an invalid url because there would be no slash between the host name
|
499
|
-
the path. It also allows redirects to work
|
500
|
-
subdirectory of a website.
|
498
|
+
This now redirects to the path `/blog/admin/dashboard`, whereas before it would
|
499
|
+
have generated an invalid url because there would be no slash between the host name
|
500
|
+
and the path. It also allows redirects to work when the application is deployed
|
501
|
+
to a subdirectory of a website.
|
501
502
|
|
502
503
|
Fixes #7977.
|
503
504
|
|
504
505
|
*Andrew White*
|
505
506
|
|
506
|
-
* Fixing repond_with working directly on the options hash
|
507
|
-
This fixes an issue where the respond_with worked directly with the given
|
508
|
-
options hash, so that if a user relied on it after calling respond_with
|
507
|
+
* Fixing `repond_with` working directly on the options hash
|
508
|
+
This fixes an issue where the `respond_with` worked directly with the given
|
509
|
+
options hash, so that if a user relied on it after calling `respond_with`,
|
509
510
|
the hash wouldn't be the same.
|
510
511
|
|
511
512
|
Fixes #12029.
|
@@ -519,14 +520,14 @@
|
|
519
520
|
|
520
521
|
*Tamir Duberstein*
|
521
522
|
|
522
|
-
* Strong parameters should permit nested number
|
523
|
+
* Strong parameters should permit a nested number to be a key.
|
523
524
|
|
524
525
|
Fixes #12293.
|
525
526
|
|
526
527
|
*kennyj*
|
527
528
|
|
528
|
-
* Fix regex used to detect URI schemes in `redirect_to
|
529
|
-
RFC 3986.
|
529
|
+
* Fix the regex used to detect URI schemes in `redirect_to`, to be consistent
|
530
|
+
with RFC 3986.
|
530
531
|
|
531
532
|
*Derek Prior*
|
532
533
|
|
@@ -535,13 +536,13 @@
|
|
535
536
|
|
536
537
|
*Derek Prior*
|
537
538
|
|
538
|
-
* Fix an issue where router
|
539
|
+
* Fix an issue where the router could not recognize a downcased url encoding path.
|
539
540
|
|
540
541
|
Fixes #12269.
|
541
542
|
|
542
543
|
*kennyj*
|
543
544
|
|
544
|
-
* Fix custom flash type definition.
|
545
|
+
* Fix custom flash type definition. Misuse of the `_flash_types` class variable
|
545
546
|
caused an error when reloading controllers with custom flash types.
|
546
547
|
|
547
548
|
Fixes #12057.
|
@@ -554,7 +555,8 @@
|
|
554
555
|
|
555
556
|
*Vasiliy Ermolovich*
|
556
557
|
|
557
|
-
* Development mode exceptions are rendered in text format in case of
|
558
|
+
* Development mode exceptions are rendered in text format in case of
|
559
|
+
an XHR request.
|
558
560
|
|
559
561
|
*Kir Shatrov*
|
560
562
|
|
@@ -598,26 +600,26 @@
|
|
598
600
|
|
599
601
|
*Yves Senn*
|
600
602
|
|
601
|
-
* Fix an issue where
|
602
|
-
should
|
603
|
-
|
604
|
-
`MissingHelperError`.
|
603
|
+
* Fix an issue where Rails raised an exception about a missing helper when
|
604
|
+
it should have thrown a `LoadError` instead. When the helper file exists
|
605
|
+
and only the loaded file from the helper does not exist, Rails should now
|
606
|
+
throw a `LoadError` instead of a `MissingHelperError`.
|
605
607
|
|
606
608
|
*Piotr Niełacny*
|
607
609
|
|
608
|
-
* Fix `ActionDispatch::ParamsParser#parse_formatted_parameters` to rewind
|
609
|
-
parsing json params.
|
610
|
+
* Fix `ActionDispatch::ParamsParser#parse_formatted_parameters` to rewind
|
611
|
+
body input stream on parsing json params.
|
610
612
|
|
611
613
|
Fixes #11345.
|
612
614
|
|
613
615
|
*Yuri Bol*, *Paul Nikitochkin*
|
614
616
|
|
615
|
-
* Ignore spaces around
|
617
|
+
* Ignore spaces around delimiters in the Set-Cookie header.
|
616
618
|
|
617
619
|
*Yamagishi Kazutoshi*
|
618
620
|
|
619
|
-
* Remove deprecated Rails application fallback for integration testing
|
620
|
-
`ActionDispatch.test_app` instead.
|
621
|
+
* Remove deprecated Rails application fallback for integration testing.
|
622
|
+
Set `ActionDispatch.test_app` instead.
|
621
623
|
|
622
624
|
*Carlos Antonio da Silva*
|
623
625
|
|
@@ -637,9 +639,9 @@
|
|
637
639
|
|
638
640
|
*Carlos Antonio da Silva*
|
639
641
|
|
640
|
-
* Fix `Mime::Type.parse` when bad accepts header is looked up.
|
641
|
-
was setting `request.formats` with an array containing a
|
642
|
-
raised an error when setting the controller formats.
|
642
|
+
* Fix `Mime::Type.parse` when a bad accepts header is looked up.
|
643
|
+
Previously, it was setting `request.formats` with an array containing a
|
644
|
+
`nil` value, which raised an error when setting the controller formats.
|
643
645
|
|
644
646
|
Fixes #10965.
|
645
647
|
|
@@ -647,7 +649,7 @@
|
|
647
649
|
|
648
650
|
* Merge `:action` from routing scope and assign endpoint if both `:controller`
|
649
651
|
and `:action` are present. The endpoint assignment only occurs if there is
|
650
|
-
no `:to` present in the options hash so should only affect routes using the
|
652
|
+
no `:to` present in the options hash, so should only affect routes using the
|
651
653
|
shorthand syntax (i.e. endpoint is inferred from the path).
|
652
654
|
|
653
655
|
Fixes #9856.
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: actionpack
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 4.1.2.
|
4
|
+
version: 4.1.2.rc3
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- David Heinemeier Hansson
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2014-06-
|
11
|
+
date: 2014-06-23 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: activesupport
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 4.1.2.
|
19
|
+
version: 4.1.2.rc3
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 4.1.2.
|
26
|
+
version: 4.1.2.rc3
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: rack
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -58,28 +58,28 @@ dependencies:
|
|
58
58
|
requirements:
|
59
59
|
- - '='
|
60
60
|
- !ruby/object:Gem::Version
|
61
|
-
version: 4.1.2.
|
61
|
+
version: 4.1.2.rc3
|
62
62
|
type: :runtime
|
63
63
|
prerelease: false
|
64
64
|
version_requirements: !ruby/object:Gem::Requirement
|
65
65
|
requirements:
|
66
66
|
- - '='
|
67
67
|
- !ruby/object:Gem::Version
|
68
|
-
version: 4.1.2.
|
68
|
+
version: 4.1.2.rc3
|
69
69
|
- !ruby/object:Gem::Dependency
|
70
70
|
name: activemodel
|
71
71
|
requirement: !ruby/object:Gem::Requirement
|
72
72
|
requirements:
|
73
73
|
- - '='
|
74
74
|
- !ruby/object:Gem::Version
|
75
|
-
version: 4.1.2.
|
75
|
+
version: 4.1.2.rc3
|
76
76
|
type: :development
|
77
77
|
prerelease: false
|
78
78
|
version_requirements: !ruby/object:Gem::Requirement
|
79
79
|
requirements:
|
80
80
|
- - '='
|
81
81
|
- !ruby/object:Gem::Version
|
82
|
-
version: 4.1.2.
|
82
|
+
version: 4.1.2.rc3
|
83
83
|
description: Web apps on Rails. Simple, battle-tested conventions for building and
|
84
84
|
testing MVC web applications. Works with any Rack-compatible server.
|
85
85
|
email: david@loudthinking.com
|