actionpack 7.0.8.3 → 7.0.8.4

Sign up to get free protection for your applications and to get access to all the features.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +6 -0
  3. data/lib/action_dispatch/http/permissions_policy.rb +0 -7
  4. data/lib/action_pack/gem_version.rb +1 -1
  5. metadata +12 -12
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d360b26cd2791d9a49dd735c08a9459e435665c0d060105ac067a3d44053f3ec
4
- data.tar.gz: 51d45cfea83e59aaaef9dbd99aec1d2fa67dba33f301a9f8dbad380cf4c228c9
3
+ metadata.gz: 401770d290571f4e04cb3dd9eb8907310a1f32333d98dcc2c81086efbad0c5ea
4
+ data.tar.gz: 84622dc210bb7abbcb33104f18e810697d4988f1b7327a1a11bceeaaba92feea
5
5
  SHA512:
6
- metadata.gz: d615b9f5f1a1ce80a1c629304119a94fcb35f22d422169c63359e05b160bac887b447d241500755adb77274fd60f1926ada3ed75e43e9736a12d743ecb1463c4
7
- data.tar.gz: 8ae47c8f143a577573a7feb32e3810fc9f5b4242d70300bc1b683d7f7b227ef355ea5fd32d2f0207f4d452db55be73c0d21b4d86e96c7337e44dd2ca9ba40dfe
6
+ metadata.gz: 0f14a00f906e304b91efa5bf25a5ef3b51e379dc7a002d60c729ae383d04e87c5b4abab2c6057355a4760ef11ade5c969ac03e5a5473b74edc83ab8d238e4968
7
+ data.tar.gz: c3ef7f7058d635efbeab9d23f95c11727db0ec126f557a5c1e7e4cbb8290e31e18cff94457bc22aadcf474a45d2522f04f0188d3175c15e48f2d6689c3cf7d81
data/CHANGELOG.md CHANGED
@@ -1,3 +1,9 @@
1
+ ## Rails 7.0.8.4 (June 04, 2024) ##
2
+
3
+ * Include the HTTP Permissions-Policy on non-HTML Content-Types
4
+ [CVE-2024-28103]
5
+
6
+
1
7
  ## Rails 7.0.8.3 (May 17, 2024) ##
2
8
 
3
9
  * No changes.
data/lib/action_dispatch/http/permissions_policy.rb CHANGED
@@ -37,7 +37,6 @@ module ActionDispatch # :nodoc:
37
37
  request = ActionDispatch::Request.new(env)
38
38
  _, headers, _ = response = @app.call(env)
39
39
 
40
- return response unless html_response?(headers)
41
40
  return response if policy_present?(headers)
42
41
 
43
42
  if policy = request.permissions_policy
@@ -52,12 +51,6 @@ module ActionDispatch # :nodoc:
52
51
  end
53
52
 
54
53
  private
55
- def html_response?(headers)
56
- if content_type = headers[CONTENT_TYPE]
57
- /html/.match?(content_type)
58
- end
59
- end
60
-
61
54
  def policy_present?(headers)
62
55
  headers[POLICY]
63
56
  end
data/lib/action_pack/gem_version.rb CHANGED
@@ -10,7 +10,7 @@ module ActionPack
10
10
  MAJOR = 7
11
11
  MINOR = 0
12
12
  TINY = 8
13
- PRE = "3"
13
+ PRE = "4"
14
14
 
15
15
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
16
16
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: actionpack
3
3
  version: !ruby/object:Gem::Version
4
- version: 7.0.8.3
4
+ version: 7.0.8.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Heinemeier Hansson
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2024-05-17 00:00:00.000000000 Z
11
+ date: 2024-06-04 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 7.0.8.3
19
+ version: 7.0.8.4
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 7.0.8.3
26
+ version: 7.0.8.4
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: rack
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -98,28 +98,28 @@ dependencies:
98
98
  requirements:
99
99
  - - '='
100
100
  - !ruby/object:Gem::Version
101
- version: 7.0.8.3
101
+ version: 7.0.8.4
102
102
  type: :runtime
103
103
  prerelease: false
104
104
  version_requirements: !ruby/object:Gem::Requirement
105
105
  requirements:
106
106
  - - '='
107
107
  - !ruby/object:Gem::Version
108
- version: 7.0.8.3
108
+ version: 7.0.8.4
109
109
  - !ruby/object:Gem::Dependency
110
110
  name: activemodel
111
111
  requirement: !ruby/object:Gem::Requirement
112
112
  requirements:
113
113
  - - '='
114
114
  - !ruby/object:Gem::Version
115
- version: 7.0.8.3
115
+ version: 7.0.8.4
116
116
  type: :development
117
117
  prerelease: false
118
118
  version_requirements: !ruby/object:Gem::Requirement
119
119
  requirements:
120
120
  - - '='
121
121
  - !ruby/object:Gem::Version
122
- version: 7.0.8.3
122
+ version: 7.0.8.4
123
123
  description: Web apps on Rails. Simple, battle-tested conventions for building and
124
124
  testing MVC web applications. Works with any Rack-compatible server.
125
125
  email: david@loudthinking.com
@@ -310,10 +310,10 @@ licenses:
310
310
  - MIT
311
311
  metadata:
312
312
  bug_tracker_uri: https://github.com/rails/rails/issues
313
- changelog_uri: https://github.com/rails/rails/blob/v7.0.8.3/actionpack/CHANGELOG.md
314
- documentation_uri: https://api.rubyonrails.org/v7.0.8.3/
313
+ changelog_uri: https://github.com/rails/rails/blob/v7.0.8.4/actionpack/CHANGELOG.md
314
+ documentation_uri: https://api.rubyonrails.org/v7.0.8.4/
315
315
  mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
316
- source_code_uri: https://github.com/rails/rails/tree/v7.0.8.3/actionpack
316
+ source_code_uri: https://github.com/rails/rails/tree/v7.0.8.4/actionpack
317
317
  rubygems_mfa_required: 'true'
318
318
  post_install_message:
319
319
  rdoc_options: []
@@ -331,7 +331,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
331
331
  version: '0'
332
332
  requirements:
333
333
  - none
334
- rubygems_version: 3.5.10
334
+ rubygems_version: 3.3.27
335
335
  signing_key:
336
336
  specification_version: 4
337
337
  summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).