actionpack 7.1.3.1 → 7.1.3.2
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of actionpack might be problematic. Click here for more details.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/lib/abstract_controller/translation.rb +1 -16
- data/lib/action_pack/gem_version.rb +1 -1
- metadata +11 -11
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 4292c39dbe982f29c089fbad81538386ac6b1b4dd79f344e3c1ff7374d4e59f3
|
4
|
+
data.tar.gz: 89469955ba1aaa7c39380024f91094fe396b90171b5ad8a97600954473661a90
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 2ce33132f475091c9ebd244ef0c84761af9d5b9eedf89069be5ae47d1164277608f29845f8240a002fb8b7f24b70548948a82f390b786f1161d14a55084f6e41
|
7
|
+
data.tar.gz: 897ca28b4db398d969fa25b5d7a9dc75667eb73c0a94c993732a84b2ddbdaffa0fe12cfa3eab5f8094022d057f2cfb19b3d83716103924c29a5ddc14f9f7f923
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,8 @@
|
|
1
|
+
## Rails 7.1.3.2 (February 21, 2024) ##
|
2
|
+
|
3
|
+
* Fix `raise_on_missing_translations` not working correctly with the
|
4
|
+
`translate` method in controllers after the patch for CVE-2024-26143.
|
5
|
+
|
1
6
|
## Rails 7.1.3.1 (February 21, 2024) ##
|
2
7
|
|
3
8
|
* Fix possible XSS vulnerability with the `translate` method in controllers
|
@@ -28,18 +28,7 @@ module AbstractController
|
|
28
28
|
end
|
29
29
|
end
|
30
30
|
|
31
|
-
|
32
|
-
options[:default] = [] unless options[:default]
|
33
|
-
options[:default] << MISSING_TRANSLATION
|
34
|
-
end
|
35
|
-
|
36
|
-
result = ActiveSupport::HtmlSafeTranslation.translate(key, **options)
|
37
|
-
|
38
|
-
if result == MISSING_TRANSLATION
|
39
|
-
+"translation missing: #{key}"
|
40
|
-
else
|
41
|
-
result
|
42
|
-
end
|
31
|
+
ActiveSupport::HtmlSafeTranslation.translate(key, **options)
|
43
32
|
end
|
44
33
|
alias :t :translate
|
45
34
|
|
@@ -48,9 +37,5 @@ module AbstractController
|
|
48
37
|
I18n.localize(object, **options)
|
49
38
|
end
|
50
39
|
alias :l :localize
|
51
|
-
|
52
|
-
private
|
53
|
-
MISSING_TRANSLATION = -(2**60)
|
54
|
-
private_constant :MISSING_TRANSLATION
|
55
40
|
end
|
56
41
|
end
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: actionpack
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 7.1.3.
|
4
|
+
version: 7.1.3.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- David Heinemeier Hansson
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 7.1.3.
|
19
|
+
version: 7.1.3.2
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 7.1.3.
|
26
|
+
version: 7.1.3.2
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: nokogiri
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -128,28 +128,28 @@ dependencies:
|
|
128
128
|
requirements:
|
129
129
|
- - '='
|
130
130
|
- !ruby/object:Gem::Version
|
131
|
-
version: 7.1.3.
|
131
|
+
version: 7.1.3.2
|
132
132
|
type: :runtime
|
133
133
|
prerelease: false
|
134
134
|
version_requirements: !ruby/object:Gem::Requirement
|
135
135
|
requirements:
|
136
136
|
- - '='
|
137
137
|
- !ruby/object:Gem::Version
|
138
|
-
version: 7.1.3.
|
138
|
+
version: 7.1.3.2
|
139
139
|
- !ruby/object:Gem::Dependency
|
140
140
|
name: activemodel
|
141
141
|
requirement: !ruby/object:Gem::Requirement
|
142
142
|
requirements:
|
143
143
|
- - '='
|
144
144
|
- !ruby/object:Gem::Version
|
145
|
-
version: 7.1.3.
|
145
|
+
version: 7.1.3.2
|
146
146
|
type: :development
|
147
147
|
prerelease: false
|
148
148
|
version_requirements: !ruby/object:Gem::Requirement
|
149
149
|
requirements:
|
150
150
|
- - '='
|
151
151
|
- !ruby/object:Gem::Version
|
152
|
-
version: 7.1.3.
|
152
|
+
version: 7.1.3.2
|
153
153
|
description: Web apps on Rails. Simple, battle-tested conventions for building and
|
154
154
|
testing MVC web applications. Works with any Rack-compatible server.
|
155
155
|
email: david@loudthinking.com
|
@@ -346,10 +346,10 @@ licenses:
|
|
346
346
|
- MIT
|
347
347
|
metadata:
|
348
348
|
bug_tracker_uri: https://github.com/rails/rails/issues
|
349
|
-
changelog_uri: https://github.com/rails/rails/blob/v7.1.3.
|
350
|
-
documentation_uri: https://api.rubyonrails.org/v7.1.3.
|
349
|
+
changelog_uri: https://github.com/rails/rails/blob/v7.1.3.2/actionpack/CHANGELOG.md
|
350
|
+
documentation_uri: https://api.rubyonrails.org/v7.1.3.2/
|
351
351
|
mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
|
352
|
-
source_code_uri: https://github.com/rails/rails/tree/v7.1.3.
|
352
|
+
source_code_uri: https://github.com/rails/rails/tree/v7.1.3.2/actionpack
|
353
353
|
rubygems_mfa_required: 'true'
|
354
354
|
post_install_message:
|
355
355
|
rdoc_options: []
|
@@ -367,7 +367,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
367
367
|
version: '0'
|
368
368
|
requirements:
|
369
369
|
- none
|
370
|
-
rubygems_version: 3.
|
370
|
+
rubygems_version: 3.5.3
|
371
371
|
signing_key:
|
372
372
|
specification_version: 4
|
373
373
|
summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
|