actionpack 7.1.3.1 → 7.1.3.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/lib/abstract_controller/translation.rb +1 -16
- data/lib/action_pack/gem_version.rb +1 -1
- metadata +11 -11
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 4292c39dbe982f29c089fbad81538386ac6b1b4dd79f344e3c1ff7374d4e59f3
|
4
|
+
data.tar.gz: 89469955ba1aaa7c39380024f91094fe396b90171b5ad8a97600954473661a90
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 2ce33132f475091c9ebd244ef0c84761af9d5b9eedf89069be5ae47d1164277608f29845f8240a002fb8b7f24b70548948a82f390b786f1161d14a55084f6e41
|
7
|
+
data.tar.gz: 897ca28b4db398d969fa25b5d7a9dc75667eb73c0a94c993732a84b2ddbdaffa0fe12cfa3eab5f8094022d057f2cfb19b3d83716103924c29a5ddc14f9f7f923
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,8 @@
|
|
1
|
+
## Rails 7.1.3.2 (February 21, 2024) ##
|
2
|
+
|
3
|
+
* Fix `raise_on_missing_translations` not working correctly with the
|
4
|
+
`translate` method in controllers after the patch for CVE-2024-26143.
|
5
|
+
|
1
6
|
## Rails 7.1.3.1 (February 21, 2024) ##
|
2
7
|
|
3
8
|
* Fix possible XSS vulnerability with the `translate` method in controllers
|
@@ -28,18 +28,7 @@ module AbstractController
|
|
28
28
|
end
|
29
29
|
end
|
30
30
|
|
31
|
-
|
32
|
-
options[:default] = [] unless options[:default]
|
33
|
-
options[:default] << MISSING_TRANSLATION
|
34
|
-
end
|
35
|
-
|
36
|
-
result = ActiveSupport::HtmlSafeTranslation.translate(key, **options)
|
37
|
-
|
38
|
-
if result == MISSING_TRANSLATION
|
39
|
-
+"translation missing: #{key}"
|
40
|
-
else
|
41
|
-
result
|
42
|
-
end
|
31
|
+
ActiveSupport::HtmlSafeTranslation.translate(key, **options)
|
43
32
|
end
|
44
33
|
alias :t :translate
|
45
34
|
|
@@ -48,9 +37,5 @@ module AbstractController
|
|
48
37
|
I18n.localize(object, **options)
|
49
38
|
end
|
50
39
|
alias :l :localize
|
51
|
-
|
52
|
-
private
|
53
|
-
MISSING_TRANSLATION = -(2**60)
|
54
|
-
private_constant :MISSING_TRANSLATION
|
55
40
|
end
|
56
41
|
end
|
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: actionpack
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 7.1.3.
|
4
|
+
version: 7.1.3.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- David Heinemeier Hansson
|
@@ -16,14 +16,14 @@ dependencies:
|
|
16
16
|
requirements:
|
17
17
|
- - '='
|
18
18
|
- !ruby/object:Gem::Version
|
19
|
-
version: 7.1.3.
|
19
|
+
version: 7.1.3.2
|
20
20
|
type: :runtime
|
21
21
|
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - '='
|
25
25
|
- !ruby/object:Gem::Version
|
26
|
-
version: 7.1.3.
|
26
|
+
version: 7.1.3.2
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
28
|
name: nokogiri
|
29
29
|
requirement: !ruby/object:Gem::Requirement
|
@@ -128,28 +128,28 @@ dependencies:
|
|
128
128
|
requirements:
|
129
129
|
- - '='
|
130
130
|
- !ruby/object:Gem::Version
|
131
|
-
version: 7.1.3.
|
131
|
+
version: 7.1.3.2
|
132
132
|
type: :runtime
|
133
133
|
prerelease: false
|
134
134
|
version_requirements: !ruby/object:Gem::Requirement
|
135
135
|
requirements:
|
136
136
|
- - '='
|
137
137
|
- !ruby/object:Gem::Version
|
138
|
-
version: 7.1.3.
|
138
|
+
version: 7.1.3.2
|
139
139
|
- !ruby/object:Gem::Dependency
|
140
140
|
name: activemodel
|
141
141
|
requirement: !ruby/object:Gem::Requirement
|
142
142
|
requirements:
|
143
143
|
- - '='
|
144
144
|
- !ruby/object:Gem::Version
|
145
|
-
version: 7.1.3.
|
145
|
+
version: 7.1.3.2
|
146
146
|
type: :development
|
147
147
|
prerelease: false
|
148
148
|
version_requirements: !ruby/object:Gem::Requirement
|
149
149
|
requirements:
|
150
150
|
- - '='
|
151
151
|
- !ruby/object:Gem::Version
|
152
|
-
version: 7.1.3.
|
152
|
+
version: 7.1.3.2
|
153
153
|
description: Web apps on Rails. Simple, battle-tested conventions for building and
|
154
154
|
testing MVC web applications. Works with any Rack-compatible server.
|
155
155
|
email: david@loudthinking.com
|
@@ -346,10 +346,10 @@ licenses:
|
|
346
346
|
- MIT
|
347
347
|
metadata:
|
348
348
|
bug_tracker_uri: https://github.com/rails/rails/issues
|
349
|
-
changelog_uri: https://github.com/rails/rails/blob/v7.1.3.
|
350
|
-
documentation_uri: https://api.rubyonrails.org/v7.1.3.
|
349
|
+
changelog_uri: https://github.com/rails/rails/blob/v7.1.3.2/actionpack/CHANGELOG.md
|
350
|
+
documentation_uri: https://api.rubyonrails.org/v7.1.3.2/
|
351
351
|
mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
|
352
|
-
source_code_uri: https://github.com/rails/rails/tree/v7.1.3.
|
352
|
+
source_code_uri: https://github.com/rails/rails/tree/v7.1.3.2/actionpack
|
353
353
|
rubygems_mfa_required: 'true'
|
354
354
|
post_install_message:
|
355
355
|
rdoc_options: []
|
@@ -367,7 +367,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
367
367
|
version: '0'
|
368
368
|
requirements:
|
369
369
|
- none
|
370
|
-
rubygems_version: 3.
|
370
|
+
rubygems_version: 3.5.3
|
371
371
|
signing_key:
|
372
372
|
specification_version: 4
|
373
373
|
summary: Web-flow and rendering framework putting the VC in MVC (part of Rails).
|