actiontext 6.1.7.7 → 6.1.7.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7098b4160a9f67ccadd80211bb458313f4c9ddeecb2200a73328770069c9f59b
-  data.tar.gz: 3e7c793dbb364ece4b7506833a0994c6f919e970981d6989d5a279e8cb3ba7eb
+  metadata.gz: e242e4dbf0b95791c07ed12c9a78d566bcb5ff02829943a9126a282b81bce57b
+  data.tar.gz: 41c09d4735e64c21297c0607db082c5d1456b29da02a3558db1ea80499a51f3e
 SHA512:
-  metadata.gz: 544006ae7215cffd14ffdba6f57969ae193f0d07b58e458e5cb33e066dcc7792b0b7ce7cd2936ac96141b0b9d71411531aa566a6b732b793445f3a49ed0e9f34
-  data.tar.gz: b00d42a000a5414d9946a6250f284db1db0c230edb42dcf1d344b858ef6d1c4b046b05347fdf40cd0a53aa4722b1a811aa1c90abed197176825fd083f13f0fcc
+  metadata.gz: c55c11da7f8209e12a98b3965296fa80def359dce7fa698c62558b5dbeccbc2049824e7e5a622c2f6a3fa2d9f8afac6ddb54906e799d1708798c812a3aef4bed
+  data.tar.gz: e8168f6394e028d1b814ac4a6052da8215844f8e48530a4f2d23aecd76ce31e8f8909053caafce92e204dd44226de17cf150c296658fd5980a18aa505f89a229

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+## Rails 6.1.7.9 (October 15, 2024) ##
+
+*   Avoid backtracing in plain_text_for_blockquote_node
+
+    [CVE-2024-47888]
+
+
+## Rails 6.1.7.8 (June 04, 2024) ##
+
+*   No changes.
+
+
 ## Rails 6.1.7.7 (February 21, 2024) ##
 
 *   No changes.

data/lib/action_text/gem_version.rb

@@ -10,7 +10,7 @@ module ActionText
     MAJOR = 6
     MINOR = 1
     TINY  = 7
-    PRE   = "7"
+    PRE   = "9"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/action_text/plain_text_conversion.rb

@@ -55,7 +55,12 @@ module ActionText
 
       def plain_text_for_blockquote_node(node, index)
         text = plain_text_for_block(node)
-        text.sub(/\A(\s*)(.+?)(\s*)\Z/m, '\1“\2”\3')
+        return "“”" if text.blank?
+
+        text = text.dup
+        text.insert(text.rindex(/\S/) + 1, "”")
+        text.insert(text.index(/\S/), "“")
+        text
       end
 
       def plain_text_for_li_node(node, index)

data/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rails/actiontext",
-  "version": "6.1.7-7",
+  "version": "6.1.709",
   "description": "Edit and display rich text in Rails applications",
   "main": "app/javascript/actiontext/index.js",
   "files": [

metadata

@@ -1,16 +1,16 @@
 --- !ruby/object:Gem::Specification
 name: actiontext
 version: !ruby/object:Gem::Version
-  version: 6.1.7.7
+  version: 6.1.7.9
 platform: ruby
 authors:
 - Javan Makhmali
 - Sam Stephenson
 - David Heinemeier Hansson
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2024-02-21 00:00:00.000000000 Z
+date: 2024-10-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -18,56 +18,56 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: activerecord
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: activestorage
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: actionpack
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.1.7.7
+        version: 6.1.7.9
 - !ruby/object:Gem::Dependency
   name: nokogiri
   requirement: !ruby/object:Gem::Requirement
@@ -140,12 +140,12 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.7/actiontext/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v6.1.7.7/
+  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.9/actiontext/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v6.1.7.9/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.7/actiontext
+  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.9/actiontext
   rubygems_mfa_required: 'true'
-post_install_message:
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -160,8 +160,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.2.22
-signing_key:
+rubygems_version: 3.5.16
+signing_key: 
 specification_version: 4
 summary: Rich text framework.
 test_files: []