actiontext 7.2.0.rc1 → 7.2.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of actiontext might be problematic. Click here for more details.

Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +4 -9
  3. data/lib/action_text/content.rb +3 -2
  4. data/lib/action_text/gem_version.rb +2 -2
  5. data/package.json +1 -1
  6. metadata +13 -13
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: eb2b0a6e9036faf10e77eb9c3752b771de9b9d3c7508c56a2575c947d4463f7d
4
- data.tar.gz: 213e06db4d7952436f4df6539843bab167df4c7766a48c444541996117e6f191
3
+ metadata.gz: 5dc63c9698a7f81f5921fd2b020a573672d6f3a54376dfd962f36d871edf1f45
4
+ data.tar.gz: c5f8c2ab117222ef8d5d3badfc581dc5bf057f58e79bde760633d66c03ba22fb
5
5
  SHA512:
6
- metadata.gz: 663389d9be2b0c2bfcd20c3fb1b6699107223eb55841b91f6f337e596b37e8fd09a6e6b46c207258a9e4061c812d3232ae9e055f654fda4e6512a58c0243c9e8
7
- data.tar.gz: 03e7a7a6fc0f85a9f2742818eb6fd58d7b2456ede53d6281e8b597f078d11f6864711753f8ae8c5c9173bd0423a0012816eb5346e33e6dff3f782e055873cf56
6
+ metadata.gz: 5f4bb10cae03574f425dfbabb7186f6c917b538e6d5372969f99728a725e422de02ec96d4aa057124810c97787a73238017f90c4a9d9d389b7e5e05d6820f812
7
+ data.tar.gz: 14552567580ac097ce206674c79d0b8d0f484cda7413e1a591e681f1ce7ca2cb8fc2e1abd38a97243041eefbf536b67052cd71e1139fc948b1eb618bc56681fc
data/CHANGELOG.md CHANGED
@@ -1,25 +1,20 @@
1
- ## Rails 7.2.0.rc1 (August 06, 2024) ##
1
+ ## Rails 7.2.1 (August 22, 2024) ##
2
2
 
3
- * No changes.
3
+ * Strip `content` attribute if the key is present but the value is empty
4
4
 
5
+ *Jeremy Green*
5
6
 
6
- ## Rails 7.2.0.beta3 (July 11, 2024) ##
7
7
 
8
+ ## Rails 7.2.0 (August 09, 2024) ##
8
9
  * Only sanitize `content` attribute when present in attachments.
9
10
 
10
11
  *Petrik de Heus*
11
12
 
12
-
13
- ## Rails 7.2.0.beta2 (June 04, 2024) ##
14
-
15
13
  * Sanitize ActionText HTML ContentAttachment in Trix edit view
16
14
  [CVE-2024-32464]
17
15
 
18
16
  *Aaron Patterson*, *Zack Deveau*
19
17
 
20
-
21
- ## Rails 7.2.0.beta1 (May 29, 2024) ##
22
-
23
18
  * Use `includes` instead of `eager_load` for `with_all_rich_text`.
24
19
 
25
20
  *Petrik de Heus*
data/lib/action_text/content.rb CHANGED
@@ -97,8 +97,9 @@ module ActionText
97
97
 
98
98
  def render_attachments(**options, &block)
99
99
  content = fragment.replace(ActionText::Attachment.tag_name) do |node|
100
- if node.key? "content"
101
- node["content"] = sanitize_content_attachment(node["content"])
100
+ if node.key?("content")
101
+ sanitized_content = sanitize_content_attachment(node.remove_attribute("content").to_s)
102
+ node["content"] = sanitized_content if sanitized_content.present?
102
103
  end
103
104
  block.call(attachment_for_node(node, **options))
104
105
  end
data/lib/action_text/gem_version.rb CHANGED
@@ -11,8 +11,8 @@ module ActionText
11
11
  module VERSION
12
12
  MAJOR = 7
13
13
  MINOR = 2
14
- TINY = 0
15
- PRE = "rc1"
14
+ TINY = 1
15
+ PRE = nil
16
16
 
17
17
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
18
18
  end
data/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rails/actiontext",
3
- "version": "7.2.0-rc1",
3
+ "version": "7.2.100",
4
4
  "description": "Edit and display rich text in Rails applications",
5
5
  "module": "app/assets/javascripts/actiontext.esm.js",
6
6
  "main": "app/assets/javascripts/actiontext.js",
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: actiontext
3
3
  version: !ruby/object:Gem::Version
4
- version: 7.2.0.rc1
4
+ version: 7.2.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Javan Makhmali
@@ -10,7 +10,7 @@ authors:
10
10
  autorequire:
11
11
  bindir: bin
12
12
  cert_chain: []
13
- date: 2024-08-06 00:00:00.000000000 Z
13
+ date: 2024-08-22 00:00:00.000000000 Z
14
14
  dependencies:
15
15
  - !ruby/object:Gem::Dependency
16
16
  name: activesupport
@@ -18,56 +18,56 @@ dependencies:
18
18
  requirements:
19
19
  - - '='
20
20
  - !ruby/object:Gem::Version
21
- version: 7.2.0.rc1
21
+ version: 7.2.1
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
25
25
  requirements:
26
26
  - - '='
27
27
  - !ruby/object:Gem::Version
28
- version: 7.2.0.rc1
28
+ version: 7.2.1
29
29
  - !ruby/object:Gem::Dependency
30
30
  name: activerecord
31
31
  requirement: !ruby/object:Gem::Requirement
32
32
  requirements:
33
33
  - - '='
34
34
  - !ruby/object:Gem::Version
35
- version: 7.2.0.rc1
35
+ version: 7.2.1
36
36
  type: :runtime
37
37
  prerelease: false
38
38
  version_requirements: !ruby/object:Gem::Requirement
39
39
  requirements:
40
40
  - - '='
41
41
  - !ruby/object:Gem::Version
42
- version: 7.2.0.rc1
42
+ version: 7.2.1
43
43
  - !ruby/object:Gem::Dependency
44
44
  name: activestorage
45
45
  requirement: !ruby/object:Gem::Requirement
46
46
  requirements:
47
47
  - - '='
48
48
  - !ruby/object:Gem::Version
49
- version: 7.2.0.rc1
49
+ version: 7.2.1
50
50
  type: :runtime
51
51
  prerelease: false
52
52
  version_requirements: !ruby/object:Gem::Requirement
53
53
  requirements:
54
54
  - - '='
55
55
  - !ruby/object:Gem::Version
56
- version: 7.2.0.rc1
56
+ version: 7.2.1
57
57
  - !ruby/object:Gem::Dependency
58
58
  name: actionpack
59
59
  requirement: !ruby/object:Gem::Requirement
60
60
  requirements:
61
61
  - - '='
62
62
  - !ruby/object:Gem::Version
63
- version: 7.2.0.rc1
63
+ version: 7.2.1
64
64
  type: :runtime
65
65
  prerelease: false
66
66
  version_requirements: !ruby/object:Gem::Requirement
67
67
  requirements:
68
68
  - - '='
69
69
  - !ruby/object:Gem::Version
70
- version: 7.2.0.rc1
70
+ version: 7.2.1
71
71
  - !ruby/object:Gem::Dependency
72
72
  name: nokogiri
73
73
  requirement: !ruby/object:Gem::Requirement
@@ -163,10 +163,10 @@ licenses:
163
163
  - MIT
164
164
  metadata:
165
165
  bug_tracker_uri: https://github.com/rails/rails/issues
166
- changelog_uri: https://github.com/rails/rails/blob/v7.2.0.rc1/actiontext/CHANGELOG.md
167
- documentation_uri: https://api.rubyonrails.org/v7.2.0.rc1/
166
+ changelog_uri: https://github.com/rails/rails/blob/v7.2.1/actiontext/CHANGELOG.md
167
+ documentation_uri: https://api.rubyonrails.org/v7.2.1/
168
168
  mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
169
- source_code_uri: https://github.com/rails/rails/tree/v7.2.0.rc1/actiontext
169
+ source_code_uri: https://github.com/rails/rails/tree/v7.2.1/actiontext
170
170
  rubygems_mfa_required: 'true'
171
171
  post_install_message:
172
172
  rdoc_options: []