actiontext 7.1.4 → 7.1.4.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +6 -0
  3. data/lib/action_text/gem_version.rb +1 -1
  4. data/lib/action_text/plain_text_conversion.rb +6 -1
  5. data/package.json +1 -1
  6. metadata +17 -17
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a46c8b0cd1b2be3d1a882600d4879c8fdb39a3fb453d76107db9180d14961f96
4
- data.tar.gz: ef742721e408cf74ce53d7a97a875afe2859afdbd9234cd19dafb45a9ca802aa
3
+ metadata.gz: 83137894c7ec4efb84fc7e1bfe67930e11c1e8e4c0f15aa0fd94c3eebdcf7420
4
+ data.tar.gz: 2d4d75c5ca5eee0f373b85b1e5fe7d52116667358073006945a705ac223714a9
5
5
  SHA512:
6
- metadata.gz: 388397f9d738efe9a872d06c7f63aac7d880b31835559f21a3a18783d8eee5009dac7d725faaa90bfe842807049f8abdd8e3b51276f5ab041711d88b07239161
7
- data.tar.gz: 0eccc5b5bdfbeb05724d050e8c6324abe1e8706cad0dd6f228582bf97b0ec5946f5ffa205e1d98ed9be73dc831b351560e4c5884881f090dd226d2b8f5bd784f
6
+ metadata.gz: d0bb9634c60627a5cf5692d514fdf244e2fa87a91c059674cdd6f61254e13d4f3b5623e0080ec2bb4bfe9e891d6bb16ea6f6c502c2887dd18fed03395cecb656
7
+ data.tar.gz: a71dc139c054b458c066c06d16e06544e6c63f1eb1515708370d8bd8face95a6a5ff7210fad5d97c1e8a03c423b77e4e36d2e6510f716f5fe84ca4fd016d38d4
data/CHANGELOG.md CHANGED
@@ -1,3 +1,9 @@
1
+ ## Rails 7.1.4.1 (October 15, 2024) ##
2
+
3
+ * Avoid backtracing in plain_text_for_blockquote_node
4
+
5
+ [CVE-2024-47888]
6
+
1
7
  ## Rails 7.1.4 (August 22, 2024) ##
2
8
 
3
9
  * Strip `content` attribute if the key is present but the value is empty
data/lib/action_text/gem_version.rb CHANGED
@@ -10,7 +10,7 @@ module ActionText
10
10
  MAJOR = 7
11
11
  MINOR = 1
12
12
  TINY = 4
13
- PRE = nil
13
+ PRE = "1"
14
14
 
15
15
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
16
16
  end
data/lib/action_text/plain_text_conversion.rb CHANGED
@@ -63,7 +63,12 @@ module ActionText
63
63
 
64
64
  def plain_text_for_blockquote_node(node, index)
65
65
  text = plain_text_for_block(node)
66
- text.sub(/\A(\s*)(.+?)(\s*)\Z/m, '\1“\2”\3')
66
+ return "“”" if text.blank?
67
+
68
+ text = text.dup
69
+ text.insert(text.rindex(/\S/) + 1, "”")
70
+ text.insert(text.index(/\S/), "“")
71
+ text
67
72
  end
68
73
 
69
74
  def plain_text_for_li_node(node, index)
data/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@rails/actiontext",
3
- "version": "7.1.400",
3
+ "version": "7.1.401",
4
4
  "description": "Edit and display rich text in Rails applications",
5
5
  "module": "app/assets/javascripts/actiontext.esm.js",
6
6
  "main": "app/assets/javascripts/actiontext.js",
metadata CHANGED
@@ -1,16 +1,16 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: actiontext
3
3
  version: !ruby/object:Gem::Version
4
- version: 7.1.4
4
+ version: 7.1.4.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Javan Makhmali
8
8
  - Sam Stephenson
9
9
  - David Heinemeier Hansson
10
- autorequire:
10
+ autorequire:
11
11
  bindir: bin
12
12
  cert_chain: []
13
- date: 2024-08-22 00:00:00.000000000 Z
13
+ date: 2024-10-15 00:00:00.000000000 Z
14
14
  dependencies:
15
15
  - !ruby/object:Gem::Dependency
16
16
  name: activesupport
@@ -18,56 +18,56 @@ dependencies:
18
18
  requirements:
19
19
  - - '='
20
20
  - !ruby/object:Gem::Version
21
- version: 7.1.4
21
+ version: 7.1.4.1
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
25
25
  requirements:
26
26
  - - '='
27
27
  - !ruby/object:Gem::Version
28
- version: 7.1.4
28
+ version: 7.1.4.1
29
29
  - !ruby/object:Gem::Dependency
30
30
  name: activerecord
31
31
  requirement: !ruby/object:Gem::Requirement
32
32
  requirements:
33
33
  - - '='
34
34
  - !ruby/object:Gem::Version
35
- version: 7.1.4
35
+ version: 7.1.4.1
36
36
  type: :runtime
37
37
  prerelease: false
38
38
  version_requirements: !ruby/object:Gem::Requirement
39
39
  requirements:
40
40
  - - '='
41
41
  - !ruby/object:Gem::Version
42
- version: 7.1.4
42
+ version: 7.1.4.1
43
43
  - !ruby/object:Gem::Dependency
44
44
  name: activestorage
45
45
  requirement: !ruby/object:Gem::Requirement
46
46
  requirements:
47
47
  - - '='
48
48
  - !ruby/object:Gem::Version
49
- version: 7.1.4
49
+ version: 7.1.4.1
50
50
  type: :runtime
51
51
  prerelease: false
52
52
  version_requirements: !ruby/object:Gem::Requirement
53
53
  requirements:
54
54
  - - '='
55
55
  - !ruby/object:Gem::Version
56
- version: 7.1.4
56
+ version: 7.1.4.1
57
57
  - !ruby/object:Gem::Dependency
58
58
  name: actionpack
59
59
  requirement: !ruby/object:Gem::Requirement
60
60
  requirements:
61
61
  - - '='
62
62
  - !ruby/object:Gem::Version
63
- version: 7.1.4
63
+ version: 7.1.4.1
64
64
  type: :runtime
65
65
  prerelease: false
66
66
  version_requirements: !ruby/object:Gem::Requirement
67
67
  requirements:
68
68
  - - '='
69
69
  - !ruby/object:Gem::Version
70
- version: 7.1.4
70
+ version: 7.1.4.1
71
71
  - !ruby/object:Gem::Dependency
72
72
  name: nokogiri
73
73
  requirement: !ruby/object:Gem::Requirement
@@ -163,12 +163,12 @@ licenses:
163
163
  - MIT
164
164
  metadata:
165
165
  bug_tracker_uri: https://github.com/rails/rails/issues
166
- changelog_uri: https://github.com/rails/rails/blob/v7.1.4/actiontext/CHANGELOG.md
167
- documentation_uri: https://api.rubyonrails.org/v7.1.4/
166
+ changelog_uri: https://github.com/rails/rails/blob/v7.1.4.1/actiontext/CHANGELOG.md
167
+ documentation_uri: https://api.rubyonrails.org/v7.1.4.1/
168
168
  mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
169
- source_code_uri: https://github.com/rails/rails/tree/v7.1.4/actiontext
169
+ source_code_uri: https://github.com/rails/rails/tree/v7.1.4.1/actiontext
170
170
  rubygems_mfa_required: 'true'
171
- post_install_message:
171
+ post_install_message:
172
172
  rdoc_options: []
173
173
  require_paths:
174
174
  - lib
@@ -183,8 +183,8 @@ required_rubygems_version: !ruby/object:Gem::Requirement
183
183
  - !ruby/object:Gem::Version
184
184
  version: '0'
185
185
  requirements: []
186
- rubygems_version: 3.5.11
187
- signing_key:
186
+ rubygems_version: 3.5.16
187
+ signing_key:
188
188
  specification_version: 4
189
189
  summary: Rich text framework.
190
190
  test_files: []