actionview 6.0.3 → 6.0.3.1

Sign up to get free protection for your applications and to get access to all the features.

Potentially problematic release.

This version of actionview might be problematic. Click here for more details.

Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +4 -0
  3. data/lib/action_view/gem_version.rb +1 -1
  4. data/lib/assets/compiled/rails-ujs.js +1 -1
  5. metadata +11 -11
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: d99216cc5b0490da69d6d2f0bf03f24672fcbe27470d7c9dceb0e5250f2561b0
4
- data.tar.gz: 63c769589ca139c17218a50043279c8da909c48b76b73ed007974aa4f7b66a67
3
+ metadata.gz: 4d9847672c3b4327d0549b658ed0d559c40b897ac1cf19ec15485871239e83cf
4
+ data.tar.gz: c90e173c0b414a63fb814b34a9d08879a42493d66e2fa42083efa8e883d06802
5
5
  SHA512:
6
- metadata.gz: 4d8deb39281451c706021f63cdd42917b11e534c698a90de33661057a36f32ad1bec4705908e77dbe615d4beeb103a3267607d8209ff0c0b7b9fa9cea32e46e9
7
- data.tar.gz: 62562e0c5a27dbb5eefb1e92256b838e26d03660b88650abef30025a4eb99ebca6d383e43a36d214aa5a512cbe3d34f7475a7b462fd039075e0431682a7e104f
6
+ metadata.gz: a9060b8101caebedc4f0d93b3f8490fd622a6d8fc5993be0680cabf710fde6f94d0a35964a338f6ecec2b26b9747a840d42ec3e931b26e687f52fda175446c69
7
+ data.tar.gz: fc2b9d1e38e1051c8d2045dadac317046a70570f5b543e51a287ba2553be8d6d0740e6d69f0038a66f4a85d875c2081b999fef8b26e91da569c5b05f4b080ef3
data/CHANGELOG.md CHANGED
@@ -1,3 +1,7 @@
1
+ ## Rails 6.0.3.1 (May 18, 2020) ##
2
+
3
+ * [CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs
4
+
1
5
  ## Rails 6.0.3 (May 06, 2020) ##
2
6
 
3
7
  * annotated_source_code returns an empty array so TemplateErrors without a
data/lib/action_view/gem_version.rb CHANGED
@@ -10,7 +10,7 @@ module ActionView
10
10
  MAJOR = 6
11
11
  MINOR = 0
12
12
  TINY = 3
13
- PRE = nil
13
+ PRE = "1"
14
14
 
15
15
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
16
16
  end
data/lib/assets/compiled/rails-ujs.js CHANGED
@@ -247,8 +247,8 @@ Released under the MIT license
247
247
  }
248
248
  if (!options.crossDomain) {
249
249
  xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest');
250
+ CSRFProtection(xhr);
250
251
  }
251
- CSRFProtection(xhr);
252
252
  xhr.withCredentials = !!options.withCredentials;
253
253
  xhr.onreadystatechange = function() {
254
254
  if (xhr.readyState === XMLHttpRequest.DONE) {
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: actionview
3
3
  version: !ruby/object:Gem::Version
4
- version: 6.0.3
4
+ version: 6.0.3.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Heinemeier Hansson
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2020-05-06 00:00:00.000000000 Z
11
+ date: 2020-05-18 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -16,14 +16,14 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 6.0.3
19
+ version: 6.0.3.1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 6.0.3
26
+ version: 6.0.3.1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: builder
29
29
  requirement: !ruby/object:Gem::Requirement
@@ -92,28 +92,28 @@ dependencies:
92
92
  requirements:
93
93
  - - '='
94
94
  - !ruby/object:Gem::Version
95
- version: 6.0.3
95
+ version: 6.0.3.1
96
96
  type: :development
97
97
  prerelease: false
98
98
  version_requirements: !ruby/object:Gem::Requirement
99
99
  requirements:
100
100
  - - '='
101
101
  - !ruby/object:Gem::Version
102
- version: 6.0.3
102
+ version: 6.0.3.1
103
103
  - !ruby/object:Gem::Dependency
104
104
  name: activemodel
105
105
  requirement: !ruby/object:Gem::Requirement
106
106
  requirements:
107
107
  - - '='
108
108
  - !ruby/object:Gem::Version
109
- version: 6.0.3
109
+ version: 6.0.3.1
110
110
  type: :development
111
111
  prerelease: false
112
112
  version_requirements: !ruby/object:Gem::Requirement
113
113
  requirements:
114
114
  - - '='
115
115
  - !ruby/object:Gem::Version
116
- version: 6.0.3
116
+ version: 6.0.3.1
117
117
  description: Simple, battle-tested conventions and helpers for building web pages.
118
118
  email: david@loudthinking.com
119
119
  executables: []
@@ -236,10 +236,10 @@ licenses:
236
236
  - MIT
237
237
  metadata:
238
238
  bug_tracker_uri: https://github.com/rails/rails/issues
239
- changelog_uri: https://github.com/rails/rails/blob/v6.0.3/actionview/CHANGELOG.md
240
- documentation_uri: https://api.rubyonrails.org/v6.0.3/
239
+ changelog_uri: https://github.com/rails/rails/blob/v6.0.3.1/actionview/CHANGELOG.md
240
+ documentation_uri: https://api.rubyonrails.org/v6.0.3.1/
241
241
  mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
242
- source_code_uri: https://github.com/rails/rails/tree/v6.0.3/actionview
242
+ source_code_uri: https://github.com/rails/rails/tree/v6.0.3.1/actionview
243
243
  post_install_message:
244
244
  rdoc_options: []
245
245
  require_paths: