actionview 6.0.3.7 → 6.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '0901467d038615517c4bb844ada76405c5881b51faf764c6620b593c33cdc32d'
-  data.tar.gz: 511ca67c07b8a6a900c4e124cc810b5d83c9b7fda92c401058a974aecf4653ec
+  metadata.gz: 6ae3e4955963f84b4299850e39bf729597e07e7c0f9af6d79258a65131053f22
+  data.tar.gz: 609472d2030d8e4d54964169fe770a58e2a908f2a5b7c4e207a6496a8e4cd6a4
 SHA512:
-  metadata.gz: 77ca182510ca79fc7de26c58a5a86790938eec97cbea0f69d7ad374e3910017181e533ad4925752407f765f7d9db2c4d51725cac1b6d7aff09d0abcd29533d04
-  data.tar.gz: 1c987532210718e9d512c14c143418c378cf9ce1e7e83b87b79876899e3ae9bb1baa13931efdbf17f29100b7d1f70e03f9ffb702fe6536271d1bf8c6964c7e4a
+  metadata.gz: f0c4acc4e8cfb5e67b19ed61155b56ecb6b627d1e172ea8b38db4d2a6a4a2ec41db356581993e9ca228029896bdca775e40f4dba2a37120a3cb7b061a0d6d096
+  data.tar.gz: e2789295904614c027c6f4d1bade6b8d1beeae00d2cc224b59ee83af0073ce126d4f2bb5f210c2cd362668266f578449f6d022eb62fd0b216e9c83dba750a31e

data/CHANGELOG.md

@@ -1,3 +1,13 @@
+## Rails 6.0.4 (June 15, 2021) ##
+
+*   SanitizeHelper.sanitized_allowed_attributes and SanitizeHelper.sanitized_allowed_tags
+    call safe_list_sanitizer's class method
+
+    Fixes #39586
+
+    *Taufiq Muhammadi*
+
+
 ## Rails 6.0.3.7 (May 05, 2021) ##
 
 *   No changes.
@@ -34,6 +44,7 @@
 
 *   [CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs
 
+
 ## Rails 6.0.3 (May 06, 2020) ##
 
 *   annotated_source_code returns an empty array so TemplateErrors without a

data/README.rdoc

@@ -15,7 +15,7 @@ The latest version of Action View can be installed with RubyGems:
 
 Source code can be downloaded as part of the Rails project on GitHub:
 
-* https://github.com/rails/rails/tree/master/actionview
+* https://github.com/rails/rails/tree/main/actionview
 
 
 == License

data/lib/action_view/gem_version.rb

@@ -9,8 +9,8 @@ module ActionView
   module VERSION
     MAJOR = 6
     MINOR = 0
-    TINY  = 3
-    PRE   = "7"
+    TINY  = 4
+    PRE   = nil
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

data/lib/action_view/helpers/form_tag_helper.rb

@@ -896,16 +896,15 @@ module ActionView
         end
 
         def set_default_disable_with(value, tag_options)
-          return unless ActionView::Base.automatically_disable_submit_tag
-          data = tag_options["data"]
+          data = tag_options.fetch("data", {})
 
-          unless tag_options["data-disable-with"] == false || (data && data["disable_with"] == false)
+          if tag_options["data-disable-with"] == false || data["disable_with"] == false
+            data.delete("disable_with")
+          elsif ActionView::Base.automatically_disable_submit_tag
             disable_with_text = tag_options["data-disable-with"]
-            disable_with_text ||= data["disable_with"] if data
+            disable_with_text ||= data["disable_with"]
             disable_with_text ||= value.to_s.clone
             tag_options.deep_merge!("data" => { "disable_with" => disable_with_text })
-          else
-            data.delete("disable_with") if data
           end
 
           tag_options.delete("data-disable-with")

data/lib/action_view/helpers/sanitize_helper.rb

@@ -129,11 +129,11 @@ module ActionView
         end
 
         def sanitized_allowed_tags
-          safe_list_sanitizer.allowed_tags
+          sanitizer_vendor.safe_list_sanitizer.allowed_tags
         end
 
         def sanitized_allowed_attributes
-          safe_list_sanitizer.allowed_attributes
+          sanitizer_vendor.safe_list_sanitizer.allowed_attributes
         end
 
         # Gets the Rails::Html::FullSanitizer instance used by +strip_tags+. Replace with

data/lib/assets/compiled/rails-ujs.js

@@ -1,6 +1,6 @@
 /*
 Unobtrusive JavaScript
-https://github.com/rails/rails/blob/master/actionview/app/assets/javascripts
+https://github.com/rails/rails/blob/main/actionview/app/assets/javascripts
 Released under the MIT license
  */;
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: actionview
 version: !ruby/object:Gem::Version
-  version: 6.0.3.7
+  version: 6.0.4
 platform: ruby
 authors:
 - David Heinemeier Hansson
-autorequire:
+autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-05 00:00:00.000000000 Z
+date: 2021-06-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -16,14 +16,14 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.3.7
+        version: 6.0.4
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.3.7
+        version: 6.0.4
 - !ruby/object:Gem::Dependency
   name: builder
   requirement: !ruby/object:Gem::Requirement
@@ -92,28 +92,28 @@ dependencies:
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.3.7
+        version: 6.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.3.7
+        version: 6.0.4
 - !ruby/object:Gem::Dependency
   name: activemodel
   requirement: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.3.7
+        version: 6.0.4
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - '='
       - !ruby/object:Gem::Version
-        version: 6.0.3.7
+        version: 6.0.4
 description: Simple, battle-tested conventions and helpers for building web pages.
 email: david@loudthinking.com
 executables: []
@@ -236,11 +236,11 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v6.0.3.7/actionview/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v6.0.3.7/
+  changelog_uri: https://github.com/rails/rails/blob/v6.0.4/actionview/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v6.0.4/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v6.0.3.7/actionview
-post_install_message:
+  source_code_uri: https://github.com/rails/rails/tree/v6.0.4/actionview
+post_install_message: 
 rdoc_options: []
 require_paths:
 - lib
@@ -257,7 +257,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
 requirements:
 - none
 rubygems_version: 3.1.2
-signing_key:
+signing_key: 
 specification_version: 4
 summary: Rendering framework putting the V in MVC (part of Rails).
 test_files: []