actionview 8.1.2 → 8.1.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +15 -0
  3. data/lib/action_view/gem_version.rb +1 -1
  4. data/lib/action_view/helpers/tag_helper.rb +5 -2
  5. metadata +11 -11
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 5744f9f03363cee6bb6119e05f065b891143193967773bb6c9798ba08f5cf913
4
- data.tar.gz: 5290a6f008203823f1b6a4aca07916475fc80ca02de83ea5a16e7ebeab02102c
3
+ metadata.gz: a1521bfb9856b6242ae47c76c2840487ba568ba60f317c49bbe27f8e7177425c
4
+ data.tar.gz: 25e34f4fd9a84725ccbc9b47556321e680a8de1f32ed19653d37545da687b631
5
5
  SHA512:
6
- metadata.gz: 56c52dfb00b9d4b7b1785efac2d74a334a65140ef93bf24ace09a2653f8c717a50990ed1b37662bdec4e1af2a2e4624001a5da4276a9610d709b559d541a59de
7
- data.tar.gz: eb0953de4b065cc23aea27da97268891cb4656dbe2439762a1fa4b9a26436dbd27dd89c4d1f365df5a2525b70fc09ff8eb6a8602da3ffe90acaac7f8687e4bbc
6
+ metadata.gz: 3f0c3405cf8676fcd7d1f37faf05a5376ecb0b73581f728143a57072e202eab34b5157d719affb4bff42beabd461512a010028b5f1edae096111b9fd1e3648b5
7
+ data.tar.gz: 18b2e2270c57343cce22f1e69978e7739d328a657b49313643bc43bc9ee667ec90ae807ad1be87b973e5ff80ff4a1ca5273c259105c879555d5fed1ebd6f215e
data/CHANGELOG.md CHANGED
@@ -1,3 +1,18 @@
1
+ ## Rails 8.1.2.1 (March 23, 2026) ##
2
+
3
+ * Fix possible XSS in DebugExceptions middleware
4
+
5
+ [CVE-2026-33167]
6
+
7
+ *John Hawthorn*
8
+
9
+ * Skip blank attribute names in tag helpers to avoid generating invalid HTML.
10
+
11
+ [CVE-2026-33168]
12
+
13
+ *Mike Dalessio*
14
+
15
+
1
16
  ## Rails 8.1.2 (January 08, 2026) ##
2
17
 
3
18
  * Fix `file_field` to join mime types with a comma when provided as Array
data/lib/action_view/gem_version.rb CHANGED
@@ -10,7 +10,7 @@ module ActionView
10
10
  MAJOR = 8
11
11
  MINOR = 1
12
12
  TINY = 2
13
- PRE = nil
13
+ PRE = "1"
14
14
 
15
15
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
16
16
  end
data/lib/action_view/helpers/tag_helper.rb CHANGED
@@ -237,16 +237,19 @@ module ActionView
237
237
  output = +""
238
238
  sep = " "
239
239
  options.each_pair do |key, value|
240
+ next if key.blank?
241
+
240
242
  type = TAG_TYPES[key]
241
243
  if type == :data && value.is_a?(Hash)
242
244
  value.each_pair do |k, v|
243
- next if v.nil?
245
+ next if k.blank? || v.nil?
246
+
244
247
  output << sep
245
248
  output << prefix_tag_option(key, k, v, escape)
246
249
  end
247
250
  elsif type == :aria && value.is_a?(Hash)
248
251
  value.each_pair do |k, v|
249
- next if v.nil?
252
+ next if k.blank? || v.nil?
250
253
 
251
254
  case v
252
255
  when Array, Hash
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: actionview
3
3
  version: !ruby/object:Gem::Version
4
- version: 8.1.2
4
+ version: 8.1.2.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Heinemeier Hansson
@@ -15,14 +15,14 @@ dependencies:
15
15
  requirements:
16
16
  - - '='
17
17
  - !ruby/object:Gem::Version
18
- version: 8.1.2
18
+ version: 8.1.2.1
19
19
  type: :runtime
20
20
  prerelease: false
21
21
  version_requirements: !ruby/object:Gem::Requirement
22
22
  requirements:
23
23
  - - '='
24
24
  - !ruby/object:Gem::Version
25
- version: 8.1.2
25
+ version: 8.1.2.1
26
26
  - !ruby/object:Gem::Dependency
27
27
  name: builder
28
28
  requirement: !ruby/object:Gem::Requirement
@@ -85,28 +85,28 @@ dependencies:
85
85
  requirements:
86
86
  - - '='
87
87
  - !ruby/object:Gem::Version
88
- version: 8.1.2
88
+ version: 8.1.2.1
89
89
  type: :development
90
90
  prerelease: false
91
91
  version_requirements: !ruby/object:Gem::Requirement
92
92
  requirements:
93
93
  - - '='
94
94
  - !ruby/object:Gem::Version
95
- version: 8.1.2
95
+ version: 8.1.2.1
96
96
  - !ruby/object:Gem::Dependency
97
97
  name: activemodel
98
98
  requirement: !ruby/object:Gem::Requirement
99
99
  requirements:
100
100
  - - '='
101
101
  - !ruby/object:Gem::Version
102
- version: 8.1.2
102
+ version: 8.1.2.1
103
103
  type: :development
104
104
  prerelease: false
105
105
  version_requirements: !ruby/object:Gem::Requirement
106
106
  requirements:
107
107
  - - '='
108
108
  - !ruby/object:Gem::Version
109
- version: 8.1.2
109
+ version: 8.1.2.1
110
110
  description: Simple, battle-tested conventions and helpers for building web pages.
111
111
  email: david@loudthinking.com
112
112
  executables: []
@@ -247,10 +247,10 @@ licenses:
247
247
  - MIT
248
248
  metadata:
249
249
  bug_tracker_uri: https://github.com/rails/rails/issues
250
- changelog_uri: https://github.com/rails/rails/blob/v8.1.2/actionview/CHANGELOG.md
251
- documentation_uri: https://api.rubyonrails.org/v8.1.2/
250
+ changelog_uri: https://github.com/rails/rails/blob/v8.1.2.1/actionview/CHANGELOG.md
251
+ documentation_uri: https://api.rubyonrails.org/v8.1.2.1/
252
252
  mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
253
- source_code_uri: https://github.com/rails/rails/tree/v8.1.2/actionview
253
+ source_code_uri: https://github.com/rails/rails/tree/v8.1.2.1/actionview
254
254
  rubygems_mfa_required: 'true'
255
255
  rdoc_options: []
256
256
  require_paths:
@@ -267,7 +267,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
267
267
  version: '0'
268
268
  requirements:
269
269
  - none
270
- rubygems_version: 4.0.3
270
+ rubygems_version: 4.0.6
271
271
  specification_version: 4
272
272
  summary: Rendering framework putting the V in MVC (part of Rails).
273
273
  test_files: []