activesupport 7.0.4.2 → 7.0.4.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b3b5e296e65bfdc81c344a77a989f352ea66801e60d70e79761f7caca0f89b52
-  data.tar.gz: 633843403f31a29e039064b99558621ee1e04f2ffdcbbc9d7c3faad5ba76aca1
+  metadata.gz: af711c41eae644a4fba03556039ec8d30337836525e57b896af3fa895bd5826f
+  data.tar.gz: 7c4eb0e42e2aaa1ba161eedd7657cdd8a458adfb456ac3df242a72dceceecc5c
 SHA512:
-  metadata.gz: b7466b6167afea9df25d97382060e976f35551fd97e4c5649b644714e7791f351a9a3ca08b6b2283d430588c8a21e71acc4d65795798d872505ee0b6e67a9aea
-  data.tar.gz: 70e12f9f04bebf2d4f760892c218b0b150e252cc0f887dad2e50f1a42e5dac3e3b8b929b45da3c823c91604ebf02f32d35c6c367e19f4ce46bfa02a24899ce7c
+  metadata.gz: f255bc83f2f93d1743014853471a053798dbad3e8162551a0c0593eb5c5ea8abef362abf37de6c298985e9413c32b5ad02294a84dad063da8c150f8ce34d3051
+  data.tar.gz: 39f1750b28dc755ead136f17a4b999b9d6e46a5bdf8b733ded897c6ec163f49b8651df20682b6568aa7bd8bf82c127aa5b00fc354ca80a82ba72c642caa25dd2

data/CHANGELOG.md

@@ -1,3 +1,10 @@
+## Rails 7.0.4.3 (March 13, 2023) ##
+
+*   Implement SafeBuffer#bytesplice
+
+    [CVE-2023-28120]
+
+
 ## Rails 7.0.4.2 (January 24, 2023) ##
 
 *   No changes.

data/lib/active_support/core_ext/string/output_safety.rb

@@ -219,6 +219,10 @@ module ActiveSupport # :nodoc:
     end
     alias << concat
 
+    def bytesplice(*args, value)
+      super(*args, implicit_html_escape_interpolated_argument(value))
+    end
+
     def insert(index, value)
       super(index, implicit_html_escape_interpolated_argument(value))
     end

data/lib/active_support/gem_version.rb

@@ -10,7 +10,7 @@ module ActiveSupport
     MAJOR = 7
     MINOR = 0
     TINY  = 4
-    PRE   = "2"
+    PRE   = "3"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activesupport
 version: !ruby/object:Gem::Version
-  version: 7.0.4.2
+  version: 7.0.4.3
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-01-25 00:00:00.000000000 Z
+date: 2023-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n
@@ -359,10 +359,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v7.0.4.2/activesupport/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v7.0.4.2/
+  changelog_uri: https://github.com/rails/rails/blob/v7.0.4.3/activesupport/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v7.0.4.3/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v7.0.4.2/activesupport
+  source_code_uri: https://github.com/rails/rails/tree/v7.0.4.3/activesupport
   rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options: