activesupport 6.1.7.2 → 6.1.7.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 28ca70c38f67026955b1161ed6b18e7baa7764f972a65fcfb98045d92ae36b21
-  data.tar.gz: a3338be243c6e5ba5c90cafd07b33d964ab0a07b1501555c21385827bedd1f2c
+  metadata.gz: '08925ee6844118b92f0574ccff73c19cb3cb114f9666a0f0a49d5c33a313fcf3'
+  data.tar.gz: e2e43e6cc370cfc52567071f0d53bc00e39767987530f64b5a32ec03016eceda
 SHA512:
-  metadata.gz: f3ecf8f53514da55a4de9fdbd5acca109477ad01fdc8d19de3b90a7488a0799d22edba09f6aaaf70e85e8900235d1545d41c3adeb183186271e2d9195f5056e7
-  data.tar.gz: ad99b075680358ff999d6a7483b17960248934075dd8b11da56b7f35e9a6f94a013f2cdf60c380e952b5a6c440008065dae8b10cd28180e517340d43667c7964
+  metadata.gz: 3ec45336e7d88f27c3737279c6bad52cc313208205e937bdd3df72c269106ed6064be74e36fb925826856f8558aeb4e7bc3c9ff9076d11032f060ecd51d8083b
+  data.tar.gz: f356a689c99bccfe6aad84c76497a6e19e2ea2f415a91dd96c7095f962c3cc2cda87278364fd2b7d06450b4bbd503d9628772878afa311934ff6a771287eedca

data/CHANGELOG.md

@@ -1,3 +1,10 @@
+## Rails 6.1.7.3 (March 13, 2023) ##
+
+*   Implement SafeBuffer#bytesplice
+
+    [CVE-2023-28120]
+
+
 ## Rails 6.1.7.2 (January 24, 2023) ##
 
 *   No changes.

data/lib/active_support/core_ext/string/output_safety.rb

@@ -216,6 +216,10 @@ module ActiveSupport #:nodoc:
     end
     alias << concat
 
+    def bytesplice(*args, value)
+      super(*args, implicit_html_escape_interpolated_argument(value))
+    end
+
     def insert(index, value)
       super(index, html_escape_interpolated_argument(value))
     end

data/lib/active_support/gem_version.rb

@@ -10,7 +10,7 @@ module ActiveSupport
     MAJOR = 6
     MINOR = 1
     TINY  = 7
-    PRE   = "2"
+    PRE   = "3"
 
     STRING = [MAJOR, MINOR, TINY, PRE].compact.join(".")
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: activesupport
 version: !ruby/object:Gem::Version
-  version: 6.1.7.2
+  version: 6.1.7.3
 platform: ruby
 authors:
 - David Heinemeier Hansson
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-01-25 00:00:00.000000000 Z
+date: 2023-03-13 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: i18n
@@ -357,10 +357,10 @@ licenses:
 - MIT
 metadata:
   bug_tracker_uri: https://github.com/rails/rails/issues
-  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.2/activesupport/CHANGELOG.md
-  documentation_uri: https://api.rubyonrails.org/v6.1.7.2/
+  changelog_uri: https://github.com/rails/rails/blob/v6.1.7.3/activesupport/CHANGELOG.md
+  documentation_uri: https://api.rubyonrails.org/v6.1.7.3/
   mailing_list_uri: https://discuss.rubyonrails.org/c/rubyonrails-talk
-  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.2/activesupport
+  source_code_uri: https://github.com/rails/rails/tree/v6.1.7.3/activesupport
   rubygems_mfa_required: 'true'
 post_install_message:
 rdoc_options: