carrierwave 3.1.1 → 3.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 558934b4dcea4b5aed9f60fe4cf4f87d3c1963e9f3e2a835117b226d01996462
-  data.tar.gz: 0d8933eafbc965bfd9f482f7978f5f45ff803115cc470a9e63eb05a41763b969
+  metadata.gz: 20e93cc014326f32bc9123d74648c047a9eeaf634a421981df01ece46dc142cc
+  data.tar.gz: e86f6c907282bc12306f916c31084f34a20e815a4b64291971eefbf366f7ec0c
 SHA512:
-  metadata.gz: 4852bd015f5bae013c9da67d48d121998e6a77d08dc52674b24ca96b276b5ce272bbdf480cc062f30159e1ef0b6a47e4ddbfc5659c575cd358e7000aca86029b
-  data.tar.gz: 75eaf047f5ec552fc0ede4acad3947671f1429a8e982044aceba6c6452a6c213eef7db14ef41c254762e3d74e7ed8e0c2d733026586c0d583b4e535185161cd2
+  metadata.gz: 0b1ade5c07dccfc124750e5c066e5a8dff02c52a918e3af496c1de35a42e836d1d1465fe7f48283e3a088214d843b107102fc7a87e0a68d148884d07e0378529
+  data.tar.gz: 9597174ba08ceb10b8ab91e76e67fd1d37a54c97dac99cb745408da716297bbd960c81b809ec003d6b9695dbe0c2d363c1e958e25a43602b5049f6c2f25bd1a0

data/lib/carrierwave/mounter.rb

@@ -168,6 +168,7 @@ module CarrierWave
     end
 
     def remove=(value)
+      uploaders # Ensure that uploaders are initialized based on the current value
       @remove = value
       write_temporary_identifier
     end
@@ -220,7 +221,7 @@ module CarrierWave
     end
 
     def clear_unstaged
-      @uploaders ||= []
+      uploaders # Ensure that uploaders are initialized based on the current value
       staged, unstaged = @uploaders.partition(&:staged)
       @uploaders = staged
       @removed_uploaders += unstaged

data/lib/carrierwave/uploader/configuration.rb

@@ -88,7 +88,7 @@ module CarrierWave
               raise CarrierWave::UnknownStorageError, "Unknown storage: #{storage}"
             end
           when nil
-            storage
+            # noop
           else
             self._storage = storage
           end

data/lib/carrierwave/uploader/content_type_denylist.rb

@@ -54,7 +54,10 @@ module CarrierWave
       end
 
       def denylisted_content_type?(denylist, content_type)
-        Array(denylist).any? { |item| content_type =~ /#{item}/ }
+        Array(denylist).any? do |item|
+          item = Regexp.quote(item) if item.class != Regexp
+          content_type =~ /#{item}/
+        end
       end
 
     end # ContentTypeDenylist

data/lib/carrierwave/version.rb

@@ -1,3 +1,3 @@
 module CarrierWave
-  VERSION = "3.1.1".freeze
+  VERSION = "3.1.3".freeze
 end

data/lib/generators/templates/uploader.rb.erb

@@ -40,6 +40,14 @@ class <%= class_name %>Uploader < CarrierWave::Uploader::Base
   #   %w(jpg jpeg gif png)
   # end
 
+  # Add a content_type_allowlist to restrict uploads by MIME type.
+  # Without it, a user could upload a harmful file
+  # with a safe extension (content-type spoofing).
+  # For the previous extension_allowlist you might use something like this:
+  # def content_type_allowlist
+  #   /image\//
+  # end
+
   # Override the filename of the uploaded files:
   # Avoid using model.id or version_name here, see uploader/store.rb for details.
   # def filename

metadata

@@ -1,14 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: carrierwave
 version: !ruby/object:Gem::Version
-  version: 3.1.1
+  version: 3.1.3
 platform: ruby
 authors:
 - Jonas Nicklas
-autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-12 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: activesupport
@@ -232,14 +231,14 @@ dependencies:
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: '0'
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.6.0
+        version: '0'
 - !ruby/object:Gem::Dependency
   name: rmagick
   requirement: !ruby/object:Gem::Requirement
@@ -369,8 +368,8 @@ files:
 homepage: https://github.com/carrierwaveuploader/carrierwave
 licenses:
 - MIT
-metadata: {}
-post_install_message:
+metadata:
+  changelog_uri: https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md
 rdoc_options:
 - "--main"
 require_paths:
@@ -386,8 +385,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.5.22
-signing_key:
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Ruby file upload library
 test_files: []