fat_free_crm 0.14.1 → 0.14.2
Sign up to get free protection for your applications and to get access to all the features.
Potentially problematic release.
This version of fat_free_crm might be problematic. Click here for more details.
- checksums.yaml +5 -5
- data/CHANGELOG +11 -0
- data/app/helpers/tags_helper.rb +1 -1
- data/lib/fat_free_crm/version.rb +1 -1
- metadata +3 -3
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
|
-
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
2
|
+
SHA256:
|
3
|
+
metadata.gz: 91bf600f70e89b2af57ebf332ef9e90550f5ee9fcfb4ce624eb4150bb64af7e8
|
4
|
+
data.tar.gz: ea34e819ea4f7c7104c9724167a11790734528f96f274f6d14a39cd39fb284f8
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 285ecf6eae7e9c898c17e6603309cf50275ff0776bef190bb1facb67ce4e45b72deacfb9c479287b578ea669eeb107fbd48e866d35dd39f3beb948839ccb4840
|
7
|
+
data.tar.gz: 6d1fa7b4ec122f161d4c73c05b22765cb5b5e874f6089c0990729b7f9e4ccf1f38036e6f73a7ca89488b76a24bb580a468b8a5a6d91fb2aa00555394a58849e1
|
data/CHANGELOG
CHANGED
@@ -4,6 +4,17 @@ It does not matter how slowly you go as long as you do not stop.
|
|
4
4
|
First they ignore you, then they laugh at you, then they fight you,
|
5
5
|
then you win. –- Mahatma Gandhi
|
6
6
|
|
7
|
+
Sat Oct 27, 2018 (0.14.2)
|
8
|
+
---------------------------------------------------------------------
|
9
|
+
|
10
|
+
#### Fixed XSS flaw in tags_helper
|
11
|
+
Credit Antonin Steinhauser (steinhause) for discovery and responsible disclosure.
|
12
|
+
|
13
|
+
Wed Jan 24, 2018 (0.14.1)
|
14
|
+
---------------------------------------------------------------------
|
15
|
+
|
16
|
+
- Fix for CVE-2017-0889 (Paperclip)
|
17
|
+
|
7
18
|
Mon, Dec 5, 2016 (0.14.0)
|
8
19
|
---------------------------------------------------------------------
|
9
20
|
Forked to publish 'reduced_fat_crm', a version of fat-free-crm with
|
data/app/helpers/tags_helper.rb
CHANGED
@@ -15,7 +15,7 @@ module TagsHelper
|
|
15
15
|
elsif !query.include?(hashtag)
|
16
16
|
query += " #{hashtag}"
|
17
17
|
end
|
18
|
-
out << link_to_function(tag, "crm.search_tagged('#{query}', '#{model.class.to_s.tableize}')", title: tag)
|
18
|
+
out << link_to_function(tag, "crm.search_tagged('#{escape_javascript(query)}', '#{model.class.to_s.tableize}')", title: tag)
|
19
19
|
end
|
20
20
|
end
|
21
21
|
|
data/lib/fat_free_crm/version.rb
CHANGED
metadata
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: fat_free_crm
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 0.14.
|
4
|
+
version: 0.14.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Michael Dvorkin
|
@@ -11,7 +11,7 @@ authors:
|
|
11
11
|
autorequire:
|
12
12
|
bindir: bin
|
13
13
|
cert_chain: []
|
14
|
-
date: 2018-
|
14
|
+
date: 2018-10-27 00:00:00.000000000 Z
|
15
15
|
dependencies:
|
16
16
|
- !ruby/object:Gem::Dependency
|
17
17
|
name: rails
|
@@ -1559,7 +1559,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
1559
1559
|
version: '0'
|
1560
1560
|
requirements: []
|
1561
1561
|
rubyforge_project:
|
1562
|
-
rubygems_version: 2.
|
1562
|
+
rubygems_version: 2.7.7
|
1563
1563
|
signing_key:
|
1564
1564
|
specification_version: 4
|
1565
1565
|
summary: Fat Free CRM
|