fat_free_crm 0.15.1 → 0.15.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
- SHA1:
3
- metadata.gz: bf219e4d463445bc5c66181204e87e00c5530c3b
4
- data.tar.gz: 8c96eab60c2464156267f279a36401f029d96796
2
+ SHA256:
3
+ metadata.gz: f278992b3ffb8e57627d828cda9b23973d4eed2a2b4990cf3d2f768ef7c958fd
4
+ data.tar.gz: 2fc300e02b9b29f484a8fbeeb75757af152760ab1682ed7aaccc1d71431dc64b
5
5
  SHA512:
6
- metadata.gz: 022eb58092f6e1e2c3a5e4598a2b09e7b839d57412454a9aa0f63895dee1cc1a3795ce5bf74070dc68770780cb53e95e36c9f767316d96e4671555d0f9e5b452
7
- data.tar.gz: 1866419de5183c70477a24cd898e43cb5fb6ad1a5aab0d8951ebb14dbc183d39a956c5f1c771d1d0de210dde54a0f380b1bde90f391f80e2f78e031a5c74750f
6
+ metadata.gz: 4ef150573319753b25910f2f1e774498f388e79875b2f4ba8d0a926fe3e9731542c38b6241a504b393c95c66f61ecbc0194f334e2125c14d025fd0a187e8e9b6
7
+ data.tar.gz: eeb34486ca9e9bcbb7b3faae4807b49b1511da8e1d222c971b1fce86fc059436ac022bfb8d29a2a01ee1a245b9f12c1a9f00b144dbb34f3a90289813bf9558da
data/CHANGELOG.md CHANGED
@@ -4,6 +4,17 @@ It does not matter how slowly you go as long as you do not stop.
4
4
  First they ignore you, then they laugh at you, then they fight you,
5
5
  then you win. –- Mahatma Gandhi
6
6
 
7
+ Sat Oct 27, 2018 (0.15.2)
8
+ ---------------------------------------------------------------------
9
+
10
+ #### Fixed XSS flaw in tags_helper
11
+ Credit Antonin Steinhauser (steinhause) for discovery and responsible disclosure.
12
+
13
+ Wed Jan 24, 2018 (0.15.1)
14
+ ---------------------------------------------------------------------
15
+ - Fix for CVE-2017-0889 (Paperclip)
16
+
17
+
7
18
  Thu Dec 14, 2017 (0.15.0)
8
19
  ---------------------------------------------------------------------
9
20
  This release upgrades to rails 5.0.0
@@ -15,7 +15,7 @@ module TagsHelper
15
15
  elsif !query.include?(hashtag)
16
16
  query += " #{hashtag}"
17
17
  end
18
- out << link_to_function(tag, "crm.search_tagged('#{query}', '#{model.class.to_s.tableize}')", title: tag)
18
+ out << link_to_function(tag, "crm.search_tagged('#{escape_javascript(query)}', '#{model.class.to_s.tableize}')", title: tag)
19
19
  end
20
20
  end
21
21
 
@@ -7,7 +7,7 @@ module FatFreeCRM
7
7
  module VERSION #:nodoc:
8
8
  MAJOR = 0
9
9
  MINOR = 15
10
- TINY = 1
10
+ TINY = 2
11
11
  PRE = nil
12
12
 
13
13
  STRING = [MAJOR, MINOR, TINY, PRE].compact.join('.')
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: fat_free_crm
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.15.1
4
+ version: 0.15.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - Michael Dvorkin
@@ -12,7 +12,7 @@ authors:
12
12
  autorequire:
13
13
  bindir: bin
14
14
  cert_chain: []
15
- date: 2018-01-24 00:00:00.000000000 Z
15
+ date: 2018-10-27 00:00:00.000000000 Z
16
16
  dependencies:
17
17
  - !ruby/object:Gem::Dependency
18
18
  name: rails
@@ -1584,7 +1584,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
1584
1584
  version: '0'
1585
1585
  requirements: []
1586
1586
  rubyforge_project:
1587
- rubygems_version: 2.6.14
1587
+ rubygems_version: 2.7.3
1588
1588
  signing_key:
1589
1589
  specification_version: 4
1590
1590
  summary: Fat Free CRM