pageflow 15.7.0 → 15.7.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +17 -0
- data/admins/pageflow/membership.rb +5 -1
- data/app/assets/javascripts/pageflow/dist/editor.js +11890 -0
- data/app/assets/javascripts/pageflow/dist/frontend.js +5800 -0
- data/app/assets/javascripts/pageflow/dist/react-client.js +22 -0
- data/app/assets/javascripts/pageflow/dist/react-server.js +19 -0
- data/app/models/pageflow/entry.rb +8 -0
- data/entry_types/scrolled/package/editor.js +1 -1
- data/entry_types/scrolled/package/frontend/index.css +1 -1
- data/lib/pageflow/user_mixin.rb +6 -0
- data/lib/pageflow/version.rb +1 -1
- metadata +7 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: c1a50cfe81bd53808d9ae9dad7d9a4a66b694bd4362e5b775cc214978404cedc
|
|
4
|
+
data.tar.gz: 2071f8c941906db50038ad08e3c6e16ea3082e1f879f4f523d9c5ca8e69870d6
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 207901a660ce7258638a9ac6095cf95e9260904eec7e471ceb3e9c8a23dcc6aef00b098135b1fb1b7b81be750166426a412d91013803452f4d72ed8eef77471f
|
|
7
|
+
data.tar.gz: de7df8277fe83db6d8b0e5391868a6f94f86fb3a82622c526d71cc5656c5e12bcec1c33cf75d5a3ec420cd8af352545555433306d2f59cbc16dd45549790297a
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,22 @@
|
|
|
1
1
|
# CHANGELOG
|
|
2
2
|
|
|
3
|
+
### Version 15.7.1
|
|
4
|
+
|
|
5
|
+
2022-09-14
|
|
6
|
+
|
|
7
|
+
[Compare changes](https://github.com/codevise/pageflow/compare/v15.7.0...v15.7.1)
|
|
8
|
+
|
|
9
|
+
##### Security
|
|
10
|
+
|
|
11
|
+
- Fix
|
|
12
|
+
[GHSA-qcqv-38jg-2r43](https://github.com/codevise/pageflow/security/advisories/GHSA-qcqv-38jg-2r43):
|
|
13
|
+
Insecure direct object reference in membership update endpoint
|
|
14
|
+
([#1862](https://github.com/codevise/pageflow/pull/1862))
|
|
15
|
+
- Fix
|
|
16
|
+
[GHSA-wrrw-crp8-979q](https://github.com/codevise/pageflow/security/advisories/GHSA-wrrw-crp8-979q):
|
|
17
|
+
Sensitive user data extraction via Ransack query injection
|
|
18
|
+
([#1862](https://github.com/codevise/pageflow/pull/1862))
|
|
19
|
+
|
|
3
20
|
### Version 15.7.0
|
|
4
21
|
|
|
5
22
|
2022-07-18
|
|
@@ -112,7 +112,11 @@ module Pageflow
|
|
|
112
112
|
private
|
|
113
113
|
|
|
114
114
|
def permitted_params
|
|
115
|
-
|
|
115
|
+
if [:create, :new].include?(action_name.to_sym)
|
|
116
|
+
params.permit(membership: [:user_id, :entity_id, :entity_type, :role])
|
|
117
|
+
else
|
|
118
|
+
params.permit(membership: [:role])
|
|
119
|
+
end
|
|
116
120
|
end
|
|
117
121
|
|
|
118
122
|
def redirect_path
|