sincerely 1.1.3 → 1.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: e39a6884c8cf6a13cde2e74022a60bf41239bf1b8979316386f0eb4abe99d025
4
- data.tar.gz: 7008f595337b90fd24943b11538060726f027f11392b56ab81b4af7513852074
3
+ metadata.gz: 8145214d026bf9a3055f7192b694b84dceb0bfa89a4a78e526a5832dfb016675
4
+ data.tar.gz: 393c5f2ba30f47710726e86190f054a43502331444c3ca61e326304bb6ebb223
5
5
  SHA512:
6
- metadata.gz: 5d0f203efd3e95eddd0bbb3304ee152d24c510f5ee1a7d491a03c5ecd63631aea8d574d2e2247267c5fd6a039d79abd5b9c508e63f1d7481a57441d642a8c4f1
7
- data.tar.gz: 51ea2e8dfb66203f82a6b26978261e2ebb98f2562c0f674af9b5d63f693d014b392c0951cba58be306ed3639af7308a5dc6520faef1b3483df3fd0fa380b8d7e
6
+ metadata.gz: c50b3fd1d13596262f3aba63044c3348faa5c0fe87159cba4895ba25da90572f5c0e5e6ff8fbfca398774ad84c3c6edbbe163201091094afa135ac68fe207fa1
7
+ data.tar.gz: 6ae7839a324a550b09f3866609b5f6ba733da0e4a935267e8eefd7df122d712fe9e1738072b03570167b279928c00906bdc14153b22f9cdd7b0e101ee544c3b5
data/CHANGELOG.md CHANGED
@@ -2,6 +2,11 @@
2
2
 
3
3
  All notable changes to this project will be documented in this file.
4
4
 
5
+ ## [1.1.4] - 2026-09-21
6
+
7
+ ### Fixed
8
+ - Template preview no longer strips the formatting of HTML emails. The preview page's CSP was inherited by the `srcdoc` iframe rendering the email, and `style-src 'self'` blocked the inline `style` attributes emails are built from. Inline styles and `data:` images are now permitted; scripts stay blocked.
9
+
5
10
  ## [1.1.3] - 2026-09-17
6
11
 
7
12
  ### Added
@@ -2,7 +2,7 @@
2
2
  <html>
3
3
  <head>
4
4
  <title>Preview: <%= @template.name %></title>
5
- <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'">
5
+ <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; object-src 'none'">
6
6
  <%= stylesheet_link_tag 'sincerely/template_preview' %>
7
7
  </head>
8
8
  <body>
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module Sincerely
4
- VERSION = '1.1.3'
4
+ VERSION = '1.1.4'
5
5
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: sincerely
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.1.3
4
+ version: 1.1.4
5
5
  platform: ruby
6
6
  authors:
7
7
  - 100 Starlings
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2026-09-17 00:00:00.000000000 Z
11
+ date: 2026-09-21 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aasm