trusty-cms 3.0.9 → 3.0.10

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 0ccd0b6b41ce1e02420af580c501c2a581985f3d
-  data.tar.gz: 3c10ca1244abaa09b83ec6756560f8860357a146
+  metadata.gz: c90cf84c2bfce42f6c1581b1ab23e74c0b22fe43
+  data.tar.gz: 2aaa1cd3ef052bcc9cf3fa1b1a8744454b4f6093
 SHA512:
-  metadata.gz: 174cb8782f0707ee753e0c02ae4020e47f034e8d840d90b9eb41a8a8a1e134fe9ef23e2f5f2c12945cb93b8237d932b3c9243c028f4acb96edebf1167ee9a322
-  data.tar.gz: 3e6700961794fa3c92d948a71effb78d9918248b6f2c390a7745629886888f9d99a2121119498ea7c7d6ec4d61add41448e2a095dcae8953d0ef3c8958e17cff
+  metadata.gz: ee4a31ccb3dd1ae8bd389958e5f730c5bfacc8be3d4c572bc29230a836452fb7748df29c91ccb842275ccf2e8c6b7db8230c7349f75a3fe27b8edb9ed55d0c29
+  data.tar.gz: 2cfbb8d7d9bb6ba3fdb424abb1c5f8b2fc74b929feec339739f3fe5e3324c7cc07be7077d5114fe165646de1f82db5167ed89d80ff1f6e1a2040ae6564ab20d4

data/Gemfile.lock

@@ -8,7 +8,7 @@ GIT
 PATH
   remote: .
   specs:
-    trusty-cms (3.0.9)
+    trusty-cms (3.0.10)
       RedCloth (~> 4.3.2)
       acts_as_tree (~> 2.6.1)
       bundler (~> 1.7)
@@ -266,7 +266,7 @@ GEM
     sprockets (3.7.1)
       concurrent-ruby (~> 1.0)
       rack (> 1, < 3)
-    sprockets-rails (3.2.0)
+    sprockets-rails (3.2.1)
       actionpack (>= 4.0)
       activesupport (>= 4.0)
       sprockets (>= 3.0.0)

data/app/controllers/admin/password_resets_controller.rb

@@ -20,10 +20,17 @@ class Admin::PasswordResetsController < ApplicationController
     @user = User.find_by_password_reset_token!(params[:id])
     if @user.password_reset_sent_at < 2.hours.ago
       redirect_to new_password_reset_path, :alert => "Password reset has expired."
-    elsif @user.update_attributes(params[:user])
+    elsif @user.update_attributes(password_params)
       redirect_to welcome_url, :notice => "Password has been reset!"
     else
       render :edit
     end
   end
+
+private
+
+  def password_params
+    params.require(:user).permit(:password, :password_confirmation)
+  end
+
 end

data/lib/trusty_cms.rb

@@ -2,6 +2,6 @@ TRUSTY_CMS_ROOT = File.expand_path(File.join(File.dirname(__FILE__), "..")) unle
 
 unless defined? TrustyCms::VERSION
   module TrustyCms
-    VERSION = '3.0.9'
+    VERSION = '3.0.10'
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: trusty-cms
 version: !ruby/object:Gem::Version
-  version: 3.0.9
+  version: 3.0.10
 platform: ruby
 authors:
 - TrustyCms CMS dev team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2017-08-07 00:00:00.000000000 Z
+date: 2017-09-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: tzinfo
@@ -1684,7 +1684,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
       version: 1.3.1
 requirements: []
 rubyforge_project: 
-rubygems_version: 2.6.12
+rubygems_version: 2.6.13
 signing_key: 
 specification_version: 4
 summary: A no-fluff content management system designed for small teams.