turbo_desktop-rails 0.2.2 → 0.2.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +15 -0
- data/README.md +3 -3
- data/app/controllers/turbo_desktop/inspector_assets_controller.rb +6 -0
- data/lib/turbo_desktop/version.rb +1 -1
- metadata +3 -3
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 70be4836df6cf6ff273081949ad0ee0c42bf155357525f73467d47000d18dfe0
|
|
4
|
+
data.tar.gz: 67f724b78eb69afa13d18bcf7844c0e63d56c2a6b9fdd3738f0e7a7466c72135
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 6b136e03d0f7d1b15abfc88b322139abbfd5575f5a3ac6e0353b38223773b083eb9dbc3d7eb139811b9b2a92cbff40fc3dede0e577e3eeef6ba942f747f78968
|
|
7
|
+
data.tar.gz: 4c536312a7cfe78b51897f70a8117f3fa134dca8be0759add4ec65280af2d7326974cd7b8398fc78eabd21e280d97f26862f162a92d294f5075b09242ef45ade
|
data/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,20 @@
|
|
|
1
1
|
# Changelog
|
|
2
2
|
|
|
3
|
+
## 0.2.3 (2026-09-27)
|
|
4
|
+
|
|
5
|
+
### Fixed
|
|
6
|
+
|
|
7
|
+
- The Dev Inspector now loads in apps with forgery protection on, which is
|
|
8
|
+
every app that uses `load_defaults`. Its modules are fetched with `import()`,
|
|
9
|
+
a plain GET for JavaScript, which Rails refused with a 422 as a cross-origin
|
|
10
|
+
script embed. The inspector's controller serves a fixed list of public,
|
|
11
|
+
static files and no longer takes part in that check.
|
|
12
|
+
|
|
13
|
+
### Changed
|
|
14
|
+
|
|
15
|
+
- The README shows the Gemfile line pinned (`"~> 0.2"`), states Ruby >= 3.2 to
|
|
16
|
+
match the gemspec, and quotes a current User-Agent.
|
|
17
|
+
|
|
3
18
|
## 0.2.2 (2026-09-27)
|
|
4
19
|
|
|
5
20
|
Version aligned with the desktop shell's 0.2.2 release. The CLI now scaffolds
|
data/README.md
CHANGED
|
@@ -9,7 +9,7 @@ This gem gives your Rails app awareness of the Turbo Desktop shell, exactly like
|
|
|
9
9
|
Add to your Gemfile:
|
|
10
10
|
|
|
11
11
|
```ruby
|
|
12
|
-
gem "turbo_desktop-rails"
|
|
12
|
+
gem "turbo_desktop-rails", "~> 0.2"
|
|
13
13
|
```
|
|
14
14
|
|
|
15
15
|
Then run:
|
|
@@ -23,7 +23,7 @@ rails generate turbo_desktop:install
|
|
|
23
23
|
|
|
24
24
|
### Detection
|
|
25
25
|
|
|
26
|
-
The gem detects Turbo Desktop requests via the User-Agent header (`Turbo Desktop/0.
|
|
26
|
+
The gem detects Turbo Desktop requests via the User-Agent header (`Turbo Desktop/0.2.3 (macOS; aarch64)`).
|
|
27
27
|
|
|
28
28
|
```ruby
|
|
29
29
|
# In controllers
|
|
@@ -103,7 +103,7 @@ end
|
|
|
103
103
|
|
|
104
104
|
## Requirements
|
|
105
105
|
|
|
106
|
-
- Ruby >= 3.
|
|
106
|
+
- Ruby >= 3.2
|
|
107
107
|
- Rails >= 7.0
|
|
108
108
|
- turbo-rails >= 1.0
|
|
109
109
|
|
|
@@ -10,6 +10,12 @@ module TurboDesktop
|
|
|
10
10
|
# path traversal). Enabled implicitly by mounting the engine; the meta-tag
|
|
11
11
|
# helper points the shell at these URLs.
|
|
12
12
|
class InspectorAssetsController < ActionController::Base
|
|
13
|
+
# These are public, static modules fetched by import(), which is a plain
|
|
14
|
+
# GET for JavaScript. Rails reads that as a cross-origin <script> embed and
|
|
15
|
+
# refuses it with a 422. Nothing here depends on the session or carries
|
|
16
|
+
# per-user data, so there is nothing for that check to protect.
|
|
17
|
+
skip_forgery_protection
|
|
18
|
+
|
|
13
19
|
ASSET_ROOT = TurboDesktop::Engine.root.join("lib/turbo_desktop/inspector_assets").freeze
|
|
14
20
|
|
|
15
21
|
# Relative paths (as requested by the browser) → allowed. Anything else 404s.
|
metadata
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: turbo_desktop-rails
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.2.
|
|
4
|
+
version: 0.2.3
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- aguspe
|
|
8
8
|
bindir: bin
|
|
9
9
|
cert_chain: []
|
|
10
|
-
date:
|
|
10
|
+
date: 2026-09-27 00:00:00.000000000 Z
|
|
11
11
|
dependencies:
|
|
12
12
|
- !ruby/object:Gem::Dependency
|
|
13
13
|
name: rails
|
|
@@ -87,7 +87,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
|
87
87
|
- !ruby/object:Gem::Version
|
|
88
88
|
version: '0'
|
|
89
89
|
requirements: []
|
|
90
|
-
rubygems_version:
|
|
90
|
+
rubygems_version: 3.6.2
|
|
91
91
|
specification_version: 4
|
|
92
92
|
summary: Turbo Native for Desktop — Rails integration
|
|
93
93
|
test_files: []
|