Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-actionpack70
From: Takahiro Kambe
Date: 2022-06-07 17:18:45
Message id: 20220607151845.C6B8FFB19@cvs.NetBSD.org
Log Message:
www/ruby-actionpack70: update to 7.0.3
7.0.3 (2022-05-12)
* Allow relative redirects when raise_on_open_redirects is enabled.
* Fix authenticate_with_http_basic to allow for missing password.
Before Rails 7.0 it was possible to handle basic authentication with only
a username.
authenticate_with_http_basic do |token, _|
ApiClient.authenticate(token)
end
This ability is restored.
* Fix content_security_policy returning invalid directives.
Directives such as self, unsafe-eval and few others were not single quoted
when the directive was the result of calling a lambda returning an array.
content_security_policy do |policy|
policy.frame_ancestors lambda { [:self, "https://example.com"] }
end
With this fix the policy generated from above will now be valid.
* Fix skip_forgery_protection to run without raising an error if forgery
protection has not been enabled / verify_authenticity_token is not a
defined callback.
This fix prevents the Rails 7.0 Welcome Page (/) from raising an
ArgumentError if default_protect_from_forgery is false.
* Fix ActionController::Live to copy the IsolatedExecutionState in the
ephemeral thread.
Since its inception ActionController::Live has been copying thread local
variables to keep things such as CurrentAttributes set from middlewares
working in the controller action.
With the introduction of IsolatedExecutionState in 7.0, some of that
global state was lost in ActionController::Live controllers.
* Fix setting trailing_slash: true in route definition.
get '/test' => "test#index", as: :test, trailing_slash: true
test_path() # => "/test/"
Files: