2021-02-11 15:23:42 by Takahiro Kambe | Files touched by this commit (12) | |
Log message:
www/rails52: update to 5.2.4.5
## Rails 5.2.4.5 (February 10, 2021) ##
* Fix possible DoS vector in PostgreSQL money type
Carefully crafted input can cause a DoS via the regular expressions used
for validating the money format in the PostgreSQL adapter. This patch
fixes the regexp.
Thanks to @dee-see from Hackerone for this patch!
[CVE-2021-22880]
*Aaron Patterson*
|
2020-09-10 16:13:12 by Takahiro Kambe | Files touched by this commit (12) | |
Log message:
www/ruby-rails52: update to 5.2.4.4
Update Ruby on Rails 52 to 5.2.4.4.
Security fix in ruby-actionview52.
## Rails 5.2.4.4 (September 09, 2020) ##
* [CVE-2020-15169] Fix potential XSS vulnerability in the `translate`/`t` helper
*Jonathan Hefner*
|
2020-05-19 17:36:18 by Takahiro Kambe | Files touched by this commit (1) | |
Log message:
www/ruby-actionview52: update to 5.2.4.3
Update ruby-actionview52 to 5.2.4.3.
## Rails 5.2.4.3 (May 18, 2020) ##
* [CVE-2020-8167] Check that request is same-origin prior to including CSRF \
token in XHRs
|
2020-03-20 16:39:49 by Takahiro Kambe | Files touched by this commit (1) | |
Log message:
www/ruby-actionview52: update to 5.2.4.2
Update ruby-actionview52 to 5.2.4.2.
## Rails 5.2.4.1 (December 18, 2019) ##
* No changes.
## Rails 5.2.4 (November 27, 2019) ##
* Allow programmatic click events to trigger Rails UJS click handlers.
Programmatic click events (eg. ones generated by `Rails.fire(link, \
"click")`) don't specify a button. These events were being incorrectly \
stopped by code meant to ignore scroll wheel and right clicks introduced in \
#34573.
*Sudara Williams*
|
2019-04-14 12:31:52 by Takahiro Kambe | Files touched by this commit (1) | |
Log message:
www/ruby-actionview52: update to 5.2.3
## Rails 5.2.3 (March 27, 2019) ##
* Prevent non-primary mouse keys from triggering Rails UJS click handlers.
Firefox fires click events even if the click was triggered by non-primary \
mouse keys such as right- or scroll-wheel-clicks.
For example, right-clicking a link such as the one described below (with an \
underlying ajax request registered on click) should not cause that request to \
occur.
```
<%= link_to 'Remote', remote_path, class: 'remote', remote: true, data: { \
type: :json } %>
```
Fixes #34541
*Wolfgang Hobmaier*
## Rails 5.2.2.1 (March 11, 2019) ##
* No changes.
|
2019-03-03 15:50:27 by Takahiro Kambe | Files touched by this commit (4) |
Log message:
www/ruby-actionview52: add version 5.2.2 package
Add ruby-actionview52 version 5.2.2 package.
Action View provides simple, battle-tested conventions and helpers for
building web pages.
This is for Ruby on Rails 5.2.
|