Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-actionview70
From: Takahiro Kambe
Date: 2022-05-05 05:40:27
Message id: 20220505034027.D1586FB1A@cvs.NetBSD.org
Log Message:
www/ruby-actionview70: update to 7.0.2.4
## Rails 7.0.2.4 (April 26, 2022) ##
* Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
Escape dangerous characters in names of tags and names of attributes in the
tag helpers, following the XML specification. Rename the option
`:escape_attributes` to `:escape`, to simplify by applying the option to the
whole tag.
*Álvaro Martín Fraguas*
Files: