Path to this page:
Subject: CVS commit: pkgsrc/www/ruby-actionview70
From: Takahiro Kambe
Date: 2022-09-10 14:44:34
Message id: 20220910124434.6AFE0FA90@cvs.NetBSD.org
Log Message:
www/ruby-actionview70: update to 7.0.4
* Guard against ActionView::Helpers::FormTagHelper#field_name calls with nil
object_name arguments. For example:
<%= fields do |f| %>
<%= f.field_name :body %>
<% end %>
Sean Doyle
* Strings returned from strip_tags are correctly tagged html_safe?
Because these strings contain no HTML elements and the basic entities are
escaped, they are safe to be included as-is as PCDATA in HTML content.
Tagging them as html-safe avoids double-escaping entities when being
concatenated to a SafeBuffer during rendering.
Fixes rails/rails-html-sanitizer#124
Mike Dalessio
Files: