Link [ pkgsrc | NetBSD | pkgsrc git mirror | PR fulltext-search | netbsd commit viewer ]


   
        usage: [branch:branch] [user:user] [path[@revision]] keyword [... [-excludekeyword [...]]] (e.g. branch:MAIN pkgtools/pkg)




switch to index mode

recent branches: MAIN (2h)  pkgsrc-2024Q1 (10d)  pkgsrc-2023Q4 (57d)  pkgsrc-2023Q2 (89d)  pkgsrc-2023Q3 (169d) 

2024-05-28 06:31:52 UTC Now

2011-11-19 15:34:37 UTC MAIN commitmail json YAML

Update ruby-actionpack3 package to 3.0.11.

*Rails 3.0.11 (unreleased)*

* Fix XSS security vulnerability in the `translate` helper method. When using
  interpolation in combination with HTML-safe translations, the interpolated
  input would not get HTML escaped. *GH 3664*

  Before:

      translate('foo_html', :something => '<script>') # => "...<script>..."

  After:

      translate('foo_html', :something => '<script>') # => "...&lt;script&gt;..."

  *Sergey Nartimov*

* Implement a workaround for a bug in ruby-1.9.3p0 where an error would be
  raised while attempting to convert a template from one encoding to another.

  Please see http://redmine.ruby-lang.org/issues/5564 for details of the bug.

  The workaround is to load all conversions into memory ahead of time, and will
  only happen if the ruby version is exactly 1.9.3p0. The hope is obviously
  that the underlying problem will be resolved in the next patchlevel release
  of 1.9.3.

* Fix assert_select_email to work on multipart and non-multipart emails as the
  method stopped working correctly in Rails 3.x due to changes in the new mail
  gem.

* Fix url_for when passed a hash to prevent additional options (eg. :host,
  :protocol) from being added to the hash after calling it.

(taca)