Changelog for ruby1.8-rubygem-actionpack-3_2-3.2.22.5-1.13.x86_64.rpm :
Thu Sep 15 14:00:00 2016 cooloAATTsuse.com
- updated to version 3.2.22.5
see installed CHANGELOG.md

Fri Aug 12 14:00:00 2016 cooloAATTsuse.com
- updated to version 3.2.22.4
see installed CHANGELOG.md

Tue Mar 1 13:00:00 2016 cooloAATTsuse.com
- updated to version 3.2.22.2
see installed CHANGELOG.md

Tue Jan 26 13:00:00 2016 cooloAATTsuse.com
- updated to version 3.2.22.1
see installed CHANGELOG.md

Wed Jun 17 14:00:00 2015 cooloAATTsuse.com
- updated to version 3.2.22
see installed CHANGELOG.md
[#]# Rails 3.2.22 (Jun 16, 2015) ##

* No changes.

Wed Feb 11 13:00:00 2015 cooloAATTsuse.com
- updated to version 3.2.21

* Fix regression when using `ActionView::Helpers::TranslationHelper#translate` with
`options[:raise]`.
This regression was introduced at ec16ba75a5493b9da972eea08bae630eba35b62f.

* Shota Fukumori (sora_h)
*
[#]# Rails 3.2.18 (May 6, 2014) ##

* Only accept actions without File::SEPARATOR in the name.
This will avoid directory traversal in implicit render.
Fixes: CVE-2014-0130
- obsolete CVE-2014-0130.patch

Mon May 26 14:00:00 2014 jmassaguerplaAATTsuse.com
- fix CVE-2014-0130: rubygem-actionpack: directory traversal issue
(bnc#876714)
CVE-2014-0130.patch: contains the fix

Thu Apr 3 14:00:00 2014 jmassaguerplaAATTsuse.com
- update to version 3.2.17. It includes among other things fixes for:
CVE-2013-4389 (bnc#846239)
CVE-2013-4491 (bnc#853625)
CVE-2013-6414 (bnc#853633)
CVE-2013-6415 (bnc#853632)
CVE-2013-6417 (bnc#853627)
CVE-2014-0081 (bnc#864433)
CVE-2014-0082 (bnc#864431)

Mon Mar 18 13:00:00 2013 cooloAATTsuse.com
- updated to version 3.2.13

* Fix incorrectly appended square brackets to a multiple select box
if an explicit name has been given and it already ends with \"[]\".

* Determine the controller#action from only the matched path when using the
shorthand syntax. Previously the complete path was used, which led
to problems with nesting (scopes and namespaces).
Fixes #7554.

* Fix `assert_template` with `render :stream => true`.
Fix #1743.

* Eagerly populate the http method loookup cache so local project inflections do
not interfere with use of underscore method ( and we don\'t need locks )

* `BestStandardsSupport` no longer duplicates `X-UA-Compatible` values on
each request to prevent header size from blowing up.

* Fixed JSON params parsing regression for non-object JSON content.

* Prevent unnecessary asset compilation when using `javascript_include_tag` on
files with non-standard extensions.

* Fixes issue where duplicate assets can be required with sprockets.

Tue Feb 12 13:00:00 2013 cooloAATTsuse.com
- updated to version 3.2.12, version bump

Tue Jan 8 13:00:00 2013 cooloAATTsuse.com
- updated to version 3.2.11

* Strip nils from collections on JSON and XML posts. [CVE-2013-0155]

Thu Jan 3 13:00:00 2013 cooloAATTsuse.com
- updated to version 3.2.10, version bump

Tue Nov 13 13:00:00 2012 cooloAATTsuse.com
- updated to version 3.2.9

* Clear url helpers when reloading routes.

* Accept :remote as symbolic option for `link_to` helper.
*Riley Lynch
*

* Warn when the `:locals` option is passed to `assert_template` outside of a view test case
Fix #3415

* Rename internal variables on ActionController::TemplateAssertions to prevent
naming collisions. AATTpartials, AATTtemplates and AATTlayouts are now prefixed with an underscore.
Fix #7459

* `resource` and `resources` don\'t modify the passed options hash
Fix #7777

* Precompiled assets include aliases from foo.js to foo/index.js and vice versa.
[#] Precompiles phone-.css and aliases phone/index.css to phone.css.
config.assets.precompile = [ \'phone.css\' ]

* `assert_template` is no more passing with what ever string that matches
with the template name.
Fixes #3849.

* Handle `ActionDispatch::Http::UploadedFile` like `Rack::Test::UploadedFile`, don\'t call to_param on it. Since
`Rack::Test::UploadedFile` isn\'t API compatible this is needed to test file uploads that rely on `tempfile`
being available.

* Respect `config.digest = false` for `asset_path`

* Fix #7646, the log now displays the correct status code when an exception is raised.

* Fix handling of date selects when using both disabled and discard options.
Fixes #7431.

* Fix select_tag when option_tags is nil.
Fixes #7404.

* `javascript_include_tag :all` will now not include `application.js` if the file does not exists.
*Prem Sichanugrist
*

* Support cookie jar options (e.g., domain :all) for all session stores.
Fixes GH#3047, GH#2483.

* Performance Improvement to send_file: Avoid having to pass an open file handle as the response body. Rack::Sendfile
will usually intercept the response and just uses the path directly, so no reason to open the file. This performance

Fri Aug 10 14:00:00 2012 cooloAATTsuse.com
- updated to version 3.2.8

* html_escape should escape single quotes.

* Reverted the deprecation of :confirm.

* Reverted the deprecation of :disable_with.

* Reverted the deprecation of :mouseover option to image_tag.

* Reverted the deprecation of button_to_function and link_to_function helpers.

Fri Jul 27 14:00:00 2012 cooloAATTsuse.com
- update to 3.2.7

* Do not convert digest auth strings to symbols. CVE-2012-3424

* Bump Journey requirements to 1.0.4

* Add support for optional root segments containing slashes

* Fixed bug creating invalid HTML in select options

* Show in log correct wrapped keys

* Fix NumberHelper options wrapping to prevent verbatim blocks being rendered instead of line continuations.

* ActionController::Metal doesn\'t have logger method, check it and then delegate

* ActionController::Caching depends on RackDelegation and AbstractController::Callbacks

Thu Jun 28 14:00:00 2012 cooloAATTsuse.com
- update to 3.2.6

* nil is removed from array parameter values
CVE-2012-2694

* Deprecate `:confirm` in favor of `\':data => { :confirm => \"Text\" }\'` option for `button_to`, `button_tag`, `image_submit_tag`, `link_to` and `submit_tag
` helpers.

* Allow to use mounted_helpers (helpers for accessing mounted engines) in ActionView::TestCase.
*Piotr Sarnacki
*

* Include mounted_helpers (helpers for accessing mounted engines) in ActionDispatch::IntegrationTest by default.
*Piotr Sarnacki
*

* Deprecate old APIs for highlight, excerpt and word_wrap
*Jeremy Walker
*

* Deprecate `:disable_with` in favor of `\'data-disable-with\'` option for `button_to`, `button_tag` and `submit_tag` helpers.

* Deprecate `:mouseover` option for `image_tag` helper.
*Rafael Mendonça França
*

* Deprecate `button_to_function` and `link_to_function` helpers.
*Rafael Mendonça França
*

* Don\'t break Haml with textarea newline fix. GH #393, #4000, #5190, #5191

* Fix options handling on labels. GH #2492, #5614

* Added config.action_view.embed_authenticity_token_in_remote_forms to deal
with regression from 16ee611fa

* Set rendered_format when doing render :inline. GH #5632

* Fix the redirect when it receive blocks with arity of 1. Closes #5677

* Strip [nil] from parameters hash. Thanks to Ben Murphy for
reporting this! CVE-2012-2660

Mon May 14 14:00:00 2012 cooloAATTsuse.com
- add generic provides

Mon Apr 23 14:00:00 2012 saschpeAATTsuse.de
- Fix dependencies, (build)require actionpack-3_2, rack-cache-1_2
and activesupport-3_2 directly (instead of unversioned packages)

Wed Apr 4 14:00:00 2012 cooloAATTsuse.com
- update to 3.2.3

* Remove the leading \
added by textarea on assert_select.
*Santiago Pastorino
*

* Fix #5632, render :inline set the proper rendered format.
*Santiago Pastorino
*

* Fix textarea rendering when using plugins like HAML. Such plugins encode the first newline character in the content. This issue was introduced in https://github.com/rails/rails/pull/5191
*James Coleman
*

* Add `config.action_view.embed_authenticity_token_in_remote_forms` (defaults to true) which allows to set if authenticity token will be included by default in remote forms. If you change it to false, you can still force authenticity token by passing `:authenticity_token => true` in form options
*Piotr Sarnacki
*

* Do not include the authenticity token in forms where remote: true as ajax forms use the meta-tag value
*DHH
*

* Turn off verbose mode of rack-cache, we still have X-Rack-Cache to
check that info. Closes #5245.
*Santiago Pastorino
*

* Fix #5238, rendered_format is not set when template is not rendered.
*Piotr Sarnacki
*

* Upgrade rack-cache to 1.2.
*José Valim
*

* ActionController::SessionManagement is deprecated.
*Santiago Pastorino
*

* Since the router holds references to many parts of the system like engines, controllers and the application itself, inspecting the route set can actually be really slow, therefore we default alias inspect to to_s.
*José Valim
*

* Add a new line after the textarea opening tag. Closes #393
*Rafael Mendonça França
*

* Always pass a respond block from to responder. We should let the responder to decide what to do with the given overridden response block, and not short circuit it.
*sikachu
*

* Fixes layout rendering regression from 3.2.2.
*José Valim
*
[#]# Rails 3.2.2 (March 1, 2012) ##

* Format lookup for partials is derived from the format in which the template is being rendered. Closes #5025 part 2
*Santiago Pastorino
*

* Use the right format when a partial is missing. Closes #5025.
*Santiago Pastorino
*

* Default responder will now always use your overridden block in `respond_with` to render your response.
*Prem Sichanugrist
*

* check_box helper with :disabled => true will generate a disabled hidden field to conform with the HTML convention where disabled fields are not submitted with the form.
This is a behavior change, previously the hidden tag had a value of the disabled checkbox.

* Tadas Tamosauskas
*

Fri Mar 23 13:00:00 2012 saschpeAATTsuse.de
- Spec file cleanup:

* Factory preparation

Fri Jan 27 13:00:00 2012 mrueckertAATTsuse.de
- update to 3.2.1

* Documentation improvements.

* Allow `form.select` to accept ranges (regression).
*Jeremy Walker
*

* `datetime_select` works with -/+ infinity dates.
*Joe Van Dyk
*

Thu Jan 26 13:00:00 2012 mrueckertAATTsuse.de
- initial package of the 3.2 branch