Changelog for
ruby3.3-rubygem-actionview-5.2-5.2.8.1-lp156.2.3.x86_64.rpm :
* Sun May 14 2023 Marcus Rueckert
- cleanup ruby version restrictions
* Wed Jul 13 2022 Marcus Rueckert - Update to version 5.2.8.1: (boo#1201465 CVE-2022-32224) https://rubyonrails.org/2022/7/12/Rails-Versions-7-0-3-1-6-1-6-1-6-0-5-1-and-5-2-8-1-have-been-released
* Mon Mar 14 2022 Daniel Molkentin - Update to version 5.2.6.3: https://rubyonrails.org/2022/3/8/Rails-7-0-2-3-6-1-4-7-6-0-4-7-and-5-2-6-3-have-been-released https://discuss.rubyonrails.org/t/cve-2022-21831-possible-code-injection-vulnerability-in-rails-active-storage/80199
* Sat Feb 12 2022 Marcus Rueckert - Update to version 5.2.6.2: https://rubyonrails.org/2022/2/11/Rails-7-0-2-2-6-1-4-6-6-0-4-6-and-5-2-6-2-have-been-released https://github.com/rails/rails/security/advisories/GHSA-wh98-p28r-vrc9 https://discuss.rubyonrails.org/t/cve-2022-23633-possible-exposure-of-information-vulnerability-in-action-pack/80016
* Thu Jun 24 2021 Stephan Kulow updated to version 5.2.6 see installed CHANGELOG.md [#]# Rails 5.2.6 (May 05, 2021) ##
* No changes. [#]# Rails 5.2.5 (March 26, 2021) ##
* No changes. [#]# Rails 5.2.4.6 (May 05, 2021) ##
* No changes. [#]# Rails 5.2.4.5 (February 10, 2021) ##
* No changes.
* Fri Sep 25 2020 Stephan Kulow updated to version 5.2.4.4 see installed CHANGELOG.md [#]# Rails 5.2.4.4 (September 09, 2020) ##
* [CVE-2020-15169] Fix potential XSS vulnerability in the `translate`/`t` helper
* Jonathan Hefner
* [#]# Rails 5.2.4.3 (May 18, 2020) ##
* [CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs
* Thu May 07 2020 Stephan Kulow - updated to version 5.2.4.2 see installed CHANGELOG.md
* Fri Dec 20 2019 Marcus Rueckert - update to version 5.2.4.1 (CVE-2019-16782): https://weblog.rubyonrails.org/2019/12/18/Rails-5-2-4-1-has-been-released/
* Thu Nov 28 2019 Manuel Schnitzer - updated to version 5.2.4
* Allow programmatic click events to trigger Rails UJS click handlers. Programmatic click events (eg. ones generated by `Rails.fire(link, \"click\")`) don\'t specify a button. These events were being incorrectly stopped by code meant to ignore scroll wheel and right clicks introduced in #34573.
* Sudara Williams
*
* Fri Mar 29 2019 Stephan Kulow - updated to version 5.2.3 see installed CHANGELOG.md [#]# Rails 5.2.3 (March 27, 2019) ##
* Prevent non-primary mouse keys from triggering Rails UJS click handlers. Firefox fires click events even if the click was triggered by non-primary mouse keys such as right- or scroll-wheel-clicks. For example, right-clicking a link such as the one described below (with an underlying ajax request registered on click) should not cause that request to occur. ``` <%= link_to \'Remote\', remote_path, class: \'remote\', remote: true, data: { type: :json } %> ``` Fixes #34541
* Wolfgang Hobmaier
*
* Thu Mar 14 2019 Marcus Rueckert - update to version 5.2.2.1: https://weblog.rubyonrails.org/2019/3/13/Rails-4-2-5-1-5-1-6-2-have-been-released/ CVE-2019-5418 CVE-2019-5419 CVE-2019-5420
* Sat Jan 19 2019 Marcus Rueckert - rb_build_ruby_abi needs to be rb_build_ruby_abis
* Fri Jan 18 2019 Marcus Rueckert - limit to ruby 2.5 and above for 42.3/sle12
* Sat Dec 08 2018 Stephan Kulow - updated to version 5.2.2 see installed CHANGELOG.md [#]# Rails 5.2.2 (December 04, 2018) ##
* No changes.
* Mon Dec 03 2018 mschnitzerAATTsuse.com- updated to version 5.2.1.1 (boo#1118076)
* No changes / Just a version bump to match with Rails 5.2.1.1
* Wed Aug 08 2018 mschnitzerAATTsuse.com- updated to version 5.2.1 (boo#1104209)
* Fix leak of `skip_default_ids` and `allow_method_names_outside_object` options to HTML attributes. (Yurii Cherniavskyi)
* Fix issue with `button_to`\'s `to_form_params` `button_to` was throwing exception when invoked with `params` hash that contains symbol and string keys. The reason for the exception was that `to_form_params` was comparing the given symbol and string keys. The issue is fixed by turning all keys to strings inside `to_form_params` before comparing them. (Georgi Georgiev)
* Fix JavaScript views rendering does not work with Firefox when using Content Security Policy. Fixes #32577. (Yuji Yaginuma)
* Add the `nonce: true` option for `javascript_include_tag` helper to support automatic nonce generation for Content Security Policy. Works the same way as `javascript_tag nonce: true` does. (Yaroslav Markin)
* Mon Apr 16 2018 mschnitzerAATTsuse.com- initialize package see changelog: https://github.com/rails/rails/blob/v5.2.0/actionview/CHANGELOG.md
