@rails/ujs
Advanced tools
Comparing version 6.0.3 to 6.0.4
@@ -0,1 +1,48 @@ | ||
## Rails 6.0.4 (June 15, 2021) ## | ||
* SanitizeHelper.sanitized_allowed_attributes and SanitizeHelper.sanitized_allowed_tags | ||
call safe_list_sanitizer's class method | ||
Fixes #39586 | ||
*Taufiq Muhammadi* | ||
## Rails 6.0.3.7 (May 05, 2021) ## | ||
* No changes. | ||
## Rails 6.0.3.6 (March 26, 2021) ## | ||
* No changes. | ||
## Rails 6.0.3.5 (February 10, 2021) ## | ||
* No changes. | ||
## Rails 6.0.3.4 (October 07, 2020) ## | ||
* No changes. | ||
## Rails 6.0.3.3 (September 09, 2020) ## | ||
* [CVE-2020-8185] Fix potential XSS vulnerability in the `translate`/`t` helper. | ||
*Jonathan Hefner* | ||
## Rails 6.0.3.2 (June 17, 2020) ## | ||
* No changes. | ||
## Rails 6.0.3.1 (May 18, 2020) ## | ||
* [CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs | ||
## Rails 6.0.3 (May 06, 2020) ## | ||
@@ -2,0 +49,0 @@ |
/* | ||
Unobtrusive JavaScript | ||
https://github.com/rails/rails/blob/master/actionview/app/assets/javascripts | ||
https://github.com/rails/rails/blob/main/actionview/app/assets/javascripts | ||
Released under the MIT license | ||
@@ -250,4 +250,4 @@ */; | ||
xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest'); | ||
CSRFProtection(xhr); | ||
} | ||
CSRFProtection(xhr); | ||
xhr.withCredentials = !!options.withCredentials; | ||
@@ -254,0 +254,0 @@ xhr.onreadystatechange = function() { |
{ | ||
"name": "@rails/ujs", | ||
"version": "6.0.3", | ||
"version": "6.0.4", | ||
"description": "Ruby on Rails unobtrusive scripting adapter", | ||
@@ -14,3 +14,3 @@ "main": "lib/assets/compiled/rails-ujs.js", | ||
"build": "bundle exec blade build", | ||
"test": "echo \"See the README: https://github.com/rails/rails/blob/master/actionview/app/assets/javascripts#how-to-run-tests\" && exit 1", | ||
"test": "echo \"See the README: https://github.com/rails/rails/blob/main/actionview/app/assets/javascripts#how-to-run-tests\" && exit 1", | ||
"lint": "coffeelint app/assets/javascripts && eslint test/ujs/public/test" | ||
@@ -17,0 +17,0 @@ }, |
Sorry, the diff of this file is not supported yet
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
40211