@rails/ujs - npm Package Compare versions

Comparing version 6.0.3 to 6.0.4

CHANGELOG.md

@@ -0,1 +1,48 @@
+## Rails 6.0.4 (June 15, 2021) ##
+
+*   SanitizeHelper.sanitized_allowed_attributes and SanitizeHelper.sanitized_allowed_tags
+    call safe_list_sanitizer's class method
+
+    Fixes #39586
+
+    *Taufiq Muhammadi*
+
+
+## Rails 6.0.3.7 (May 05, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.0.3.6 (March 26, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.0.3.5 (February 10, 2021) ##
+
+*   No changes.
+
+
+## Rails 6.0.3.4 (October 07, 2020) ##
+
+*   No changes.
+
+
+## Rails 6.0.3.3 (September 09, 2020) ##
+
+*   [CVE-2020-8185] Fix potential XSS vulnerability in the `translate`/`t` helper.
+
+    *Jonathan Hefner*
+
+
+## Rails 6.0.3.2 (June 17, 2020) ##
+
+*   No changes.
+
+
+## Rails 6.0.3.1 (May 18, 2020) ##
+
+*   [CVE-2020-8167] Check that request is same-origin prior to including CSRF token in XHRs
+
+
 ## Rails 6.0.3 (May 06, 2020) ##
@@ -2,0 +49,0 @@

lib/assets/compiled/rails-ujs.js

 /*
 Unobtrusive JavaScript
-https://github.com/rails/rails/blob/master/actionview/app/assets/javascripts
+https://github.com/rails/rails/blob/main/actionview/app/assets/javascripts
 Released under the MIT license
@@ -250,4 +250,4 @@ */;
           xhr.setRequestHeader('X-Requested-With', 'XMLHttpRequest');
+          CSRFProtection(xhr);
         }
-        CSRFProtection(xhr);
         xhr.withCredentials = !!options.withCredentials;
@@ -254,0 +254,0 @@ xhr.onreadystatechange = function() {

package.json

 {
   "name": "@rails/ujs",
-  "version": "6.0.3",
+  "version": "6.0.4",
   "description": "Ruby on Rails unobtrusive scripting adapter",
@@ -14,3 +14,3 @@ "main": "lib/assets/compiled/rails-ujs.js",
     "build": "bundle exec blade build",
-    "test": "echo \"See the README: https://github.com/rails/rails/blob/master/actionview/app/assets/javascripts#how-to-run-tests\" && exit 1",
+    "test": "echo \"See the README: https://github.com/rails/rails/blob/main/actionview/app/assets/javascripts#how-to-run-tests\" && exit 1",
     "lint": "coffeelint app/assets/javascripts && eslint test/ujs/public/test"
@@ -17,0 +17,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

40211

increased by1.95%

No dependency changes