65bf0d9475
Workaround for 'undefined method closed?' error caused by ssrf_filter 1.1
...
Closes #2628
2022-11-06 18:47:03 +09:00
c10e7ef311
Support ssrf_filter 1.1
...
Includes a backwards compatibility mode for SsrfFilter 1.0,
which is needed for Ruby 2.5 and JRuby 9.2.
Also includes a local version constraint for fog-google for
Ruby 2.5 and JRuby 9.2 because of a known but undeclared
incompatibility in that gem. gemfiles/rails-6-1.gemfile
already has this fix.
[Fixes #2625 ]
2022-09-29 09:19:56 -07:00
d15c342074
Add retry option to download from remote url
2021-08-03 21:41:37 +09:00
012702eb3b
Fix SSRF vulnerability in the remote file download feature
...
Closes #2509 , Refs. https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-fwcm-636p-68r5
2021-02-08 13:42:22 +09:00
3faf7491e3
Fix URL escape issues by escaping on URI parse error only
...
Fixes #2456 , Closes #2457 , Fixes #2472 , Closes #2473 , Fixes #2505 , Fixes #2517 , Closes #2518
2021-01-17 19:32:08 +09:00
9a37fc9e7c
Test against Ruby 2.7
2019-12-27 17:32:55 +09:00
57a4a3b65f
Handle internationalized domain names correctly using Addressable. Closes #2086
2019-06-11 18:58:47 +09:00
68d1eb8107
Add ability to customize downloaders. Closes #1636
2019-06-11 17:37:32 +09:00
Mitsuhiro Shibuya