1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/actionpack/lib/action_dispatch/routing
Gannon McGibbon c4c21a9f8d
Prevent string polymorphic route arguments
url_for supports building polymorphic URLs via an array
of arguments (usually symbols and records). If an array is passed,
strings can result in unwanted route helper calls.

CVE-2021-22885
2021-05-04 13:56:37 -07:00
..
endpoint.rb Make engine check more explicit 2018-03-25 11:07:26 +01:00
inspector.rb remove reference to global rails command and replace with bin/rails 2019-12-27 19:32:37 +00:00
mapper.rb Simplify singular resource example 2021-03-28 18:38:51 -05:00
polymorphic_routes.rb Prevent string polymorphic route arguments 2021-05-04 13:56:37 -07:00
redirection.rb Fix inline code markup [ci-skip] 2021-02-14 11:20:35 -06:00
route_set.rb Rails 6.2 is now Rails 7.0 2021-02-04 16:47:16 +00:00
routes_proxy.rb Use frozen string literal in actionpack/ 2017-07-29 14:02:40 +03:00
url_for.rb Use ... argument forwarding instead of ruby2_keywords when possible 2021-03-19 16:53:06 +01:00