rails--rails/actionpack/lib
Jean Boussier 10c64a472f
ActionDispatch::Executor don't fully trust `body#close`
Under certain circumstances, the middleware isn't informed that the
response body has been fully closed which result in request state not
being fully reset before the next request.

[CVE-2022-23633]
2022-02-11 10:08:04 -08:00
..
abstract_controller Raise error when callback's only/unless symbols aren't methods 2021-12-14 15:22:08 -05:00
action_controller Make #to_fs the default replacement for #to_s(:format) 2022-02-07 12:41:21 +01:00
action_dispatch ActionDispatch::Executor don't fully trust `body#close` 2022-02-11 10:08:04 -08:00
action_pack Start Rails 7.1 development 2021-12-07 15:52:30 +00:00
abstract_controller.rb Make sure to require active_support.rb before requiring active_support/rails.rb 2019-07-12 18:30:58 +09:00
action_controller.rb Extract ActiveSupport::ExecutionContext out of ActiveRecord::QueryLogs 2021-11-10 09:36:02 +01:00
action_dispatch.rb Bump license years to 2022 [ci-skip] 2022-01-01 15:22:15 +09:00
action_pack.rb Bump license years to 2022 [ci-skip] 2022-01-01 15:22:15 +09:00