1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/activejob/test
Rafael Mendonça França 72300f9742 Do not deserialize GlobalID objects that were not generated by Active Job
Trusting any GlobaID object when deserializing jobs can allow
attackers to access information that should not be accessible to them.

Fix CVE-2018-16476.
2018-11-27 15:28:41 -05:00
..
adapters
cases Do not deserialize GlobalID objects that were not generated by Active Job 2018-11-27 15:28:41 -05:00
integration
jobs Keep executions for each specific exception (#34352) 2018-11-23 11:31:14 -08:00
models
support
helper.rb