rails--rails/actioncable
Daniel Colson d092c133c7
Do not allow subscribing to Base channel
Closes #40482

Prior to this commit it was possible to subscribe with
`ActionCable::Channel::Base` as the subscription class. While it doesn't
seem possible to exploit this in away way, it also doesn't seem like
something we need to allow.

This commit swaps [Module#>=][gte] with [Module#>][gt] to prevent
subscribing to a channel when `ActionCable::Channel::Base` is the
subscription class.

[gte]: https://ruby-doc.org/core-2.5.3/Module.html#method-i-3E-3D
[gt]: https://ruby-doc.org/core-2.5.3/Module.html#method-i-3E
2020-11-24 22:30:03 -05:00
..
app Add gitattributes for vendored and generated files [ci-skip] 2020-10-04 16:44:37 -05:00
bin Use frozen string literal in actioncable/ 2017-07-23 23:30:29 +03:00
lib Do not allow subscribing to Base channel 2020-11-24 22:30:03 -05:00
test Do not allow subscribing to Base channel 2020-11-24 22:30:03 -05:00
.babelrc Convert ActionCable javascript to ES2015 modules with modern build environment 2018-11-02 08:41:05 -07:00
.eslintrc Convert ActionCable javascript to ES2015 modules with modern build environment 2018-11-02 08:41:05 -07:00
.gitignore Ensure @rails/actioncable package contains complete source 2019-08-15 09:19:59 -04:00
CHANGELOG.md Preparing for 6.1.0.rc1 release 2020-11-02 21:12:47 +00:00
MIT-LICENSE Bump license years from 2019 to 2020 [ci skip] 2020-01-01 15:10:31 +05:30
README.md Update the Rails mailing list URLs to new discuss discourse URL [ci skip] 2020-04-02 22:00:28 +05:30
Rakefile Load framework test files in deterministic order 2019-12-16 16:55:06 +00:00
actioncable.gemspec Update the Rails mailing list URLs to new discuss discourse URL [ci skip] 2020-04-02 22:00:28 +05:30
karma.conf.js s/Travis/Buildkite/ 2019-04-09 11:28:49 +09:30
package.json Preparing for 6.1.0.rc1 release 2020-11-02 21:12:47 +00:00
rollup.config.js Remove circular dependency warnings in ActionCable javascript and publish source modules with fine-grained exports (#34370) 2018-12-01 16:25:02 -05:00
rollup.config.test.js Convert ActionCable tests from CoffeeScript to ES2015 and replace Blade with Karma and Rollup (#34440) 2018-11-26 17:16:02 -05:00

README.md

Action Cable Integrated WebSockets for Rails

Action Cable seamlessly integrates WebSockets with the rest of your Rails application. It allows for real-time features to be written in Ruby in the same style and form as the rest of your Rails application, while still being performant and scalable. It's a full-stack offering that provides both a client-side JavaScript framework and a server-side Ruby framework. You have access to your full domain model written with Active Record or your ORM of choice.

You can read more about Action Cable in the Action Cable Overview guide.

Support

API documentation is at:

Bug reports for the Ruby on Rails project can be filed here:

Feature requests should be discussed on the rails-core mailing list here: