mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
c4c21a9f8d
url_for supports building polymorphic URLs via an array of arguments (usually symbols and records). If an array is passed, strings can result in unwanted route helper calls. CVE-2021-22885 |
||
---|---|---|
.. | ||
controller_runtime_test.rb | ||
debug_helper_test.rb | ||
form_helper_activerecord_test.rb | ||
multifetch_cache_test.rb | ||
partial_rendering_query_test.rb | ||
polymorphic_routes_test.rb | ||
relation_cache_test.rb | ||
render_partial_with_record_identification_test.rb |