d092c133c7
Closes #40482 Prior to this commit it was possible to subscribe with `ActionCable::Channel::Base` as the subscription class. While it doesn't seem possible to exploit this in away way, it also doesn't seem like something we need to allow. This commit swaps [Module#>=][gte] with [Module#>][gt] to prevent subscribing to a channel when `ActionCable::Channel::Base` is the subscription class. [gte]: https://ruby-doc.org/core-2.5.3/Module.html#method-i-3E-3D [gt]: https://ruby-doc.org/core-2.5.3/Module.html#method-i-3E |
||
|---|---|---|
| .. | ||
| authorization.rb | ||
| base.rb | ||
| client_socket.rb | ||
| identification.rb | ||
| internal_channel.rb | ||
| message_buffer.rb | ||
| stream.rb | ||
| stream_event_loop.rb | ||
| subscriptions.rb | ||
| tagged_logger_proxy.rb | ||
| test_case.rb | ||
| web_socket.rb | ||