Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update rails-html-sanitizer to 1.1.0 in actionview.gemspec #36860

Conversation

cpruitt
Copy link
Contributor

@cpruitt cpruitt commented Aug 5, 2019

Commit 52f0b05 replaces white_list_sanitizer with safe_list_sanitizer. At GitHub we found this to be a breaking change with Rails 6.0 unless the version of rails-html-sanitizer is upgraded to >= 1.1.0.

This PR updates the minimum version of rails-html-sanitizer in actionview/actionview.gemspec to 1.1.0.

CC: @JuanitoFatas, @kaspth, @eileencodes

Commit rails@52f0b05 replaces `white_list_sanitizer` with `safe_list_sanitizer`. This is a breaking change unless the installed version of `rails-html-sanitizer` is `>= 1.1.0`.

This commit updates the minimum version in `actionview/actionview.gemspec` to `1.1.0`.
@rails-bot rails-bot bot added the actionview label Aug 5, 2019
@cpruitt cpruitt marked this pull request as ready for review August 5, 2019 18:05
@eileencodes eileencodes merged commit 3d83fff into rails:master Aug 5, 2019
eileencodes added a commit that referenced this pull request Aug 5, 2019
…tizer-version

Update rails-html-sanitizer to 1.1.0 in actionview.gemspec
@bogdanvlviv
Copy link
Contributor

I see that 52f0b05 was backported to 5-2-stable as well. So we probably should backport this change to 5-2-stable? Also, I suppose actiontext/app/helpers/action_text/content_helper.rb was backported accidentally to 5-2-stable, we should remove it from this branch
/cc @kaspth

eileencodes added a commit to eileencodes/rails that referenced this pull request Aug 6, 2019
The PR rails#36860 changed ActionView's required version of
rails-html-sanitizer, but I missed that we needed to run bundle,
otherwise we end up with changes every time.
@eileencodes eileencodes mentioned this pull request Aug 6, 2019
eileencodes added a commit that referenced this pull request Aug 6, 2019
The PR #36860 changed ActionView's required version of
rails-html-sanitizer, but I missed that we needed to run
bundle, otherwise we end up with changes every time.
@kaspth
Copy link
Contributor

kaspth commented Aug 8, 2019

Sorry, I didn't get back to you @bogdanvlviv, here's the latest: #36858 (comment) 😊

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants