Commits on Jan 23, 2018

1. Remove the automatic loading of URI Adapters …

   Remove the URI adapters. Few people use them by default and they can
   allow insight into the internal networks of the server. If you want to
   enable them, add (for example) `Paperclip.DataUriAdapter.register` to
   your `config/initializers/paperclip.rb` file.
   
   This is related to CVE-2017-0889.
   
   Elsewhere fix CI: it's `s3.us-west-2` now, with a dot.

   

   Jon Yurek authored and mike-burns committed Jan 23, 2018
   Copy the full SHA

   80847b4 View commit details

   Browse the repository at this point in the history