Active Support
-
Avoid regex backtracking in Inflector.underscore
[CVE-2023-22796]
Active Model
- No changes.
Active Record
-
Make sanitize_as_sql_comment more strict
Though this method was likely never meant to take user input, it was
attempting sanitization. That sanitization could be bypassed with
carefully crafted input.This commit makes the sanitization more robust by replacing any
occurrances of "/" or "/" with "/ " or " /". It also performs a
first pass to remove one surrounding comment to avoid compatibility
issues for users relying on the existing removal.This also clarifies in the documentation of annotate that it should not
be provided user input.[CVE-2023-22794]
-
Added integer width check to PostgreSQL::Quoting
Given a value outside the range for a 64bit signed integer type
PostgreSQL will treat the column type as numeric. Comparing
integer values against numeric values can result in a slow
sequential scan.This behavior is configurable via
ActiveRecord::Base.raise_int_wider_than_64bit which defaults to true.[CVE-2022-44566]
Action View
- No changes.
Action Pack
-
Avoid regex backtracking on If-None-Match header
[CVE-2023-22795]
-
Use string#split instead of regex for domain parts
[CVE-2023-22792]
Active Job
- No changes.
Action Mailer
- No changes.
Action Cable
- No changes.
Active Storage
- No changes.
Action Mailbox
- No changes.
Action Text
- No changes.
Railties
- No changes.