a3639bfd2f
Only databases/ruby-activerecord61 has updated. Rails 6.0.6.1 (2023-01-17) * Make `sanitize_as_sql_comment` more strict Though this method was likely never meant to take user input, it was attempting sanitization. That sanitization could be bypassed with carefully crafted input. This commit makes the sanitization more robust by replacing any occurrances of "/*" or "*/" with "/ *" or "* /". It also performs a first pass to remove one surrounding comment to avoid compatibility issues for users relying on the existing removal. This also clarifies in the documentation of annotate that it should not be provided user input. [CVE-2023-22794]
25 lines
874 B
Makefile
25 lines
874 B
Makefile
# $NetBSD: Makefile,v 1.5 2023/01/19 14:27:25 taca Exp $
|
|
|
|
DISTNAME= actionpack-${RAILS_VERSION}
|
|
PKGNAME= ${RUBY_PKGPREFIX}-actionpack${RUBY_RAILS}-${RAILS_VERSION}
|
|
CATEGORIES= www
|
|
|
|
MAINTAINER= pkgsrc-users@NetBSD.org
|
|
HOMEPAGE= http://www.rubyonrails.org/
|
|
COMMENT= Toolkit for building modeling frameworks (part of Rails 6.0)
|
|
LICENSE= mit
|
|
|
|
DEPENDS+= ${RUBY_ACTIONVIEW_DEPENDS}
|
|
DEPENDS+= ${RUBY_PKGPREFIX}-rack2>=2.0:../../www/ruby-rack2
|
|
DEPENDS+= ${RUBY_PKGPREFIX}-rack-test>=0.6.3:../../www/ruby-rack-test
|
|
# ruby-actionview already depends them.
|
|
#DEPENDS+= ${RUBY_PKGPREFIX}-rails-dom-testing>=2.0<3:../../textproc/ruby-rails-dom-testing
|
|
#DEPENDS+= ${RUBY_PKGPREFIX}-rails-html-sanitizer>=1.0.2<2:../../www/ruby-rails-html-sanitizer
|
|
|
|
USE_LANGUAGES= # none
|
|
|
|
RUBY_RAILS_ACCEPTED= 60
|
|
RUBY_RAILS_STRICT_DEP= yes
|
|
|
|
.include "../../lang/ruby/gem.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|