textproc/rubygem-rails-html-sanitizer: Update to 1.7.1 Changes: https://github.com/rails/rails-html-sanitizer/releases45c598a83d
rails-html-sanitizer -- possible XSS vulnerabilityentered 2018-03-24
Port details
textproc/rubygem-rails-html-sanitizer 1.7.1
Sanitize HTML fragments in Rails applications
- Maintainer
- sunpoet@FreeBSD.org
- Packages
- latest: 1.7.1
- Upstream
- up to date
- Last update
- to 1.7.1 · 45c598a83d
- Quarterly
- 2026Q4: 1.7.1
- WWW
- https://github.com/rails/rails-html-sanitizer
- Links
- cgit · VuXML
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.7.1.Fixed (2)
Show 2 fixed
VuXML entries whose affected range the packaged version has left.
rails -- multiple vulnerabilitiesentered 2016-02-02
CVE-2015-7576, CVE-2015-7577, CVE-2015-7581, CVE-2016-0751, CVE-2016-0752, CVE-2016-0753
Problem reports (0) · open in Bugzilla, most recently changed first
None.
Commits (23)
textproc/rubygem-rails-html-sanitizer: Update to 1.7.0 Changes: https://github.com/rails/rails-html-sanitizer/releases4383be681f
textproc/rubygem-rails-html-sanitizer: Update to 1.6.2 Changes: https://github.com/rails/rails-html-sanitizer/releasesf3c73e0065
textproc/rubygem-rails-html-sanitizer: Update to 1.6.0 Changes: https://github.com/rails/rails-html-sanitizer/releasese06227b535
textproc/rubygem-rails-html-sanitizer: Update to 1.5.0 Changes: https://github.com/rails/rails-html-sanitizer/releasesd2c037c725
textproc/rubygem-rails-html-sanitizer: Update to 1.4.4 Changes: https://github.com/rails/rails-html-sanitizer/releases Security: CVE-2022-23517, CVE-2022-23518, CVE-2022-23519, CVE-2022-23520c04406c265
Mk/**ruby.mk: Switch from USE_RUBY=yes to USES=ruby
Switch from Mk/bsd.ruby.mk to Mk/Uses/ruby.mk
Notable changes are.
- Mk/bsd.ruby.mk is moved to Mk/Uses/ruby.mk.
- USE_RUBY=yes is replaced with USES=ruby.
- USE_RUBY_EXTCONF is replaced with USES=ruby:extconf.
- USE_RUBY_RDOC is replaced with USES=ruby:rdoc.
- USE_RUBY_SETUP is replaces with USES=ruby:setup.
- RUBY_NO_BUILD_DEPENDS and RUBY_NO_RUN_DEPENDS are replaced with
USES=ruby:{build,none,run}.
- RUBY_REQUIRE isn't used anywhere, so removed.
- USES=gem now implies USES=ruby.
This is mainly the work of yasu@ at https://reviews.freebsd.org/D27863
I have just made some cosmetic changes and ran exp-run to test that the
tree is not in a BROKEN state.
Approved by: portmgr
Differential Revision: https://reviews.freebsd.org/D3792518c6e18276Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
textproc/rubygem-rails-html-sanitizer: Update to 1.4.3 Changes: https://github.com/rails/rails-html-sanitizer/releases Security: CVE-2022-322094b00ec2723
textproc/rubygem-rails-html-sanitizer: Add USES=cpe9995151644
textproc/rubygem-rails-html-sanitizer: Update to 1.4.2 Changes: https://github.com/rails/rails-html-sanitizer/releases4fdd300181
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
Update to 1.3.0 Changes: https://github.com/rails/rails-html-sanitizer/releasesda5208293d
Update to 1.2.0 - Add LICENSE_FILE - Update version requirement of RUN_DEPENDS - Take maintainership Changes: https://github.com/rails/rails-html-sanitizer/releasescff563d888
Update to 1.0.4 Changes: https://github.com/rails/rails-html-sanitizer/releases Security: 81946ace-6961-4488-a164-22d58ebc8d66 MFH: 2018Q1a047edc378
Convert USES=gem:autoplist to USES=gem since autoplist is default462519941e
create USES=gem and update rubygem- ports to use it Note that for now ports still have to have USE_RUBY=yes to use USES=gem PR: 209041 Differential Revision: https://reviews.freebsd.org/D6070b3e8fe8d85
Remove ${PORTSDIR}/ from dependencies, categories r, s, t, and u.
With hat: portmgr
Sponsored by: Absolight597afc47ba- Update to 1.0.3 Changes: https://github.com/rails/rails-html-sanitizer/releases https://github.com/rails/rails-html-sanitizer/commits/master Security: bb0ef21d-0e1b-461b-bc3d-9cba39948888 MFH: 2016Q14fbe0af36d
- Add LICENSE - Add NO_ARCH - Update WWW097d964e1e
www/rubygem-rails4: update to 4.2.1 Differential Revision: https://reviews.freebsd.org/D271083c258ba8a