Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update specs to match on translations #1015

Merged
merged 1 commit into from
Apr 1, 2024
Merged

Conversation

sej3506
Copy link
Contributor

@sej3506 sej3506 commented Mar 29, 2024

In Rails 7.13.1 and 7.0.8.1, a XSS vulnerability was closed that updated how translated strings are dealth with.
GHSA-9822-6m93-xqf4

This change to specs updates how we verify acceptance (using the translation instead of a regex) and also adds in a helper to conditionally html escape the string based on the Rails version.

In Rails 7.13.1 and 7.0.8.1, a XSS vulnerability was closed that updated
how translated strings are dealth with.
GHSA-9822-6m93-xqf4

This change to specs updates how we verify acceptance (using the
translation instead of a regex) and also adds in a helper to
conditionally html escape the string based on the Rails version.
@sej3506
Copy link
Contributor Author

sej3506 commented Mar 29, 2024

Failing in 2.7.6 which will have support dropped just as soon as I merge in this fix.

@sej3506 sej3506 merged commit d65cecc into main Apr 1, 2024
17 of 18 checks passed
@sej3506 sej3506 deleted the update-string-matching-specs branch April 1, 2024 12:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant