activerecord-firewall issues

Bump rails-html-sanitizer from 1.3.0 to 1.4.3

Bumps [rails-html-sanitizer](https://github.com/rails/rails-html-sanitizer) from 1.3.0 to 1.4.3. Release notes Sourced from rails-html-sanitizer's releases. 1.4.3 / 2022-06-09 Address a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. Prevent the combination of select...

dependabot[bot]

dependencies

Bump nokogiri from 1.10.9 to 1.13.6

1

Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.9 to 1.13.6. Release notes Sourced from nokogiri's releases. 1.13.6 / 2022-05-08 Security [CRuby] Address CVE-2022-29181, improper handling of unexpected data types, related to untrusted inputs to...

dependabot[bot]

dependencies

Add a 'report only' feature where activerecord models will not blow up when firewalled but will just log

2

Currently, the gem will always blow up when a firewalled constraint is violated. This isn’t great for when you’re trying to implement this new safeguard in a production application. This...

JackMc

Add Rails license to lib/activesupport/current_attributes.rb

1

That code is copied from the rails code base, so we need to make sure we respect the MIT license and keep the original copyright notice and license on the...

rafaelfranca