lp:ubuntu/natty/rails

Branch merges

Propose for merging

1 branch proposed for merging into this one.

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

13. By Dave Walker on 2011-03-16

debian/patches/cdata-and-white-space-handling.patch: Handle CDATA and
improve white space handling, fixing a Segmentation Fault in some
circumstances. Patch based on subset of upstream commit range.
(LP: #670571)

12. By Mehdi on 2010-12-27

* Non-maintainer upload.

[ Laurent Bigonville ]
* Fix documentation about default listening address (Closes: #583149)

[ Gunnar Wolf ]
* Modified a string that recommends the user to do Very Bad Things
  (Closes: #603048)

11. By Gunnar Wolf on 2010-08-26

* Non-maintainer upload.
* Added missing build-dependencies for rails-ruby1.8 on libactionpack-
  ruby1.8, libactionmailer-ruby1.8 and libactiveresource-ruby1.8
  (Closes: #587048)
* Fixed broken symlink to railties on new project generator (Closes:
  #583219)

10. By Adam Majer on 2010-05-23

* New upstream release (closes: #547658)
* Package is now split up and non-core rails components, like AR, are on
  the ruby load path. (closes: #469524, #517328)
* debian/control
  + Depend on rubygems.
  + Suggest thin or thin1.8 as a possible server to run your production
    environment on. This is particularly useful if it is already being
    proxied.
  + xml-simple is no longer used by rails
  + Updated Standard to 3.8.4

9. By Adam Majer on 2010-01-30

* Make sure strip_tags removes tags which start with a non-printable
  character. (closes: #558685) [CVE-2009-4214]
* Merge in a few additional encoding changes.

8. By Adam Majer on 2009-09-11

* New upstream release (closes: #545063)
  + Fixes XSS security hole [CVE-2009-3009]
  + Fixes timing issue with cookie store [CVE-2009-3086]
* Remove dependency on ruby-dbi, as it is not required by any of the
  sources.
* Correct dependency on fixed libxml-simple-ruby to 1.0.11-2 or later
  (closes: #538982)
* debian/control
  + Change section from web to ruby
  + Updated to debhelper 7.0+
  + Standards updated to 3.8.3 - no changes

7. By Tiago Bortoletto Vaz <email address hidden> on 2009-06-18

* Non-maintainer upload.
* Build-depends on rubygems. (Closes: #522009)

6. By Adam Majer on 2009-03-03

* New upstream release (closes: #510580, 510580)
   + fixes the problem with migration with symbolic field types
     (closes: #511860)
* debian/control:
   + Depend on Rake 0.8.3 or later
   + Build-Depends-Indep on libmocha-ruby for unit tests
   + Move most of the build dependencies to Build-Depends-Indep
   + Remove the predepends as Lenny is released
* Load XMLSimple without specifying a path (closes: #514582)
* Add an explanation how to configure non-packaged rails adds to work
  with Debian version of rails. Also include a tiny script to help in
  this effort. Tomas Pospisek provided the patch. (closes: #499187)

5. By Adam Majer on 2008-11-18

Some browsers may submit 'text/plain' content type as part of POST
request. ActionController passed these requests through, sidestepping
the CSRF protection given by protect_from_forgery. Patch from
upstream removes 'text/plain' encoding from the "ignore list".

4. By Adam Majer on 2008-10-19

Sanitize the URLs passed to redirect_to to prevent a potential
response splitting attack. Patch from upstream.