1. 10 9月, 2020 2 次提交
    • J
      Merge pull request from GHSA-cfjv-5498-mph5 · 18ded3a7
      Jonathan Hefner 提交于
      Prior to this commit, when a translation key indicated that the
      translation text was HTML, the value returned by `I18n.translate` would
      always be marked as `html_safe`.  However, the value returned by
      `I18n.translate` could be an untrusted value directly from
      `options[:default]`.
      
      This commit ensures values directly from `options[:default]` are not
      marked as `html_safe`.
      18ded3a7
    • J
      Merge pull request from GHSA-cfjv-5498-mph5 · e663f084
      Jonathan Hefner 提交于
      Prior to this commit, when a translation key indicated that the
      translation text was HTML, the value returned by `I18n.translate` would
      always be marked as `html_safe`.  However, the value returned by
      `I18n.translate` could be an untrusted value directly from
      `options[:default]`.
      
      This commit ensures values directly from `options[:default]` are not
      marked as `html_safe`.
      e663f084
  2. 09 9月, 2020 5 次提交
  3. 08 9月, 2020 8 次提交
  4. 07 9月, 2020 5 次提交
  5. 06 9月, 2020 8 次提交
  6. 05 9月, 2020 1 次提交
  7. 04 9月, 2020 11 次提交