Labyricorn/liquid
1
0
Fork 0
mirror of https://github.com/Shopify/liquid.git synced 2026-09-12 23:40:45 -07:00
Code Issues Packages Projects Releases Wiki Activity

security: Prevent arbitrary method invocation on conditions in if tag.

Browse Source
This commit is contained in:
Dylan Thacker-Smith
2013-10-28 12:20:27 -04:00
parent 71a386f723
commit cc982e92d0
3 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
History.md
+2 -1
View File
@@ -10,7 +10,8 @@
* Fix clashing method names in enumerable drops, see #238 [Florian Weingarten, fw42]
* Make map filter work on enumerable drops, see #233 [Florian Weingarten, fw42]
* Improved whitespace stripping for blank blocks, related to #216 [Florian Weingarten, fw42]
* Don't call to_sym when creating conditions and use public_send for security reasons, see #273 [Bouke van der Bijl, bouk]
* Don't call to_sym when creating conditions for security reasons, see #273 [Bouke van der Bijl, bouk]
* Prevent arbitrary method invocation on condition objects, see #274 [Dylan Thacker-Smith, dylanahsmith]
## 2.6.0 / not yet released / branch "2.6-stable"