diff options
author | Michael Koziarski <michael@koziarski.com> | 2013-12-02 10:12:47 +1300 |
---|---|---|
committer | Aaron Patterson <aaron.patterson@gmail.com> | 2013-12-02 16:41:14 -0800 |
commit | b31a7a6f1ec3c74f75b4cd12386b08295287418d (patch) | |
tree | b76118ab77470679d0e4d4df43f7a3957c001b6b /activerecord/CHANGELOG.md | |
parent | 2e3c3a87d81e16a2fed442c1cf31360f75737a83 (diff) | |
download | rails-b31a7a6f1ec3c74f75b4cd12386b08295287418d.tar.gz rails-b31a7a6f1ec3c74f75b4cd12386b08295287418d.tar.bz2 rails-b31a7a6f1ec3c74f75b4cd12386b08295287418d.zip |
Escape the unit value provided to number_to_currency
Previously the unit values were trusted leading to potential XSS vulnerabilities.
Fixes: CVE-2013-6415
Diffstat (limited to 'activerecord/CHANGELOG.md')
0 files changed, 0 insertions, 0 deletions