From ceb8ec3eff84b430d3c5630bd1ff38d10c8aa209 Mon Sep 17 00:00:00 2001 From: Aaron Patterson Date: Mon, 11 Jun 2012 15:39:59 -0700 Subject: updating changelogs with security fixes --- actionpack/CHANGELOG.md | 2 ++ activerecord/CHANGELOG.md | 4 ++++ 2 files changed, 6 insertions(+) diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index 75fb902196..81ad747684 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,5 +1,7 @@ ## Rails 3.2.6 (unreleased) ## +* nil is removed from array parameter values + * Deprecate `:confirm` in favor of `':data => { :confirm => "Text" }'` option for `button_to`, `button_tag`, `image_submit_tag`, `link_to` and `submit_tag` helpers. *Carlos Galdino* diff --git a/activerecord/CHANGELOG.md b/activerecord/CHANGELOG.md index 71050efbc5..224f58463f 100644 --- a/activerecord/CHANGELOG.md +++ b/activerecord/CHANGELOG.md @@ -1,5 +1,9 @@ ## Rails 3.2.6 (unreleased) ## +* protect against the nesting of hashes changing the + table context in the next call to build_from_hash. This fix + covers this case as well. + * Revert earlier 'perf fix' (see 3.2.4 changelog / GH #6289). This change introduced a regression (GH #6609). assoc.clear and assoc.delete_all have loaded the association before doing the delete -- cgit v1.2.3