From 9f38a3fb0c9c71102da283b014503ccad92da581 Mon Sep 17 00:00:00 2001 From: Grey Baker Date: Wed, 13 Jul 2016 18:44:04 +0100 Subject: Check `request.path_parameters` encoding at the point they're set Check for any non-UTF8 characters in path parameters at the point they're set in `env`. Previously they were checked for when used to get a controller class, but this meant routes that went directly to a Rack app, or skipped controller instantiation for some other reason, had to defend against non-UTF8 characters themselves. --- actionpack/CHANGELOG.md | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'actionpack/CHANGELOG.md') diff --git a/actionpack/CHANGELOG.md b/actionpack/CHANGELOG.md index 1bb37d661a..1aeb58a612 100644 --- a/actionpack/CHANGELOG.md +++ b/actionpack/CHANGELOG.md @@ -1,3 +1,13 @@ +* Check `request.path_parameters` encoding at the point they're set + + Check for any non-UTF8 characters in path parameters at the point they're + set in `env`. Previously they were checked for when used to get a controller + class, but this meant routes that went directly to a Rack app, or skipped + controller instantiation for some other reason, had to defend against + non-UTF8 characters themselves. + + *Grey Baker* + * Don't raise ActionController::UnknownHttpMethod from ActionDispatch::Static Pass `Rack::Request` objects to `ActionDispatch::FileHandler` to avoid it -- cgit v1.2.3