• G
    Handle invalid UTF-8 strings when HTML escaping · 05a2a6a0
    Grey Baker 提交于
    Use `ActiveSupport::Multibyte::Unicode.tidy_bytes` to handle invalid UTF-8
    strings in `ERB::Util.unwrapped_html_escape` and `ERB::Util.html_escape_once`.
    Prevents user-entered input passed from a querystring into a form field from
    causing invalid byte sequence errors.
    05a2a6a0
可在Tags中查看这些版本中当前仓库的状态.
CHANGELOG.md 9.6 KB