1. 09 6月, 2015 1 次提交
    • G
      Handle invalid UTF-8 strings when HTML escaping · 05a2a6a0
      Grey Baker 提交于
      Use `ActiveSupport::Multibyte::Unicode.tidy_bytes` to handle invalid UTF-8
      strings in `ERB::Util.unwrapped_html_escape` and `ERB::Util.html_escape_once`.
      Prevents user-entered input passed from a querystring into a form field from
      causing invalid byte sequence errors.
      05a2a6a0
  2. 08 6月, 2015 18 次提交
  3. 07 6月, 2015 9 次提交
  4. 06 6月, 2015 7 次提交
  5. 05 6月, 2015 5 次提交