shoutaaaaaaaaaa@gmail.com
2006-Oct-20 07:29 UTC
The routing for Rails-Components doesn''t work on 1.1.6
The routing for Rails-Components doesn''t work on 1.1.6 and 1.1.5
wholly.
It was worked on 1.1.4.
A not-work code is here.
http://dev.rubyonrails.org/ticket/6453
(Maybe it doesn''t work in any situation on 1.1.6.)
A cause of this bug is changes in "save_load_paths" method
(actionpack\lib\action_controller\routing.rb).
In 1.1.6, paths for Rails-Components are removed by design, and never
load.
Is this effect of security fix?
Is there adverse affect for security if I''ll have got back this code?
And can I have other ways for solution?
actionpack\lib\action_controller\routing.rb
== 1.1.6 =def safe_load_paths #:nodoc:
if defined?(RAILS_ROOT)
$LOAD_PATH.select do |base|
base = File.expand_path(base)
extended_root = File.expand_path(RAILS_ROOT)
# Exclude all paths that are not nested within app, lib, or
components.
base.match(/\A#{Regexp.escape(extended_root)}\/*(app|lib|components)\/[a-z]/)
|| base =~ %r{rails-[\d.]+/builtin}
end
else
$LOAD_PATH
end
end
== 1.1.4 =def safe_load_paths #:nodoc:
if defined?(RAILS_ROOT)
$LOAD_PATH.select do |base|
base = File.expand_path(base)
extended_root = File.expand_path(RAILS_ROOT)
base[0, extended_root.length] == extended_root || base =~
%r{rails-[\d.]+/builtin}
end
else
$LOAD_PATH
end
end
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"Ruby on Rails: Core" group.
To post to this group, send email to rubyonrails-core@googlegroups.com
To unsubscribe from this group, send email to
rubyonrails-core-unsubscribe@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/rubyonrails-core
-~----------~----~----~----~------~----~------~--~---
shoutaaaaaaaaaa@gmail.com
2006-Oct-20 10:11 UTC
Re: The routing for Rails-Components doesn''t work on 1.1.6
I create a patch. Please see a belowing ticket. http://dev.rubyonrails.org/ticket/6458 --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Core" group. To post to this group, send email to rubyonrails-core@googlegroups.com To unsubscribe from this group, send email to rubyonrails-core-unsubscribe@googlegroups.com For more options, visit this group at http://groups.google.com/group/rubyonrails-core -~----------~----~----~----~------~----~------~--~---