8000 Restore inner span tag to form inputs legend by denisahearn · Pull Request #8467 · activeadmin/activeadmin · GitHub
[go: up one dir, main page]

Skip to content

Restore inner span tag to form inputs legend #8467

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged

Conversation

denisahearn
Copy link
@denisahearn denisahearn commented Sep 4, 2024

Fixes the issue described here: #8466

Closes #8466

end

context "with XSS payload as name" do
let :body do
build_form do |f|
f.inputs name: '<script>alert(document.domain)</script>' do
f.inputs name: "<script>alert(document.domain)</script>" do
Copy link
Author
@denisahearn denisahearn Sep 4, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an un-related change made by rubocop run by my IDE when the file was saved

@mgrunberg
Copy link
Contributor

LGTM, thanks! I don't have problems with the rubocop extra fix. Let's wait @javierjulio approval

@mgrunberg mgrunberg changed the title Restore inner span tag to form inputs legend (3-0-stable) Restore inner span tag to form inputs legend Sep 4, 2024
@mgrunberg
Copy link
Contributor

@denisahearn don't worry about the failing test. #8468 is required to fix them

Copy link
Member
@javierjulio javierjulio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@mgrunberg
Copy link
Contributor

@denisahearn don't worry about the failing test. #8468 is required to fix them

@denisahearn I merged the PR. Can you rebase your branch with 3-0-stable?

@mgrunberg mgrunberg enabled auto-merge (squash) September 4, 2024 17:46
@mgrunberg mgrunberg disabled auto-merge September 4, 2024 17:46
@mgrunberg mgrunberg enabled auto-merge (squash) September 4, 2024 17:46
Copy link
codecov bot commented Sep 4, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (3-0-stable@c0cff8f). Learn more about missing BASE report.

Additional details and impacted files
@@              Coverage Diff              @@
##             3-0-stable    #8467   +/-   ##
=============================================
  Coverage              ?   99.19%           
=============================================
  Files                 ?      194           
  Lines                 ?     4965           
  Branches              ?        0           
=============================================
  Hits                  ?     4925           
  Misses                ?       40           
  Partials              ?        0           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@mgrunberg mgrunberg merged commit 726e7e9 into activeadmin:3-0-stable Sep 4, 2024
19 checks passed
@denisahearn
Copy link
Author

@mgrunberg Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants
0