Skip to content

V0.3.0 update#74

Merged
kengallego merged 18 commits into
ePages-de:v0.3.0from
kengallego:v0.3.0-update
May 19, 2026
Merged

V0.3.0 update#74
kengallego merged 18 commits into
ePages-de:v0.3.0from
kengallego:v0.3.0-update

Conversation

@kengallego
Copy link
Copy Markdown
Contributor

No description provided.

The site/ path is just for viewing components locally so I ignored the warning `Cross-Site Request Forgery` (message: "`protect_from_forgery` should be called in `ApplicationController`")
The check_box was called with empty options, losing the form attribute
needed when the input is defined outside the form tag via HTML5 form
association. This worked in ViewComponent v3 due to the ActionView::Base
capture compatibility patch, which was removed in v4.
Resolves CVE-2026-44836 and CVE-2026-44837.
Toggle input conflict resolved using v0.3.0 approach (slice! :class).
@kengallego kengallego merged commit 4142b6d into ePages-de:v0.3.0 May 19, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant