actionview/lib/action_view/helpers/number_helper.rb · v4.1.4 · Rails relative code / rails-deleted-2

Feb 11, 2014
08d0a11a
Escape format, negative_format and units options of number helpers · 08d0a11a
Rafael Mendonça França authored Feb 11, 2014
```
Previously the values of these options were trusted leading to
potential XSS vulnerabilities.

Fixes: CVE-2014-0081
```
08d0a11a
Escape format, negative_format and units options of number helpers
Rafael Mendonça França authored Feb 11, 2014
```
Previously the values of these options were trusted leading to
potential XSS vulnerabilities.

Fixes: CVE-2014-0081
```