actionview/test/template/html_test.rb · v4.1.4 · Rails relative code / rails-deleted-2

Feb 18, 2014

Use the reference for the mime type to get the format · 33cb47ee

Rafael Mendonça França authored Feb 18, 2014

Before we were calling to_sym in the mime type, even when it is unknown
what can cause denial of service since symbols are not removed by the
garbage collector.

Fixes: CVE-2014-0082

33cb47ee

Use the reference for the mime type to get the format

Rafael Mendonça França authored Feb 18, 2014

Before we were calling to_sym in the mime type, even when it is unknown
what can cause denial of service since symbols are not removed by the
garbage collector.

Fixes: CVE-2014-0082