Update rack-protection
ClosedPublic
Actions

Authored by dereckson on Sep 20 2018, 21:44.

Tags

None

Referenced Files

	F9926549: D1778.id.diff
	Mon, Jun 16, 08:45

	Unknown Object (File)
	Fri, Jun 13, 22:22

	Unknown Object (File)
	Fri, Jun 13, 18:20

	Unknown Object (File)
	Wed, Jun 11, 10:25

	Unknown Object (File)
	Wed, Jun 11, 04:26

	Unknown Object (File)
	Tue, Jun 10, 18:54

	Unknown Object (File)
	Sun, Jun 8, 16:15

	Unknown Object (File)
	Sat, Jun 7, 14:34

View All Files

Subscribers

None

Details

Reviewers

dereckson

Maniphest Tasks

T1444: CSRF timing attach in Sinatra rack-protection (CVE-2018-1000119)

Commits

rTOMMY9ca3ab76bdbc: Update rack-protection

Summary

Upgrade to a version with a fix for CVE-2018-1000119.

This security issue doesn't impact Tommy.

Fixes T1444.

Test Plan

Fire new Docker image

Diff Detail

Repository

rTOMMY Tommy

Lint

Lint Not Applicable

Unit

Tests Not Applicable

Event Timeline

dereckson requested review of this revision.Sep 20 2018, 21:44

dereckson created this revision.

Harbormaster completed remote builds in B2763: Diff 4513.Sep 20 2018, 21:44

dereckson accepted this revision.Sep 21 2018, 09:28

This revision is now accepted and ready to land.Sep 21 2018, 09:28

Closed by commit rTOMMY9ca3ab76bdbc: Update rack-protection (authored by dereckson). · Explain WhySep 21 2018, 09:56

This revision was automatically updated to reflect the committed changes.

Revision Contents
Changeset List

Path

Size

Gemfile.lock

2 lines

Diff 4514

View Options

Update rack-protectionClosedPublicActions