Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

This project is archived and is in readonly mode.

New XSS protections breaks yaml

#3535

This is correct :

 >> ('foo' + 'baar').to_yaml
 => "--- foobaar\n"

This, on the other hand, feels way wrong :

 >> ('foo' << 'baar').to_yaml
 => "--- !str \nstr: foobaar\n"@_rails_html_safe": false\n"

Reported by Mathieu Arnold · December 2nd, 2009 @ 02:17 PM

State: committed
Milestone: 2.3.6
Assigned to: Michael Koziarski Michael Koziarski
Importance: Low

Activity

  1. Santiago Pastorino
    Santiago Pastorino
    • Milestone set to 2.3.6
    • State changed from new to open
    • Assigned user set to Michael Koziarski

    April 22nd, 2010 @ 10:32 PM

  2. Repository
    Repository
    • State changed from open to committed

    (from [c401102a2702f9b945803e66d3a25b77d882ee13]) Is not nessesary to have @_rails_html_safe instance var when the string is unsafe, also it breaks to_yaml [#3535 New XSS protections breaks yaml state:committed] http://github.com/rails/rails/commit/c401102a2702f9b945803e66d3a25b...

    April 22nd, 2010 @ 10:35 PM