rubygem-activerecord/CVE-2022-44566-pre1.patch

26 lines
979 B
Diff
Raw Permalink Normal View History

From fbb7f0b407c96cb38fba6b2e8cb8ce12252738da Mon Sep 17 00:00:00 2001
From: Jean Boussier <jean.boussier@gmail.com>
Date: Wed, 13 Jul 2022 18:59:49 +0200
Subject: [PATCH 1/1] Allow Symbol by default in YAML columns
---
activerecord/lib/active_record/core.rb | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/activerecord-6.1.4.1/lib/active_record/core.rb b/activerecord-6.1.4.1/lib/active_record/core.rb
index 379cae1830..9f1584d46b 100644
--- a/activerecord-6.1.4.1/lib/active_record/core.rb
+++ b/activerecord-6.1.4.1/lib/active_record/core.rb
@@ -161,7 +161,7 @@ def self.configurations
# Application configurable array that provides additional permitted classes
# to Psych safe_load in the YAML Coder
- mattr_accessor :yaml_column_permitted_classes, instance_writer: false, default: []
+ mattr_accessor :yaml_column_permitted_classes, instance_writer: false, default: [Symbol]
self.filter_attributes = []
--
2.33.0