Register | Log in

ruby-rails-html-sanitizer

HTML sanitization for Rails applications

Choose email to subscribe with

general

source: ruby-rails-html-sanitizer (main)
version: 1.3.0-1
maintainer: Debian Ruby Extras Maintainers (archive) (DMD)
uploaders: Georg Faerber [DMD] – Balasankar C [DMD]
arch: all
std-ver: 4.5.0
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

oldstable: 1.0.3-2
stable: 1.0.4-1
stable-bpo: 1.3.0-1~bpo10+1
testing: 1.3.0-1
unstable: 1.3.0-1

versioned links

1.0.3-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.0.4-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.0-1~bpo10+1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
1.3.0-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

ruby-rails-html-sanitizer

action needed

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 1.3.0-2, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit a10b8004384ca4eb0bb21f2da7cf9907d2782400
Author: Pirate Praveen <praveen@debian.org>
Date:   Tue Mar 31 15:33:48 2020 +0530

    Tighten dependency on ruby-loofah (for backports)

commit e5658a3c274d7b52fa76e618772f7de1c4e03f84
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Sat Mar 14 19:04:10 2020 +0000

    Set upstream metadata fields: Bug-Database, Bug-Submit, Repository, Repository-Browse.
    
    Fixes: lintian: upstream-metadata-file-is-missing
    See-also: https://lintian.debian.org/tags/upstream-metadata-file-is-missing.html

commit c2a8637318b66df02a7eb39e3a644bbccb0830f8
Author: Debian Janitor <janitor@jelmer.uk>
Date:   Sat Mar 14 19:03:39 2020 +0000

    Remove unnecessary Team Upload line in changelog.
    
    Fixes: lintian: unnecessary-team-upload
    See-also: https://lintian.debian.org/tags/unnecessary-team-upload.html

Created: 2020-03-16 Last update: 2020-08-10 19:35

lintian reports 2 warnings normal

Lintian reports 2 warnings about this package. You should make the package lintian clean getting rid of them.

Created: 2020-07-29 Last update: 2020-07-29 12:34

1 ignored security issue in stretch low

There is 1 open security issue in stretch.

1 issue skipped by the security teams:

CVE-2018-3741: There is a possible XSS vulnerability in all rails-html-sanitizer gem versions below 1.0.4 for Ruby. The gem allows non-whitelisted attributes to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. All users running an affected release should either upgrade or use one of the workarounds immediately.

Please fix it.

Created: 2018-03-25 Last update: 2020-08-07 06:08

news

[2020-04-06] Accepted ruby-rails-html-sanitizer 1.3.0-1~bpo10+1 (source all) into buster-backports, buster-backports (Debian FTP Masters) (signed by: Praveen Arimbrathodiyil)
[2020-02-07] ruby-rails-html-sanitizer 1.3.0-1 MIGRATED to testing (Debian testing watch)
[2020-02-04] Accepted ruby-rails-html-sanitizer 1.3.0-1 (source) into unstable (Georg Faerber)
[2018-03-29] ruby-rails-html-sanitizer 1.0.4-1 MIGRATED to testing (Debian testing watch)
[2018-03-23] Accepted ruby-rails-html-sanitizer 1.0.4-1 (source) into unstable (Georg Faerber) (signed by: Cédric Boutillier)
[2016-03-10] ruby-rails-html-sanitizer 1.0.3-2 MIGRATED to testing (Debian testing watch)
[2016-03-05] Accepted ruby-rails-html-sanitizer 1.0.3-2 (source) into unstable (Christian Hofstaedtler)
[2016-01-29] ruby-rails-html-sanitizer 1.0.3-1 MIGRATED to testing (Debian testing watch)
[2016-01-26] Accepted ruby-rails-html-sanitizer 1.0.3-1 (source) into unstable (Antonio Terceiro)
[2015-07-14] ruby-rails-html-sanitizer 1.0.2-1 MIGRATED to testing (Britney)
[2015-07-08] Accepted ruby-rails-html-sanitizer 1.0.2-1 (source all) into unstable, unstable (Balasankar C) (signed by: Praveen Arimbrathodiyil)

bugs [bug history graph]

all: 0

links

homepage
lintian (0, 2)
buildd: logs, clang, reproducibility
popcon
browse source code
edit tags
security tracker
screenshots
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 1.3.0-1

Debian Package Tracker — Copyright 2013-2018 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing