Skip to content

Commit

Permalink
Version bump
Browse files Browse the repository at this point in the history
  • Loading branch information
@excid3
excid3 committed Apr 19, 2023
1 parent 5d6283a commit c067771
Show file tree
Hide file tree
Showing 7 changed files with 34 additions and 32 deletions.
2 changes: 2 additions & 0 deletions CHANGELOG.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,8 @@

### Unreleased

### 6.3.2

* [SECURITY] Fix XSS vulnerability in back parameter on Stripe payment page
Previously, an attacker could inject Javascript or redirect the user to any URL by changing the `back` parameter in the URL.
The `back` parameter is now sanitized and restricted to relative paths.
Expand Down
12 changes: 6 additions & 6 deletions Gemfile.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ GIT
PATH
remote: .
specs:
pay (6.3.1)
pay (6.3.2)
rails (>= 6.0.0)

GEM
Expand Down Expand Up @@ -156,7 +156,7 @@ GEM
rexml (~> 3.2)
paddle_pay (0.3.0)
faraday (>= 1.10.0, < 3.0)
parallel (1.22.1)
parallel (1.23.0)
parser (3.2.2.0)
ast (~> 2.4.1)
pdf-core (0.9.0)
Expand Down Expand Up @@ -203,14 +203,14 @@ GEM
prawn-table (~> 0.2.1)
regexp_parser (2.8.0)
rexml (3.2.5)
rubocop (1.48.1)
rubocop (1.50.2)
json (~> 2.3)
parallel (~> 1.10)
parser (>= 3.2.0.0)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml (>= 3.2.5, < 4.0)
rubocop-ast (>= 1.26.0, < 2.0)
rubocop-ast (>= 1.28.0, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 2.4.0, < 3.0)
rubocop-ast (1.28.0)
Expand All @@ -231,9 +231,9 @@ GEM
mini_portile2 (~> 2.8.0)
sqlite3 (1.6.2-x86_64-darwin)
sqlite3 (1.6.2-x86_64-linux)
standard (1.26.0)
standard (1.27.0)
language_server-protocol (~> 3.17.0.2)
rubocop (~> 1.48.1)
rubocop (~> 1.50.2)
rubocop-performance (~> 1.16.0)
stimulus-rails (1.2.1)
railties (>= 6.0.0)
Expand Down
12 changes: 6 additions & 6 deletions gemfiles/rails_6.gemfile.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ GIT
PATH
remote: ..
specs:
pay (6.3.1)
pay (6.3.2)
rails (>= 6.0.0)

GEM
Expand Down Expand Up @@ -144,7 +144,7 @@ GEM
rexml (~> 3.2)
paddle_pay (0.3.0)
faraday (>= 1.10.0, < 3.0)
parallel (1.22.1)
parallel (1.23.0)
parser (3.2.2.0)
ast (~> 2.4.1)
pdf-core (0.9.0)
Expand Down Expand Up @@ -191,14 +191,14 @@ GEM
prawn-table (~> 0.2.1)
regexp_parser (2.8.0)
rexml (3.2.5)
rubocop (1.48.1)
rubocop (1.50.2)
json (~> 2.3)
parallel (~> 1.10)
parser (>= 3.2.0.0)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml (>= 3.2.5, < 4.0)
rubocop-ast (>= 1.26.0, < 2.0)
rubocop-ast (>= 1.28.0, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 2.4.0, < 3.0)
rubocop-ast (1.28.0)
Expand All @@ -218,9 +218,9 @@ GEM
sqlite3 (1.6.2-arm64-darwin)
sqlite3 (1.6.2-x86_64-darwin)
sqlite3 (1.6.2-x86_64-linux)
standard (1.26.0)
standard (1.27.0)
language_server-protocol (~> 3.17.0.2)
rubocop (~> 1.48.1)
rubocop (~> 1.50.2)
rubocop-performance (~> 1.16.0)
stimulus-rails (1.2.1)
railties (>= 6.0.0)
Expand Down
12 changes: 6 additions & 6 deletions gemfiles/rails_6_1.gemfile.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ GIT
PATH
remote: ..
specs:
pay (6.3.1)
pay (6.3.2)
rails (>= 6.0.0)

GEM
Expand Down Expand Up @@ -148,7 +148,7 @@ GEM
rexml (~> 3.2)
paddle_pay (0.3.0)
faraday (>= 1.10.0, < 3.0)
parallel (1.22.1)
parallel (1.23.0)
parser (3.2.2.0)
ast (~> 2.4.1)
pdf-core (0.9.0)
Expand Down Expand Up @@ -195,14 +195,14 @@ GEM
prawn-table (~> 0.2.1)
regexp_parser (2.8.0)
rexml (3.2.5)
rubocop (1.48.1)
rubocop (1.50.2)
json (~> 2.3)
parallel (~> 1.10)
parser (>= 3.2.0.0)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml (>= 3.2.5, < 4.0)
rubocop-ast (>= 1.26.0, < 2.0)
rubocop-ast (>= 1.28.0, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 2.4.0, < 3.0)
rubocop-ast (1.28.0)
Expand All @@ -222,9 +222,9 @@ GEM
sqlite3 (1.6.2-arm64-darwin)
sqlite3 (1.6.2-x86_64-darwin)
sqlite3 (1.6.2-x86_64-linux)
standard (1.26.0)
standard (1.27.0)
language_server-protocol (~> 3.17.0.2)
rubocop (~> 1.48.1)
rubocop (~> 1.50.2)
rubocop-performance (~> 1.16.0)
stimulus-rails (1.2.1)
railties (>= 6.0.0)
Expand Down
12 changes: 6 additions & 6 deletions gemfiles/rails_7.gemfile.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ GIT
PATH
remote: ..
specs:
pay (6.3.1)
pay (6.3.2)
rails (>= 6.0.0)

GEM
Expand Down Expand Up @@ -154,7 +154,7 @@ GEM
rexml (~> 3.2)
paddle_pay (0.3.0)
faraday (>= 1.10.0, < 3.0)
parallel (1.22.1)
parallel (1.23.0)
parser (3.2.2.0)
ast (~> 2.4.1)
pdf-core (0.9.0)
Expand Down Expand Up @@ -201,14 +201,14 @@ GEM
prawn-table (~> 0.2.1)
regexp_parser (2.8.0)
rexml (3.2.5)
rubocop (1.48.1)
rubocop (1.50.2)
json (~> 2.3)
parallel (~> 1.10)
parser (>= 3.2.0.0)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml (>= 3.2.5, < 4.0)
rubocop-ast (>= 1.26.0, < 2.0)
rubocop-ast (>= 1.28.0, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 2.4.0, < 3.0)
rubocop-ast (1.28.0)
Expand All @@ -228,9 +228,9 @@ GEM
sqlite3 (1.6.2-arm64-darwin)
sqlite3 (1.6.2-x86_64-darwin)
sqlite3 (1.6.2-x86_64-linux)
standard (1.26.0)
standard (1.27.0)
language_server-protocol (~> 3.17.0.2)
rubocop (~> 1.48.1)
rubocop (~> 1.50.2)
rubocop-performance (~> 1.16.0)
stimulus-rails (1.2.1)
railties (>= 6.0.0)
Expand Down
14 changes: 7 additions & 7 deletions gemfiles/rails_main.gemfile.lock
View file
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ GIT

GIT
remote: https://github.com/rails/rails.git
revision: 732a4748b361bfdadb042fc62b4c608b1a6eef47
revision: 795d52473740866d0f7194ea5cdc5247e51016eb
branch: main
specs:
actioncable (7.1.0.alpha)
Expand Down Expand Up @@ -107,7 +107,7 @@ GIT
PATH
remote: ..
specs:
pay (6.3.1)
pay (6.3.2)
rails (>= 6.0.0)

GEM
Expand Down Expand Up @@ -189,7 +189,7 @@ GEM
rexml (~> 3.2)
paddle_pay (0.3.0)
faraday (>= 1.10.0, < 3.0)
parallel (1.22.1)
parallel (1.23.0)
parser (3.2.2.0)
ast (~> 2.4.1)
pdf-core (0.9.0)
Expand Down Expand Up @@ -222,14 +222,14 @@ GEM
reline (0.3.3)
io-console (~> 0.5)
rexml (3.2.5)
rubocop (1.48.1)
rubocop (1.50.2)
json (~> 2.3)
parallel (~> 1.10)
parser (>= 3.2.0.0)
rainbow (>= 2.2.2, < 4.0)
regexp_parser (>= 1.8, < 3.0)
rexml (>= 3.2.5, < 4.0)
rubocop-ast (>= 1.26.0, < 2.0)
rubocop-ast (>= 1.28.0, < 2.0)
ruby-progressbar (~> 1.7)
unicode-display_width (>= 2.4.0, < 3.0)
rubocop-ast (1.28.0)
Expand All @@ -249,9 +249,9 @@ GEM
sqlite3 (1.6.2-arm64-darwin)
sqlite3 (1.6.2-x86_64-darwin)
sqlite3 (1.6.2-x86_64-linux)
standard (1.26.0)
standard (1.27.0)
language_server-protocol (~> 3.17.0.2)
rubocop (~> 1.48.1)
rubocop (~> 1.50.2)
rubocop-performance (~> 1.16.0)
stimulus-rails (1.2.1)
railties (>= 6.0.0)
Expand Down
2 changes: 1 addition & 1 deletion lib/pay/version.rb
View file
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
module Pay
VERSION = "6.3.1"
VERSION = "6.3.2"
end

0 comments on commit c067771

Please sign in to comment.