Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ci skip] Clarity about embed metadata in signed and encrypted cookie #36245

Merged
merged 1 commit into from
May 12, 2019

Conversation

vishaltelangre
Copy link
Contributor

purpose is not a known entity, purpose metadata is.

@rails-bot rails-bot bot added the docs label May 11, 2019
@vishaltelangre vishaltelangre changed the title [ci skip] Improve clarity in the upgrade guide [ci skip] Clarity in the upgrade guide May 11, 2019
@@ -85,7 +85,7 @@ Rails 6.1. You are encouraged to enable `config.force_ssl` to enforce HTTPS
connections throughout your application. If you need to exempt certain endpoints
from redirection, you can use `config.ssl_options` to configure that behavior.

### Purpose in signed or encrypted cookie is now embedded within cookies
### Purpose metadata in signed or encrypted cookie is now embedded within cookies
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The existing sentence is actually correct, though incomplete, the proposed change makes it sound even more wrong.

This should be:

Purpose and expiry metadata is now embedded inside signed and encrypted cookies for increased security.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, that's actually correct.

@vishaltelangre vishaltelangre changed the title [ci skip] Clarity in the upgrade guide [ci skip] Clarity about embed metadata in signed and encrypted cookie May 12, 2019

To improve security, Rails embeds the purpose information in encrypted or signed cookies value.
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This sentence seemed basically repeating the same thing as the new sub-heading.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Lets retain this to maintain the flow of sentences below

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@vipulnsward Retained this sentence with some modifications made to it for consistency.

@vishaltelangre
Copy link
Contributor Author

@vipulnsward Done.

@vipulnsward vipulnsward merged commit 1efe902 into rails:master May 12, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants