igorkasyanchuk / rails_db

Rails Database Viewer and SQL Query Runner
https://www.railsjazz.com/
MIT License
1.46k stars 111 forks source link

Update simple_form to version > 5 #105

Closed AdamFreemer closed 4 years ago

AdamFreemer commented 4 years ago

Was using rails_db until we were forced to remove because of the simple_form vulnerability in version 4. https://nvd.nist.gov/vuln/detail/CVE-2019-16676

igorkasyanchuk commented 4 years ago

Will fix soon, right after coming from vacation)

igorkasyanchuk commented 4 years ago

Try to use this branch and see if it works for you: https://github.com/igorkasyanchuk/rails_db/tree/simple_form_upgrade

If works - I'll release it

buncis commented 4 years ago

gemfile version 2.1.1 already use simple_form 5 🎉