Release notes
*Sourced from [will_paginate's releases](https://github.com/mislav/will_paginate/releases).*
> ## will_paginate 3.0.5: bugfix & security release
> - fix [CVE-2013-6459](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6459&cid=1): XSS in generated pagination links
> - always call `html_safe` if available on will_paginate result
> - exclude `reorder` for count queries
Commits
- [`2c5f1ed`](https://github.com/mislav/will_paginate/commit/2c5f1ed4e5e4c2a68f21c3588a375c8d60ab94a0) v3.0.5
- [`c62c6f6`](https://github.com/mislav/will_paginate/commit/c62c6f68a5e5e00a13ded984a4a3a79b41f9ce4b) prevent tampering with host, port, protocol
- [`a213b7e`](https://github.com/mislav/will_paginate/commit/a213b7e387e42265a09530a10559ec24a667286d) add test that page query param will be overriden
- [`3f221d4`](https://github.com/mislav/will_paginate/commit/3f221d471419c0bf66079ac40cad7abfbc7e4ffe) fix `assert` method in case of failure
- [`83dd3f2`](https://github.com/mislav/will_paginate/commit/83dd3f21a90adf803d03230bb70d683e9273aa16) cleaner backtrace in specs
- [`c78608a`](https://github.com/mislav/will_paginate/commit/c78608abcf2e7513779b4ae22c7eac116ac61e62) always call `html_safe` on will_paginate result
- [`6c55482`](https://github.com/mislav/will_paginate/commit/6c5548260a6fb163c7ec6bef80ee392fa2abe389) add license information to gemspec
- [`890e4de`](https://github.com/mislav/will_paginate/commit/890e4dee336d7f6960aec508c1c66cd5d1347923) don't build Rails 4 against Ruby 1.8, 1.9.2
- [`8a0ead9`](https://github.com/mislav/will_paginate/commit/8a0ead99fa0ee5a044adacb9b89aaedf72f2567c) Rails 4 compat: port named scopes to new syntax
- [`56c7ad5`](https://github.com/mislav/will_paginate/commit/56c7ad5540c27aa746aa06d603bbc49735aae4a1) Rails 4 compat: AR::Base.silence requires an argument
- Additional commits viewable in [compare view](https://github.com/mislav/will_paginate/compare/v3.0.3...v3.0.5)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/lml/quadbase/network/alerts).
Bumps will_paginate from 3.0.3 to 3.0.5.
Release notes
*Sourced from [will_paginate's releases](https://github.com/mislav/will_paginate/releases).* > ## will_paginate 3.0.5: bugfix & security release > - fix [CVE-2013-6459](http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6459&cid=1): XSS in generated pagination links > - always call `html_safe` if available on will_paginate result > - exclude `reorder` for count queriesCommits
- [`2c5f1ed`](https://github.com/mislav/will_paginate/commit/2c5f1ed4e5e4c2a68f21c3588a375c8d60ab94a0) v3.0.5 - [`c62c6f6`](https://github.com/mislav/will_paginate/commit/c62c6f68a5e5e00a13ded984a4a3a79b41f9ce4b) prevent tampering with host, port, protocol - [`a213b7e`](https://github.com/mislav/will_paginate/commit/a213b7e387e42265a09530a10559ec24a667286d) add test that page query param will be overriden - [`3f221d4`](https://github.com/mislav/will_paginate/commit/3f221d471419c0bf66079ac40cad7abfbc7e4ffe) fix `assert` method in case of failure - [`83dd3f2`](https://github.com/mislav/will_paginate/commit/83dd3f21a90adf803d03230bb70d683e9273aa16) cleaner backtrace in specs - [`c78608a`](https://github.com/mislav/will_paginate/commit/c78608abcf2e7513779b4ae22c7eac116ac61e62) always call `html_safe` on will_paginate result - [`6c55482`](https://github.com/mislav/will_paginate/commit/6c5548260a6fb163c7ec6bef80ee392fa2abe389) add license information to gemspec - [`890e4de`](https://github.com/mislav/will_paginate/commit/890e4dee336d7f6960aec508c1c66cd5d1347923) don't build Rails 4 against Ruby 1.8, 1.9.2 - [`8a0ead9`](https://github.com/mislav/will_paginate/commit/8a0ead99fa0ee5a044adacb9b89aaedf72f2567c) Rails 4 compat: port named scopes to new syntax - [`56c7ad5`](https://github.com/mislav/will_paginate/commit/56c7ad5540c27aa746aa06d603bbc49735aae4a1) Rails 4 compat: AR::Base.silence requires an argument - Additional commits viewable in [compare view](https://github.com/mislav/will_paginate/compare/v3.0.3...v3.0.5)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/lml/quadbase/network/alerts).