Skip to content

Commit c067771

Browse files
excid3excid3
committed
Version bump
1 parent 5d6283a commit c067771

File tree

7 files changed

+34
-32
lines changed

7 files changed

+34
-32
lines changed

‎CHANGELOG.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22

33
### Unreleased
44

5+
### 6.3.2
6+
57
* [SECURITY] Fix XSS vulnerability in back parameter on Stripe payment page
68
Previously, an attacker could inject Javascript or redirect the user to any URL by changing the `back` parameter in the URL.
79
The `back` parameter is now sanitized and restricted to relative paths.

‎Gemfile.lock

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ GIT
1010
PATH
1111
remote: .
1212
specs:
13-
pay (6.3.1)
13+
pay (6.3.2)
1414
rails (>= 6.0.0)
1515

1616
GEM
@@ -156,7 +156,7 @@ GEM
156156
rexml (~> 3.2)
157157
paddle_pay (0.3.0)
158158
faraday (>= 1.10.0, < 3.0)
159-
parallel (1.22.1)
159+
parallel (1.23.0)
160160
parser (3.2.2.0)
161161
ast (~> 2.4.1)
162162
pdf-core (0.9.0)
@@ -203,14 +203,14 @@ GEM
203203
prawn-table (~> 0.2.1)
204204
regexp_parser (2.8.0)
205205
rexml (3.2.5)
206-
rubocop (1.48.1)
206+
rubocop (1.50.2)
207207
json (~> 2.3)
208208
parallel (~> 1.10)
209209
parser (>= 3.2.0.0)
210210
rainbow (>= 2.2.2, < 4.0)
211211
regexp_parser (>= 1.8, < 3.0)
212212
rexml (>= 3.2.5, < 4.0)
213-
rubocop-ast (>= 1.26.0, < 2.0)
213+
rubocop-ast (>= 1.28.0, < 2.0)
214214
ruby-progressbar (~> 1.7)
215215
unicode-display_width (>= 2.4.0, < 3.0)
216216
rubocop-ast (1.28.0)
@@ -231,9 +231,9 @@ GEM
231231
mini_portile2 (~> 2.8.0)
232232
sqlite3 (1.6.2-x86_64-darwin)
233233
sqlite3 (1.6.2-x86_64-linux)
234-
standard (1.26.0)
234+
standard (1.27.0)
235235
language_server-protocol (~> 3.17.0.2)
236-
rubocop (~> 1.48.1)
236+
rubocop (~> 1.50.2)
237237
rubocop-performance (~> 1.16.0)
238238
stimulus-rails (1.2.1)
239239
railties (>= 6.0.0)

‎gemfiles/rails_6.gemfile.lock

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ GIT
1010
PATH
1111
remote: ..
1212
specs:
13-
pay (6.3.1)
13+
pay (6.3.2)
1414
rails (>= 6.0.0)
1515

1616
GEM
@@ -144,7 +144,7 @@ GEM
144144
rexml (~> 3.2)
145145
paddle_pay (0.3.0)
146146
faraday (>= 1.10.0, < 3.0)
147-
parallel (1.22.1)
147+
parallel (1.23.0)
148148
parser (3.2.2.0)
149149
ast (~> 2.4.1)
150150
pdf-core (0.9.0)
@@ -191,14 +191,14 @@ GEM
191191
prawn-table (~> 0.2.1)
192192
regexp_parser (2.8.0)
193193
rexml (3.2.5)
194-
rubocop (1.48.1)
194+
rubocop (1.50.2)
195195
json (~> 2.3)
196196
parallel (~> 1.10)
197197
parser (>= 3.2.0.0)
198198
rainbow (>= 2.2.2, < 4.0)
199199
regexp_parser (>= 1.8, < 3.0)
200200
rexml (>= 3.2.5, < 4.0)
201-
rubocop-ast (>= 1.26.0, < 2.0)
201+
rubocop-ast (>= 1.28.0, < 2.0)
202202
ruby-progressbar (~> 1.7)
203203
unicode-display_width (>= 2.4.0, < 3.0)
204204
rubocop-ast (1.28.0)
@@ -218,9 +218,9 @@ GEM
218218
sqlite3 (1.6.2-arm64-darwin)
219219
sqlite3 (1.6.2-x86_64-darwin)
220220
sqlite3 (1.6.2-x86_64-linux)
221-
standard (1.26.0)
221+
standard (1.27.0)
222222
language_server-protocol (~> 3.17.0.2)
223-
rubocop (~> 1.48.1)
223+
rubocop (~> 1.50.2)
224224
rubocop-performance (~> 1.16.0)
225225
stimulus-rails (1.2.1)
226226
railties (>= 6.0.0)

‎gemfiles/rails_6_1.gemfile.lock

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ GIT
1010
PATH
1111
remote: ..
1212
specs:
13-
pay (6.3.1)
13+
pay (6.3.2)
1414
rails (>= 6.0.0)
1515

1616
GEM
@@ -148,7 +148,7 @@ GEM
148148
rexml (~> 3.2)
149149
paddle_pay (0.3.0)
150150
faraday (>= 1.10.0, < 3.0)
151-
parallel (1.22.1)
151+
parallel (1.23.0)
152152
parser (3.2.2.0)
153153
ast (~> 2.4.1)
154154
pdf-core (0.9.0)
@@ -195,14 +195,14 @@ GEM
195195
prawn-table (~> 0.2.1)
196196
regexp_parser (2.8.0)
197197
rexml (3.2.5)
198-
rubocop (1.48.1)
198+
rubocop (1.50.2)
199199
json (~> 2.3)
200200
parallel (~> 1.10)
201201
parser (>= 3.2.0.0)
202202
rainbow (>= 2.2.2, < 4.0)
203203
regexp_parser (>= 1.8, < 3.0)
204204
rexml (>= 3.2.5, < 4.0)
205-
rubocop-ast (>= 1.26.0, < 2.0)
205+
rubocop-ast (>= 1.28.0, < 2.0)
206206
ruby-progressbar (~> 1.7)
207207
unicode-display_width (>= 2.4.0, < 3.0)
208208
rubocop-ast (1.28.0)
@@ -222,9 +222,9 @@ GEM
222222
sqlite3 (1.6.2-arm64-darwin)
223223
sqlite3 (1.6.2-x86_64-darwin)
224224
sqlite3 (1.6.2-x86_64-linux)
225-
standard (1.26.0)
225+
standard (1.27.0)
226226
language_server-protocol (~> 3.17.0.2)
227-
rubocop (~> 1.48.1)
227+
rubocop (~> 1.50.2)
228228
rubocop-performance (~> 1.16.0)
229229
stimulus-rails (1.2.1)
230230
railties (>= 6.0.0)

‎gemfiles/rails_7.gemfile.lock

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ GIT
1010
PATH
1111
remote: ..
1212
specs:
13-
pay (6.3.1)
13+
pay (6.3.2)
1414
rails (>= 6.0.0)
1515

1616
GEM
@@ -154,7 +154,7 @@ GEM
154154
rexml (~> 3.2)
155155
paddle_pay (0.3.0)
156156
faraday (>= 1.10.0, < 3.0)
157-
parallel (1.22.1)
157+
parallel (1.23.0)
158158
parser (3.2.2.0)
159159
ast (~> 2.4.1)
160160
pdf-core (0.9.0)
@@ -201,14 +201,14 @@ GEM
201201
prawn-table (~> 0.2.1)
202202
regexp_parser (2.8.0)
203203
rexml (3.2.5)
204-
rubocop (1.48.1)
204+
rubocop (1.50.2)
205205
json (~> 2.3)
206206
parallel (~> 1.10)
207207
parser (>= 3.2.0.0)
208208
rainbow (>= 2.2.2, < 4.0)
209209
regexp_parser (>= 1.8, < 3.0)
210210
rexml (>= 3.2.5, < 4.0)
211-
rubocop-ast (>= 1.26.0, < 2.0)
211+
rubocop-ast (>= 1.28.0, < 2.0)
212212
ruby-progressbar (~> 1.7)
213213
unicode-display_width (>= 2.4.0, < 3.0)
214214
rubocop-ast (1.28.0)
@@ -228,9 +228,9 @@ GEM
228228
sqlite3 (1.6.2-arm64-darwin)
229229
sqlite3 (1.6.2-x86_64-darwin)
230230
sqlite3 (1.6.2-x86_64-linux)
231-
standard (1.26.0)
231+
standard (1.27.0)
232232
language_server-protocol (~> 3.17.0.2)
233-
rubocop (~> 1.48.1)
233+
rubocop (~> 1.50.2)
234234
rubocop-performance (~> 1.16.0)
235235
stimulus-rails (1.2.1)
236236
railties (>= 6.0.0)

‎gemfiles/rails_main.gemfile.lock

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ GIT
99

1010
GIT
1111
remote: https://github.com/rails/rails.git
12-
revision: 732a4748b361bfdadb042fc62b4c608b1a6eef47
12+
revision: 795d52473740866d0f7194ea5cdc5247e51016eb
1313
branch: main
1414
specs:
1515
actioncable (7.1.0.alpha)
@@ -107,7 +107,7 @@ GIT
107107
PATH
108108
remote: ..
109109
specs:
110-
pay (6.3.1)
110+
pay (6.3.2)
111111
rails (>= 6.0.0)
112112

113113
GEM
@@ -189,7 +189,7 @@ GEM
189189
rexml (~> 3.2)
190190
paddle_pay (0.3.0)
191191
faraday (>= 1.10.0, < 3.0)
192-
parallel (1.22.1)
192+
parallel (1.23.0)
193193
parser (3.2.2.0)
194194
ast (~> 2.4.1)
195195
pdf-core (0.9.0)
@@ -222,14 +222,14 @@ GEM
222222
reline (0.3.3)
223223
io-console (~> 0.5)
224224
rexml (3.2.5)
225-
rubocop (1.48.1)
225+
rubocop (1.50.2)
226226
json (~> 2.3)
227227
parallel (~> 1.10)
228228
parser (>= 3.2.0.0)
229229
rainbow (>= 2.2.2, < 4.0)
230230
regexp_parser (>= 1.8, < 3.0)
231231
rexml (>= 3.2.5, < 4.0)
232-
rubocop-ast (>= 1.26.0, < 2.0)
232+
rubocop-ast (>= 1.28.0, < 2.0)
233233
ruby-progressbar (~> 1.7)
234234
unicode-display_width (>= 2.4.0, < 3.0)
235235
rubocop-ast (1.28.0)
@@ -249,9 +249,9 @@ GEM
249249
sqlite3 (1.6.2-arm64-darwin)
250250
sqlite3 (1.6.2-x86_64-darwin)
251251
sqlite3 (1.6.2-x86_64-linux)
252-
standard (1.26.0)
252+
standard (1.27.0)
253253
language_server-protocol (~> 3.17.0.2)
254-
rubocop (~> 1.48.1)
254+
rubocop (~> 1.50.2)
255255
rubocop-performance (~> 1.16.0)
256256
stimulus-rails (1.2.1)
257257
railties (>= 6.0.0)

‎lib/pay/version.rb

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
module Pay
2-
VERSION = "6.3.1"
2+
VERSION = "6.3.2"
33
end

0 commit comments

Comments
 (0)