Hello community, here is the log from the commit of package rubygem-web-console for openSUSE:Factory checked in at 2020-11-11 20:47:59 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rubygem-web-console (Old) and /work/SRC/openSUSE:Factory/.rubygem-web-console.new.26437 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rubygem-web-console" Wed Nov 11 20:47:59 2020 rev:22 rq:847766 version:4.1.0 Changes: -------- --- /work/SRC/openSUSE:Factory/rubygem-web-console/rubygem-web-console.changes 2020-07-14 08:01:59.958316063 +0200 +++ /work/SRC/openSUSE:Factory/.rubygem-web-console.new.26437/rubygem-web-console.changes 2020-11-11 20:48:06.295743491 +0100 @@ -1,0 +2,10 @@ +Wed Nov 11 08:56:37 UTC 2020 - Manuel Schnitzer <mschnit...@suse.com> + +- updated to version 4.1.0 + + * [#304](https://github.com/rails/web-console/pull/304) Add support for Rails 6.1 ([@stephannv]) + * [#298](https://github.com/rails/web-console/pull/298) Prevent deprecation warnings by removing template formats ([@mikelkew]) + * [#297](https://github.com/rails/web-console/pull/297) Use MutationObserver instead of Mutation Events ([@mikelkew]) + * [#296](https://github.com/rails/web-console/pull/296) Add CSP nonce to injected scripts and styles ([@mikelkew]) + +------------------------------------------------------------------- Old: ---- web-console-4.0.4.gem New: ---- web-console-4.1.0.gem ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rubygem-web-console.spec ++++++ --- /var/tmp/diff_new_pack.GDtCYv/_old 2020-11-11 20:48:07.127744272 +0100 +++ /var/tmp/diff_new_pack.GDtCYv/_new 2020-11-11 20:48:07.131744276 +0100 @@ -24,7 +24,7 @@ # Name: rubygem-web-console -Version: 4.0.4 +Version: 4.1.0 Release: 0 %define mod_name web-console %define mod_full_name %{mod_name}-%{version} ++++++ web-console-4.0.4.gem -> web-console-4.1.0.gem ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/CHANGELOG.markdown new/CHANGELOG.markdown --- old/CHANGELOG.markdown 2020-07-12 18:52:16.000000000 +0200 +++ new/CHANGELOG.markdown 2020-11-05 12:59:33.000000000 +0100 @@ -2,6 +2,13 @@ ## master (unreleased) +## 4.1.0 + +* [#304](https://github.com/rails/web-console/pull/304) Add support for Rails 6.1 ([@stephannv]) +* [#298](https://github.com/rails/web-console/pull/298) Prevent deprecation warnings by removing template formats ([@mikelkew]) +* [#297](https://github.com/rails/web-console/pull/297) Use MutationObserver instead of Mutation Events ([@mikelkew]) +* [#296](https://github.com/rails/web-console/pull/296) Add CSP nonce to injected scripts and styles ([@mikelkew]) + ## 4.0.4 * [fb483743](https://github.com/rails/web-console/commit/fb483743a6a2a4168cdc0b2e03f48fc393991b73) Fix a crash on webrick with Rack 2.2.3 ([@gsamokovarov]) @@ -145,6 +152,8 @@ * [#84](https://github.com/rails/web-console/pull/84) Allow Rails 5 as dependency in gemspec ([@jonatack]) * [#69](https://github.com/rails/web-console/pull/69) Introduce middleware for request dispatch and console rendering ([@gsamokovarov]) +[@stephannv]: https://github.com/stephannv +[@mikelkew]: https://github.com/mikelkew [@jonatack]: https://github.com/jonatack [@ryandao]: https://github.com/ryandao [@jeffnv]: https://github.com/jeffnv diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/README.markdown new/README.markdown --- old/README.markdown 2020-07-12 18:52:16.000000000 +0200 +++ new/README.markdown 2020-11-05 12:59:33.000000000 +0100 @@ -1,7 +1,8 @@ <p align=right> - Documentation for: + <strong>Current version: 4.1.0</strong> Documentation for: <a href=https://github.com/rails/web-console/tree/v1.0.4>v1.0.4</a> <a href=https://github.com/rails/web-console/tree/v2.2.1>v2.2.1</a> + <a href=https://github.com/rails/web-console/tree/v3.7.0>v3.7.0</a> </p> # Web Console [](https://travis-ci.org/rails/web-console) Binary files old/checksums.yaml.gz and new/checksums.yaml.gz differ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/web_console/template.rb new/lib/web_console/template.rb --- old/lib/web_console/template.rb 2020-07-12 18:52:16.000000000 +0200 +++ new/lib/web_console/template.rb 2020-11-05 12:59:33.000000000 +0100 @@ -17,7 +17,7 @@ # Render a template (inferred from +template_paths+) as a plain string. def render(template) - view = View.new(ActionView::LookupContext.new(template_paths), instance_values) + view = View.with_empty_template_cache.with_view_paths(template_paths, instance_values) view.render(template: template, layout: false) end end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/web_console/templates/console.js.erb new/lib/web_console/templates/console.js.erb --- old/lib/web_console/templates/console.js.erb 2020-07-12 18:52:16.000000000 +0200 +++ new/lib/web_console/templates/console.js.erb 2020-11-05 12:59:33.000000000 +0100 @@ -251,12 +251,14 @@ } // HTML strings for dynamic elements. -var consoleInnerHtml = <%= render_inlined_string '_inner_console_markup.html' %>; -var promptBoxHtml = <%= render_inlined_string '_prompt_box_markup.html' %>; +var consoleInnerHtml = <%= render_inlined_string '_inner_console_markup' %>; +var promptBoxHtml = <%= render_inlined_string '_prompt_box_markup' %>; // CSS -var consoleStyleCss = <%= render_inlined_string 'style.css' %>; +var consoleStyleCss = <%= render_inlined_string 'style' %>; // Insert a style element with the unique ID var styleElementId = 'sr02459pvbvrmhco'; +// Nonce to use for CSP +var styleElementNonce = '<%= @nonce %>'; // REPLConsole Constructor function REPLConsole(config) { @@ -416,6 +418,14 @@ } } + var observer = new MutationObserver(function(mutationsList) { + for (let mutation of mutationsList) { + if (mutation.type === 'childList' && mutation.addedNodes.length > 0) { + shiftConsoleActions(); + } + } + }); + // Initialize this.container = container; this.outer = consoleOuter; @@ -427,7 +437,7 @@ findChild(container, 'resizer').addEventListener('mousedown', resizeContainer); findChild(consoleActions, 'close-button').addEventListener('click', closeContainer); - consoleOuter.addEventListener('DOMNodeInserted', shiftConsoleActions); + observer.observe(consoleOuter, { childList: true, subtree: true }); REPLConsole.currentSession = this; }; @@ -441,6 +451,9 @@ style.type = 'text/css'; style.innerHTML = consoleStyleCss; style.id = styleElementId; + if (styleElementNonce.length > 0) { + style.nonce = styleElementNonce; + } document.getElementsByTagName('head')[0].appendChild(style); }; diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/web_console/templates/layouts/javascript.erb new/lib/web_console/templates/layouts/javascript.erb --- old/lib/web_console/templates/layouts/javascript.erb 2020-07-12 18:52:16.000000000 +0200 +++ new/lib/web_console/templates/layouts/javascript.erb 2020-11-05 12:59:33.000000000 +0100 @@ -1,4 +1,4 @@ -<script type="text/javascript" data-template="<%= @template %>"> +<script type="text/javascript" data-template="<%= @template %>" nonce="<%= @nonce %>"> (function() { <%= yield %> }).call(this); diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/web_console/templates/style.css.erb new/lib/web_console/templates/style.css.erb --- old/lib/web_console/templates/style.css.erb 2020-07-12 18:52:16.000000000 +0200 +++ new/lib/web_console/templates/style.css.erb 2020-11-05 12:59:33.000000000 +0100 @@ -49,7 +49,7 @@ font-size: 11px; width: 100%; height: 100%; - overflow: none; + overflow: unset; background: #333; } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/web_console/version.rb new/lib/web_console/version.rb --- old/lib/web_console/version.rb 2020-07-12 18:52:16.000000000 +0200 +++ new/lib/web_console/version.rb 2020-11-05 12:59:33.000000000 +0100 @@ -1,5 +1,5 @@ # frozen_string_literal: true module WebConsole - VERSION = "4.0.4" + VERSION = "4.1.0" end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/lib/web_console/view.rb new/lib/web_console/view.rb --- old/lib/web_console/view.rb 2020-07-12 18:52:16.000000000 +0200 +++ new/lib/web_console/view.rb 2020-11-05 12:59:33.000000000 +0100 @@ -22,6 +22,7 @@ # leaking globals, unless you explicitly want to. def render_javascript(template) assign(template: template) + assign(nonce: @env["action_dispatch.content_security_policy_nonce"]) render(template: template, layout: "layouts/javascript") end diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/metadata new/metadata --- old/metadata 2020-07-12 18:52:16.000000000 +0200 +++ new/metadata 2020-11-05 12:59:33.000000000 +0100 @@ -1,7 +1,7 @@ --- !ruby/object:Gem::Specification name: web-console version: !ruby/object:Gem::Version - version: 4.0.4 + version: 4.1.0 platform: ruby authors: - Charlie Somerville @@ -11,7 +11,7 @@ autorequire: bindir: bin cert_chain: [] -date: 2020-07-12 00:00:00.000000000 Z +date: 2020-11-05 00:00:00.000000000 Z dependencies: - !ruby/object:Gem::Dependency name: railties _______________________________________________ openSUSE Commits mailing list -- commit@lists.opensuse.org To unsubscribe, email commit-le...@lists.opensuse.org List Netiquette: https://en.opensuse.org/openSUSE:Mailing_list_netiquette List Archives: https://lists.opensuse.org/archives/list/commit@lists.opensuse.org