Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
50 commits
Select commit Hold shift + click to select a range
bdb4079
Backport fix for CVE-2014-3482
foobear Jul 3, 2014
de543cb
Update to Rails LTS 2.3.18.11
foobear Jul 3, 2014
56debf1
Improve release workflow
foobear Jul 3, 2014
171250f
Remove .gem files from repository
foobear Jul 3, 2014
f178ccf
Release Rails LTS 2.3.18.11
foobear Jul 3, 2014
31a564b
Improve community release process
foobear Jul 14, 2014
a401afd
add additional server
Sep 26, 2014
136a5ca
Fix Arbitrary file existence disclosure in Action Pack (CVE-2014-7818)
kratob Oct 31, 2014
56f72cd
update railslts-version gem
kratob Oct 31, 2014
7bcea14
update licenses
kratob Oct 31, 2014
63daeef
build static gem
kratob Oct 31, 2014
2b013f7
Backport tests for CVE-2014-7829 (2.3 was not affected)
kratob Nov 17, 2014
edfc133
Remove .ruby-version from 2-3 branch (dev boxes only have 1 ruby anyway)
triskweline Nov 28, 2014
1b8b337
Improve output of railslts:release:customer rake task
codener Jan 27, 2015
3355666
Avoid "warning: circular argument reference - table_name"
peter-assi Apr 27, 2015
a2c221d
Avoid "Digest::Digest is deprecated; Use Digest"
peter-assi Apr 27, 2015
8cd4df2
Improve checklist for railslts:release:ensure_ready
triskweline Apr 30, 2015
3af71a1
Test that Rails 2.3. is not affected by CVE-2015-3226 (XSS Vulnerabil…
triskweline Jun 17, 2015
576c043
enforce a depth limit on XML documents
tenderlove Jun 9, 2015
91506da
Add test that XmlMini.parse raises an error when parsing an XML docum…
triskweline Jun 17, 2015
70aad0b
Fix test expectations for: Add test that XmlMini.parse raises an erro…
triskweline Jun 17, 2015
5135893
Depend on railslts-version 2.3.18.13
triskweline Jun 17, 2015
0f6987c
rake railslts:test should not abort when a subproject test fails
triskweline Jun 17, 2015
703e084
Allow to use rack 1.4.x
triskweline Jun 17, 2015
595e0b3
Merge remote-tracking branch 'peterlind/patch-1' into 2-3-lts
triskweline Jun 17, 2015
9b25937
Merge remote-tracking branch 'peterlind/patch-2' into 2-3-lts
triskweline Jun 17, 2015
6c911af
Update LICENSE files
triskweline Jun 17, 2015
d2bcd19
Build static gems
triskweline Jun 17, 2015
9a7e33d
Remove broken symlinks from repository to enable static installation …
triskweline Jun 19, 2015
0942fbd
Fix installation script for deployment without bundler
triskweline Jun 22, 2015
b545e4b
select tag will no longer wrap options in fieldWithError <div>s
kratob Jun 25, 2015
5ae0413
build static gems
kratob Jun 25, 2015
e95b050
Clean up release process; Add an actual railties gem; Support push a …
triskweline Oct 29, 2015
d69979a
When on vagrant, skip tests that always fail on vagrant because NFS s…
triskweline Oct 29, 2015
75fa9a1
Give the new rails gem a LICENSE, too
triskweline Oct 29, 2015
08c1c33
Trim down README.md
triskweline Oct 29, 2015
12baa54
Don't create a LICENSE for railslts-version
triskweline Oct 29, 2015
610b671
Update LICENSE files
triskweline Oct 29, 2015
1daac22
When pushing to the private gem server, don't reveal the password on …
triskweline Oct 29, 2015
d245cd4
In LICENSE files, talk about Rails 2.3 instead of Rails 2.3.18
triskweline Oct 30, 2015
6baa749
Fix typo in activeresource.gemspec
triskweline Oct 30, 2015
1552d81
Allow railslts-version.rb to be required multiple times
triskweline Oct 30, 2015
cdc7e5f
Stop caching mime types globally [CVE-2016-0751]; Also fix a similar …
triskweline Jan 25, 2016
86d45e8
Eliminate instance level writers for class accessors [CVE-2016-0753]
triskweline Jan 26, 2016
e16b68e
Add tests for CVE-2015-7578 - Unaffected
thomase Jan 26, 2016
cdfaa74
Add tests for CVE-2015-7579 - Unaffected
thomase Jan 26, 2016
f8afa86
Add tests for CVE-2015-7580 - Unaffected
thomase Jan 26, 2016
e559a28
Add a test that we cannot create a nested record with _destroy: true …
triskweline Jan 26, 2016
01925d9
Version 2.3.18.15
triskweline Jan 26, 2016
e5fc5f8
Merge branch 'upstream-2-3-lts' into 2-3-18-15
Feb 6, 2016
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .gitignore
Original file line number Diff line number Diff line change
Expand Up @@ -11,3 +11,4 @@ railties/doc/guides/html/images
railties/doc/guides/html/stylesheets
railties/guides/output
.idea
pkg/*.gem
1 change: 0 additions & 1 deletion .ruby-version

This file was deleted.

4 changes: 2 additions & 2 deletions Gemfile
Original file line number Diff line number Diff line change
Expand Up @@ -6,10 +6,10 @@ gem 'mocha', '=0.9.7'
gem 'RedCloth', '=4.2.3'
gem 'sqlite3', '=1.3.7'
gem 'mysql', '=2.8.1'
gem 'rack', '=1.1.0'
gem 'rack', '< 1.5'
gem 'pg', '=0.9.0'
gem 'nokogiri', '1.3.3'
gem 'libxml-ruby', '=1.1.4'

# This is for running tests only. Update via "bundle update rails-version".
gem 'railslts-version'
gem 'railslts-version', '<3'
8 changes: 4 additions & 4 deletions Gemfile.lock
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,8 @@ GEM
mysql (2.8.1)
nokogiri (1.3.3)
pg (0.9.0)
rack (1.1.0)
railslts-version (2.3.18.8)
rack (1.4.6)
railslts-version (2.3.18.12)
rake (0.8.7)
rdoc (2.5.11)
sqlite3 (1.3.7)
Expand All @@ -24,8 +24,8 @@ DEPENDENCIES
mysql (= 2.8.1)
nokogiri (= 1.3.3)
pg (= 0.9.0)
rack (= 1.1.0)
railslts-version
rack (< 1.5)
railslts-version (< 3)
rake (= 0.8.7)
rdoc (= 2.5.11)
sqlite3 (= 1.3.7)
40 changes: 40 additions & 0 deletions LICENSE
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
The code in this project is based on Ruby on Rails 2.3
with additional changes by makandra GmbH.

Additional changes Copyright (c) 2013 makandra GmbH

Permission is hereby granted as a sublicense of the original
MIT license of Ruby on Rails 2.3.18 (found below) to any person
obtaining a copy of this software and associated documentation
files (the "Software"), except the right to publish, distribute,
and/or sell copies of the Software before February 05, 2016.


The original code for Ruby on Rails 2.3 is licensed under the MIT license:

Copyright (c) 2004-2010 David Heinemeier Hansson

Permission is hereby granted, free of charge, to any person obtaining
a copy of this software and associated documentation files (the
"Software"), to deal in the Software without restriction, including
without limitation the rights to use, copy, modify, merge, publish,
distribute, sublicense, and/or sell copies of the Software, and to
permit persons to whom the Software is furnished to do so, subject to
the following conditions:

The above copyright notice and this permission notice shall be
included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE
LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION
WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.


The original code for Ruby on Rails 2.3.18 can be obtained under the
following URL:

https://github.com/rails/rails/tree/2-3-stable
6 changes: 2 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,10 +1,8 @@
Rails LTS 2.3
=============

Rails LTS 2.3 is a maintained release of Rails 2.3.18 that includes additional security fixes. See [https://railslts.com/](https://railslts.com) for more information.

This is the public repository for the "Community Edition". It receives security patches with a 10 day delay.

Rails LTS 2.3 is a maintained release of Rails 2.3 that includes additional security fixes.
See [https://railslts.com/](https://railslts.com) for more information.


Pull Requests
Expand Down
Loading