3220
98%

Ran 26 May 2018 01:09AM UTC

Jobs 18

Files 273

Run time 10min

Badge

Embed ▾

pending completion

Build # 3220

Build Type

push

travis-ci

Committed by

dblock

Commit Message

When returning an HTML error, make sure it's safe (#1763)

* When calling into an API specifying a crafted format that is HTML,
the returned error renders the HTML back to the user, causing a potential XSS
issue.  For example:

http://example.com/api/endpoint?format=%3Cscript%3Ealert(document.cookie)%3C/script%3E

Renders as html:

The requested format '<script>alert(document.cookie)</script>' is not supported.

When an error generates html back to the user, make sure it's properly escaped.

Fixes issue #1762

* Add changelog entry

* Use a method that also works in rails3

* Add spec formatting for older rails/activesupport version

Run Details

5512 of 5570 relevant lines covered (98.96%)

1649.29 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
2	3220.2 (2.4.2, Gemfile)	26 May 2018 01:09AM UTC	147	98.9	Travis Job 3220.2
3	3220.3 (2.4.2, gemfiles/rack_edge.gemfile)	26 May 2018 01:09AM UTC	147	98.9	Travis Job 3220.3
4	3220.4 (2.4.2, gemfiles/rack_1.5.2.gemfile)	26 May 2018 01:09AM UTC	147	98.9	Travis Job 3220.4
5	3220.5 (2.4.2, gemfiles/rails_edge.gemfile)	26 May 2018 01:10AM UTC	147	98.9	Travis Job 3220.5
6	3220.6 (2.4.2, gemfiles/rails_5.gemfile)	26 May 2018 01:10AM UTC	147	98.9	Travis Job 3220.6
7	3220.7 (2.4.2, gemfiles/multi_json.gemfile)	26 May 2018 01:10AM UTC	1	60.0	Travis Job 3220.7
8	3220.8 (2.4.2, gemfiles/multi_xml.gemfile)	26 May 2018 01:10AM UTC	1	60.0	Travis Job 3220.8
9	3220.9 (2.3.5, Gemfile)	26 May 2018 01:11AM UTC	147	98.9	Travis Job 3220.9
10	3220.10 (2.3.5, gemfiles/rack_edge.gemfile)	26 May 2018 01:11AM UTC	147	98.9	Travis Job 3220.10
11	3220.11 (2.3.5, gemfiles/rack_1.5.2.gemfile)	26 May 2018 01:12AM UTC	147	98.9	Travis Job 3220.11
12	3220.12 (2.3.5, gemfiles/rails_5.gemfile)	26 May 2018 01:12AM UTC	147	98.9	Travis Job 3220.12
13	3220.13 (2.2.8, Gemfile)	26 May 2018 01:11AM UTC	147	98.9	Travis Job 3220.13
14	3220.14 (2.2.8, gemfiles/rack_1.5.2.gemfile)	26 May 2018 01:13AM UTC	147	98.9	Travis Job 3220.14
15	3220.15 (2.2.8, gemfiles/rails_5.gemfile)	26 May 2018 01:13AM UTC	147	98.9	Travis Job 3220.15
16	3220.16 (2.2.8, gemfiles/rails_4.gemfile)	26 May 2018 01:14AM UTC	147	98.9	Travis Job 3220.16
17	3220.17 (2.2.8, gemfiles/rails_3.gemfile)	26 May 2018 01:14AM UTC	147	98.9	Travis Job 3220.17
18	3220.18 (ruby-head)	26 May 2018 01:14AM UTC	147	98.9	Travis Job 3220.18
19	3220.19 (jruby-head)	26 May 2018 01:18AM UTC	147	0.0	Travis Job 3220.19

ruby-grape / grape / 3220
98%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 3220

ruby-grape / grape / 3220 98%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 3220

ruby-grape / grape / 3220
98%

README BADGES
x