Past issues

Dec 16 2017

This Week in Rails: New security headers and many improvements

Hello everyone! This is Kir and Greg bringing you the latest news from the Rails world.
Featured
57 people contributed to Rails the past 2 weeks! If you'd like to join them, why not check out the list of open issues?
New
X-Download-Options and X-Permitted-Cross-Domain-Policies are now in the default header list.
Fixed
Previously, when the schema cache was present and the database was not created yet, rails db:create would get a connection failure.
This commit fixes an issue when you use `render stream: true` and your current locale is not forwarded to the renderer.
This PR makes sure the column names are quoted to avoid SQL syntax errors when there is a from clause used, and there are ignored columns set.
Improved
Active Storage will now destroy variants together with main blob when it's deleted.
With this PR, Rails won't override your custom capybara server configuration, so for example you can use Unicorn instead of Puma .
From now on when you call `rails s` or `rails console` there is an instant feedback in the console to show Rails is booting.
By using CONSTRAINT_SCHEMA key for information_schema.referential_constraints there are performance improvements for Active Record.
This PR enables to set the hash function used by Rails from MD5 to FIPS supported ones by changing the `active_support.use_fips_approved_hash_function` configuration.
This change allows you to enable the logging of what line of application code is triggering SQL queries.
Wrapping Up
That's it for this week, as always, we couldn't cover all of the changes, but feel free to check the commits. If you'd like to join them, check out the list of open issues. Until next week!
This Week in Rails · 30 N Racine #200 · Chicago IL 60607 · USA
Unsubscribe | View in browser

Previous Issues

Load More