GitHub PushEvent at 2014-02-19 08:49:54
Repository: rails
Actor: Tho85
Payload: {"shas":[["993dba85cb9b563e877c97f6bb715133da8f6e1d","84c66fc058fe65d1bb08ca33b21bfe0fa5cb8f17@gmail.com","[CVE-2014-0081] Escape format, negative_format and units options of number helpers\n\nPreviously the values of these options were trusted leading to\npotential XSS vulnerabilities.\n\nFixes: CVE-2014-0081","Rafael Mendonça França",true],["14764fdadfc44e6055b727a0919a13fb6fedbe36","84c66fc058fe65d1bb08ca33b21bfe0fa5cb8f17@gmail.com","[CVE-2014-0082] Use the reference for the mime type to get the format\n\nBefore we were calling to_sym in the mime type, even when it is unknown\nwhat can cause denial of service since symbols are not removed by the\ngarbage collector.\n\nFixes: CVE-2014-0082","Rafael Mendonça França",true]],"size":2,"ref":"refs/heads/3-2-5-security","head":"14764fdadfc44e6055b727a0919a13fb6fedbe36"}