[DIFE-1728] Rails upgrade to 6.0.4.4 (!1298) · Merge requests · CoFE / comm-cofe-reference · GitLab

Alexandru Emil Lupu requested to merge feature/DIFE-1728 into qa Dec 16, 2021

DIFE-1728

Change log

Added:
Changed:
Deprecated:
Removed:
Fixed:
Security: upgrade Rails version to 6.0.4.4 to mitigate CVE-2021-44528.

Notes

Fix invalid forwarded host vulnerability:
https://github.com/rails/rails/commit/fd6a64fef1d0f7f40a8d4b046da882e83163299c

Edited Dec 16, 2021 by Nelson Matias