1. 21 Aug, 2015 1 commit
  2. 20 Aug, 2015 5 commits
  3. 31 Jul, 2015 1 commit
  4. 26 Jun, 2015 1 commit
  5. 19 Jun, 2015 1 commit
  6. 18 Jun, 2015 1 commit
  7. 17 Jun, 2015 2 commits
  8. 05 Jun, 2015 3 commits
    • Release v4.3.0 :tada: · ecdd5427
      For the full details of what is included in this release, check out NEWS.
      
      [fixes #1875]
      maclover7 committed
    • Fix a possible security issue with spoofing · 9aee4112
      Thanks to MORI Shingo of DeNA Co., Ltd. for reporting this.
      
      There is an issue where if an HTML file is uploaded with a .html
      extension, but the content type is listed as being `image/jpeg`, this
      will bypass a validation checking for images. But it will also pass the
      spoof check, because a file named .html and containing actual HTML
      passes the spoof check.
      
      This change makes it so that we also check the supplied content type. So
      even if the file contains HTML and ends with .html, it doesn't match the
      content type of `image/jpeg` and so it fails.
      Jon Yurek committed
  9. 27 May, 2015 1 commit
  10. 15 May, 2015 6 commits
  11. 26 Apr, 2015 2 commits
  12. 24 Apr, 2015 2 commits
  13. 23 Apr, 2015 1 commit
    • Use Updated Version of `aws-sdk` in Docs [ci skip] · c7066936
      The `aws-sdk` development dependency was updated to `~> 1.6` in #1816
      to resolve issues with the creation of 0-byte files on S3 (see #1729).
      However, there is no runtime dependency on `aws-sdk`, and the
      documentation still suggests that users install an earlier version of
      `aws-sdk` that produces the problems in the referenced issue.
      
      This commit updates the docs to recommend the use of `aws-sdk` `~> 1.6`
      with Paperclip.
      Robert Eshleman committed
  14. 17 Apr, 2015 1 commit
  15. 15 Apr, 2015 1 commit
    • Fix for Errno::ENAMETOOLONG in Thumbnails · c81970d9
      * Uses Paperclip's Tempfile instead of Ruby's in Thumbnail
      * Also includes a test for TempfileFactory to be sure it does not revert to similar behavior
      * In the tests, give the OS some wiggle room in the Tempfile name to ensure the error does not occur before we are ready for it. The wiggle room is needed because the randomized part of the name has a variable number of characters.
      Sammy Larbi committed
  16. 25 Mar, 2015 1 commit
  17. 24 Mar, 2015 1 commit
  18. 13 Mar, 2015 1 commit
  19. 06 Feb, 2015 2 commits
  20. 06 Jan, 2015 1 commit
    • Don't assume we have Rails.env if we have Rails · c46b40b9
      As referenced in #1739
      
      Just because the `Rails` constant is defined, it doesn't mean we're
      actually in a Rails app. Since there are people who use Paperclip
      outside of Rails, and there's no reason we shouldn't be able to run in
      those situations. This commit checks for `Rails.env` instead of just
      checking for `Rails` and assuming `Rails.env` works.
      Jon Yurek committed
  21. 19 Dec, 2014 1 commit
  22. 09 Dec, 2014 1 commit
  23. 08 Dec, 2014 1 commit
  24. 14 Nov, 2014 1 commit
  25. 07 Nov, 2014 1 commit