Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix ActiveRecord::Encryption protection #121

Merged

Conversation

neilvcarvalho
Copy link
Contributor

It's currently possible to override the encryption context set by console1984 to protect encrypted data. It looks like we intended to add a protection to this, but an unexisting constant was added to the protection list instead.

This commit fixes this protection by changing the protected constant from ActiveRecord::ActiveRecordEncryption to ActiveRecord::Encryption

Closes #120

It's currently possible to override the encryption context set by `console1984` to protect encrypted data. It looks like we intended to add a protection to this, but an unexisting constant was added to the protection list instead.

This commit fixes this protection by changing the protected constant from `ActiveRecord::ActiveRecordEncryption` to `ActiveRecord::Encryption`

Closes basecamp#120
@rosa
Copy link
Member

rosa commented Aug 21, 2024

Ohhh, great catch! 😅 Thanks so much 🙏

@rosa rosa merged commit dc1af9f into basecamp:master Aug 21, 2024
@rosa
Copy link
Member

rosa commented Aug 21, 2024

Released version 0.2.1 with this fix. Thanks again 🙏

@neilvcarvalho neilvcarvalho deleted the nc-activerecord-encryption-protection branch August 21, 2024 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

It's possible to override the encryption context
2 participants