Upgrading rails 3 to 4
Unknown3.2.22.5 → 4.2.11.3Security2
SecurityRestricts local variable names in Action View templates to address CVE-2020-8163.CVE-2020-8163 ↗
UnknownUpgrade verdict
DepDelta hasn't looked for the notes of 106 of 108 releases in its newest sources yet, so breaking changes can't be ruled out.
In plain terms
- DepDelta hasn't finished looking for the notes in this range, so it can't rule out breaking changes yet.
- Their commits are listed with this comparison.
Must act 2 items need code or config changes
Ruby requirement changed in 4.0.0.beta1: >= 1.8.7 → >= 1.9.3.
What you must change
Security2
Restricts local variable names in Action View templates to address CVE-2020-8163.
Rails vulnerable to Cross-site Scripting
Moderate