diff --git a/CHANGELOG b/CHANGELOG index dca36915..05580872 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,4 +1,4 @@ -= master += 3.77.0 (2024-02-12) * Support formaction/formmethod attributes in forms in route_csrf plugin (jeremyevans) diff --git a/doc/release_notes/3.77.0.txt b/doc/release_notes/3.77.0.txt new file mode 100644 index 00000000..009aecfe --- /dev/null +++ b/doc/release_notes/3.77.0.txt @@ -0,0 +1,8 @@ += New Features + +* The route_csrf plugin now supports formaction/formmethod attributes + in forms. A csrf_formaction_tag method has been added for creating + a hidden input for a particular path and method. When a form is + submitted, the check_csrf! method will fix check for a path-specific + csrf token (set by the hidden tag added by the csrf_formaction_tag + method), before checking for the default csrf token. diff --git a/lib/roda/version.rb b/lib/roda/version.rb index a5a755b2..da0aa227 100644 --- a/lib/roda/version.rb +++ b/lib/roda/version.rb @@ -4,7 +4,7 @@ class Roda RodaMajorVersion = 3 # The minor version of Roda, updated for new feature releases of Roda. - RodaMinorVersion = 76 + RodaMinorVersion = 77 # The patch version of Roda, updated only for bug fixes from the last # feature release.