# CHANGELOG ## [Unreleased] ## [6.4.0] - 2020-09-18 ### Security - CVE-2020-25739: Enforce HTML entities escaping in gon output ## [6.3.2] - 2019-11-18 ### Security - Restrict possibility of vulnerable i18n legacy verision (0.3.6.pre) installation ## [6.3.1] - 2019-11-18 ### Changed - ActionView::Base and ActionController::Base should be loaded inside ActiveSupport.on_load hook. Thanks to @amatsuda - Require Ruby >= 2.2.2 (activesupport). Thanks to @nicolasleger - Update old_rails.rb to reflect GonHelpers -> ControllerHelpers name change. Thanks to @etipton ## [6.2.1] - 2018-07-11 ### Changed - Update README: correct spelling mistake. Thanks to @EdwardBetts - Autoload test classes only in test env. Thanks to @wilddima ### Fixed - Fix keys cache. Thanks to @ertrzyiks - fixing tests by running with rabl and rabl-rails separately. Thanks to @dsalahutdinov ## [6.2.0] - 2017-10-04 ### Added - Introduce keys cache. Thanks to @vlazar - Add possibleErrorCallback to watch params. Thanks to @etagwerker ### Changed - Update readme with PhoenixGon hex link. Thanks to @khusnetdinov - Fix code highlighting in README. Thanks to @ojab - Refactoring: use attr_reader ### Removed - Remove unnecessary json dependency. - Remove rubysl and rubinius-developer_tools gem. ## [6.1.0] - 2016-07-11 ### Deprecated - env is deprecated and will be removed from Rails 5.0. Thanks to @dlupu ### Fixed - fix merging routes bug. Thanks to @strikyflo - Show what method was used in public methods error. ### Changed - Use 'need_tag' as option name to prevent calling 'tag' method. Thanks to @june29 - Update README; comment out gon.clear from sample code. Thanks to @speee-nakajima - Update README; Replace the include_gon method with render_data method. - Refactoring: use attr_accessor method. - Refactoring: use attr_reader method. ## [6.0.1] - 2015-07-22 ### Changed - Free dependencies ## [6.0.0] - 2015-07-22 ### Added - nonce option. Thanks to @joeljackson ### Changed - Refactoring - Included rails url_helpers into jbuilder. Thanks to @razum2um ## [5.2.3] - 2014-11-03 ### Added - Coffescript implementation of watch.js. Thanks to @willcosgrove - unwatchAll function in watch.js. Thanks to @willcosgrove ## [5.2.2] - 2014-10-31 ### Added - support for controller helper methods in jbuilder ## [5.2.1] - 2014-10-28 ### Added - merge variable feature (for merge hash-like variables instead of overriding them). Thanks to @jalkoby ### Fixed - fix for jbuilder module. Thanks to @jankovy ## [5.2.0] - 2014-08-26 ### Added - namespace_check option. Thanks to @tommyh - AMD compatible version of including gon. Thanks to @vijoc ### Changed - Only inject gon into ActionController::Base-like object in spec_helper. Thanks to @kevinoconnor7 ### Fixed - fix issue where include_gon would raise exception if the controller did not assign any gon variables. Thanks to @asalme ## [5.1.2] - 2014-07-22 ### Changed - Clarifying helpers, dump gon#watch content to safe json before render. Thanks to @Strech ## [5.1.1] - 2014-07-17 ### Added - global_root option. Thanks to @rafaelliu - MultiJson support. Thanks to @Strech ## [5.1.0] - 2014-06-29 ### Fixed - Many fixes. Thanks to @Silex, @kilefritz, @irobayna, @kyrylo, @randoum, @jackquack, @tuvistavie, @Strech for awesome commits and help! ## [5.0.4] - 2014-02-13 ### Fixed - Fix check for get and assign variables for Gon.global ## [5.0.3] - 2014-02-12 ### Removed - Revert changes in gemspec ## [5.0.2] - 2014-02-12 ### Fixed - Fix issue when there is no gon object for current thread and rendering include_gon (#108 part) (wasn't fixed) (@gregmolnar) ## [5.0.1] - 2013-12-30 ### Fixed - Fix issue when there is no gon object for current thread and rendering include_gon (#108 part) ## [5.0.0] - 2013-12-26 ### Changed - Gon is threadsafe now! (@razum2um) - Camelcasing with depth (@MaxSchmeling) - Optional CDATA and style refactoring (@torbjon) - jBuilder supports not only String and Hash types of locals (@steakchaser) - Using ActionDispatch::Request#uuid instead of ActionDispatch::Request#id (@sharshenov) ## [4.1.1] - 2013-06-04 ### Fixed - Fixed critical XSS vulnerability https://github.com/gazay/gon/issues/84 (@vadimr & @Hebo) ## [4.1.0] - 2013-04-14 ### Added - rabl-rails support (@jtherrell) ### Changed - Refactored script tag generation (@toothrot) - Stop support for MRI 1.8.7 - Accepting locals in jbuilder templates ## [4.0.3] - 2013-04-14 !!!IMPORTANT!!! Last version with compatibility for MRI 1.8.7 ### Added - new method `Gon#push` for assign variables through Hash-like objects (@topdev) ### Changed - Fixes for 1.8.7 compatibility. ## [4.0.2] - 2012-12-17 ### Fixed - Fixed gon.watch in JS without callback and options ## [4.0.1] - 2012-10-25 ### Added - option :locals to gon.rabl functionality ### Changed - Gon#set_variable and Gon#get_variable moved to public scope ### Removed - BlankSlate requirement (@phoet) ## [4.0.0] - 2012-07-23 ### Added - gon.watch functionality (thanks to @brainopia and @kossnocorp) - Compatibility with jbuilder paths for partial! method ### Changed - Little bit refactoring - Gon now is a class ### Fixed - Fixed some bugs ## [3.0.5] - 2012-06-22 ### Added - type text/javascript option (@torbjon) ### Changed - A litlle bit refactoring - Made compatible with active support json encoding for escaping script tags ### Fixed - bug for init option - clear if init true (@torbjon) ## [3.0.4] - 2012-06-02 ### Fixed - Fix bug with gon clear with global variables, bump version ## [3.0.3] - 2012-05-22 ### Added - init option (@torbjon) ### Changed - Include ActionView::Helpers into Gon::JBuilder ## [3.0.2] - 2012-04-28 ### Added - need_tag option (@afa) ## [3.0.0] - 2012-04-17 ### Added - Added Gon.global for using gon everywhere ### Changed - Almost all code refactored - Included ActionView::Helpers into Rabl::Engine ## [2.3.0] - 2012-04-09 ### Changed - Don't really remember what was before this version [Unreleased]: https://github.com/gazay/gon/compare/v6.3.2...master [6.3.2]: https://github.com/gazay/gon/compare/v6.3.1...v6.3.2 [6.3.1]: https://github.com/gazay/gon/compare/v6.2.1...v6.3.1 [6.2.1]: https://github.com/gazay/gon/compare/v6.2.0...v6.2.1 [6.2.0]: https://github.com/gazay/gon/compare/v6.1.0...v6.2.0 [6.1.0]: https://github.com/gazay/gon/compare/v6.0.1...v6.1.0 [6.0.1]: https://github.com/gazay/gon/compare/v6.0.0...v6.0.1 [6.0.0]: https://github.com/gazay/gon/compare/v5.2.3...v6.0.0 [5.2.3]: https://github.com/gazay/gon/compare/v5.2.2...v5.2.3 [5.2.2]: https://github.com/gazay/gon/compare/v5.2.1...v5.2.2 [5.2.1]: https://github.com/gazay/gon/compare/v5.2.0...v5.2.1 [5.2.0]: https://github.com/gazay/gon/compare/v5.1.2...v5.2.0 [5.1.2]: https://github.com/gazay/gon/compare/v5.1.1...v5.1.2 [5.1.1]: https://github.com/gazay/gon/compare/v5.1.0...v5.1.1 [5.1.0]: https://github.com/gazay/gon/compare/v5.0.4...v5.1.0 [5.0.4]: https://github.com/gazay/gon/compare/v5.0.3...v5.0.4 [5.0.3]: https://github.com/gazay/gon/compare/v5.0.2...v5.0.3 [5.0.2]: https://github.com/gazay/gon/compare/v5.0.1...v5.0.2 [5.0.1]: https://github.com/gazay/gon/compare/v5.0.0...v5.0.1 [5.0.0]: https://github.com/gazay/gon/compare/v4.1.1...v5.0.0 [4.1.1]: https://github.com/gazay/gon/compare/v4.1.0...v4.1.1 [4.1.0]: https://github.com/gazay/gon/compare/v4.0.3...v4.1.0 [4.0.3]: https://github.com/gazay/gon/compare/v4.0.2...v4.0.3 [4.0.2]: https://github.com/gazay/gon/compare/v4.0.1...v4.0.2 [4.0.1]: https://github.com/gazay/gon/compare/v4.0.0...v4.0.1 [4.0.0]: https://github.com/gazay/gon/compare/v3.0.5...v4.0.0 [3.0.5]: https://github.com/gazay/gon/compare/v3.0.4...v3.0.5 [3.0.4]: https://github.com/gazay/gon/compare/v3.0.3...v3.0.4 [3.0.3]: https://github.com/gazay/gon/compare/v3.0.2...v3.0.3 [3.0.2]: https://github.com/gazay/gon/compare/v3.0.0...v3.0.2 [3.0.0]: https://github.com/gazay/gon/compare/v2.3.0...v3.0.0 [2.3.0]: https://github.com/gazay/gon/releases/tag/v2.3.0