CHANGELOG.md in activesupport-5.2.7 vs CHANGELOG.md in activesupport-5.2.7.1
- old
+ new
@@ -1,4 +1,14 @@
+## Rails 5.2.7.1 (April 26, 2022) ##
+
+* Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`.
+
+ Add the method `ERB::Util.xml_name_escape` to escape dangerous characters
+ in names of tags and names of attributes, following the specification of XML.
+
+ *Álvaro Martín Fraguas*
+
+
## Rails 5.2.7 (March 10, 2022) ##
* Restore support to Ruby 2.2.
*ojab*