CHANGELOG.md in activesupport-5.2.7 vs CHANGELOG.md in activesupport-5.2.7.1

- old
+ new

@@ -1,4 +1,14 @@ +## Rails 5.2.7.1 (April 26, 2022) ## + +* Fix and add protections for XSS in `ActionView::Helpers` and `ERB::Util`. + + Add the method `ERB::Util.xml_name_escape` to escape dangerous characters + in names of tags and names of attributes, following the specification of XML. + + *Álvaro Martín Fraguas* + + ## Rails 5.2.7 (March 10, 2022) ## * Restore support to Ruby 2.2. *ojab*