PaperClip v5.2.1 Release Notes

Release Date: 2018-01-27 // about 6 years ago
  • 5.2.1 (2018-01-25):

    • ๐Ÿ›  Bugfix: Fix copying files on Windows. (#2532)

    5.2.0 (2018-01-23):

    ๐Ÿ”’ Security: Remove the automatic loading of URI adapters. Some of these
    adapters can be specially crafted to expose your network topology. (#2435)

    ๐Ÿ›  Bugfix: The rake task no longer rescues Exception. (#2476)

    ๐Ÿ›  Bugfix: Handle malformed Content-Disposition headers (#2283)

    ๐Ÿ›  Bugfix: The :only_process option works when passed a lambda again. (#2289)

    Improvement: Added :use_accelerate_endpoint option when using S3 to enable
    โœ… Amazon S3 Transfer Acceleration
    (#2291)

    ๐Ÿ‘Œ Improvement: Make the fingerprint digest configurable per attachment. The
    ๐Ÿ”ง default remains MD5. Making this configurable means it can change in a future
    ๐Ÿ”– version because it is not considered secure anymore against intentional file
    ๐Ÿ”’ corruption. For more info, see https://en.wikipedia.org/wiki/MD5#Security

    You can change the digest used for an attachment by adding the
    :adapter_options parameter to the has_attached_file options like this:
    has_attached_file :avatar, adapter_options: { hash_digest: Digest::SHA256 }

    ๐Ÿ–จ Use the rake task to regenerate fingerprints with the new digest for a given
    class. Note that this does not check the file integrity using the old
    ๐Ÿ–จ fingerprint. Run the following command to regenerate fingerprints for all
    ๐Ÿ‘‰ User attachments:
    ๐Ÿ–จ CLASS=User rake paperclip:refresh:fingerprints
    You can optionally limit the attachment that will be processed, e.g:
    ๐Ÿ–จ CLASS=User ATTACHMENT=avatar rake paperclip:refresh:fingerprints (#2229)

    ๐Ÿ‘Œ Improvement: The new frame_index option on the thumbnail processor allows
    you to select a specific frame from an animated upload to use as a thumbnail.
    ๐ŸŽ‰ Initial support is for mkv, avi, MP4, mov, MPEG, and GIF. (#2155)

    ๐Ÿ‘Œ Improvement: Instead of copying files, use hard links. This is an
    optimization. (#2120)

    ๐Ÿ›  Improvement: S3 storage option :s3_prefixes_in_alias. (#2287)

    ๐Ÿ‘Œ Improvement: Fog option :fog_public can be a lambda. (#2302)

    ๐Ÿ‘Œ Improvement: One fewer warning on JRuby. (#2352)