PaperClip v5.2.1 Release Notes
Release Date: 2018-01-27 // about 6 years ago-
5.2.1 (2018-01-25):
- ๐ Bugfix: Fix copying files on Windows. (#2532)
5.2.0 (2018-01-23):
๐ Security: Remove the automatic loading of URI adapters. Some of these
adapters can be specially crafted to expose your network topology. (#2435)๐ Bugfix: The rake task no longer rescues
Exception
. (#2476)๐ Bugfix: Handle malformed
Content-Disposition
headers (#2283)๐ Bugfix: The
:only_process
option works when passed a lambda again. (#2289)Improvement: Added
:use_accelerate_endpoint
option when using S3 to enable
โ Amazon S3 Transfer Acceleration
(#2291)๐ Improvement: Make the fingerprint digest configurable per attachment. The
๐ง default remains MD5. Making this configurable means it can change in a future
๐ version because it is not considered secure anymore against intentional file
๐ corruption. For more info, see https://en.wikipedia.org/wiki/MD5#SecurityYou can change the digest used for an attachment by adding the
:adapter_options
parameter to thehas_attached_file
options like this:
has_attached_file :avatar, adapter_options: { hash_digest: Digest::SHA256 }
๐จ Use the rake task to regenerate fingerprints with the new digest for a given
class. Note that this does not check the file integrity using the old
๐จ fingerprint. Run the following command to regenerate fingerprints for all
๐ User attachments:
๐จCLASS=User rake paperclip:refresh:fingerprints
You can optionally limit the attachment that will be processed, e.g:
๐จCLASS=User ATTACHMENT=avatar rake paperclip:refresh:fingerprints
(#2229)๐ Improvement: The new
frame_index
option on the thumbnail processor allows
you to select a specific frame from an animated upload to use as a thumbnail.
๐ Initial support is for mkv, avi, MP4, mov, MPEG, and GIF. (#2155)๐ Improvement: Instead of copying files, use hard links. This is an
optimization. (#2120)๐ Improvement: S3 storage option
:s3_prefixes_in_alias
. (#2287)๐ Improvement: Fog option
:fog_public
can be a lambda. (#2302)๐ Improvement: One fewer warning on JRuby. (#2352)