$ the-wire · showcase
Action Cable error logs leaked unfiltered params
By RepoJournal · Filed · About Rails · Composed from the cited sources · methodology
4 people shipped this
Rails moved to stop Action Cable's unhandled-message error path from printing raw WebSocket payloads, while an ongoing Active Record refactor reshapes how models find their primary key.
Filter parameters from Action Cable's unhandled message log rails/rails
When a channel action raised, Action Cable logged the raw WebSocket message at error level, so with filter_parameters = [:password] the payload still reached production logs in clear text. The log now runs through parameter filtering, which means error output for failing channels changes shape and sensitive values no longer appear verbatim.
Split SchemaContext and SchemaContext::MappedTable rails/rails
matthewd splits SchemaContext into the configured model-to-data-source relationship and a separate MappedTable produced by inspecting that source at runtime or from a schema cache dump. The stated blocker for moving primary key into SchemaContext is honoring the documented overrides (redefining primary_key, self.primary_key =) alongside the default of reading the schema, so expect churn around ...
Merge pull request #59601 from bruno-costanzo/fix-activejob-scheduled-at-mutation rails/rails
Active Job no longer converts the supplied scheduled_at to UTC in place, so the time object a caller passes in survives the call unmutated instead of being rewritten underneath them.
Merge pull request #59410 from bastin27/fix-routing-mapper-doc-examples rails/rails
Two doc-only merges wrap the tail: corrected routing mapper examples and typo/backtick fixes across the Active Record and Active Model guides, both marked [ci skip] with no runtime effect.
