Merge pull request rails#45424 from shouichi/remove-padding-from-urlsafe-message-verifier

Fix urlsafe MessageVerifier not to include padding

Author: byroot

activesupport/lib/active_support/message_verifier.rb

@@ -221,7 +221,7 @@ def generate(value, expires_at: nil, expires_in: nil, purpose: nil)
 
     private
       def encode(data)
-        @urlsafe ? Base64.urlsafe_encode64(data) : Base64.strict_encode64(data)
+        @urlsafe ? Base64.urlsafe_encode64(data, padding: false) : Base64.strict_encode64(data)
       end
 
       def decode(data)

activesupport/test/message_verifier_test.rb

@@ -360,6 +360,11 @@ def test_urlsafe
     assert_equal message, URI.encode_www_form_component(message)
   end
 
+  def test_no_padding
+    message = generate("a")
+    assert_not_includes message, "="
+  end
+
   private
     def verifier_options
       { urlsafe: true }