You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Refactor: Update test mocks to use public_bundles_full_path
- Replace all instances of generated_assets_full_path with public_bundles_full_path in utils_spec.rb
- Ensures consistency in method naming across test cases
- Aligns with recent changes for clearer asset path handling
This change enhances clarity and maintains alignment with the updated method naming conventions.
Copy file name to clipboardExpand all lines: CHANGELOG.md
+9-1Lines changed: 9 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -26,6 +26,7 @@ Changes since the last non-beta release.
26
26
#### New Features
27
27
28
28
-**Server Bundle Security**: Added new configuration options for enhanced server bundle security and organization:
29
+
29
30
-`server_bundle_output_path`: Configurable directory (relative to the Rails root) for server bundle output (default: "ssr-generated"). If set to `nil`, the server bundle will be loaded from the same public directory as client bundles.
30
31
-`enforce_private_server_bundles`: When enabled, ensures server bundles are only loaded from private directories outside the public folder (default: false for backward compatibility)
31
32
@@ -34,10 +35,17 @@ Changes since the last non-beta release.
34
35
- If `server_bundle_output_path` is not set, the server bundle falls back to the client bundle directory (typically the public output path).
35
36
- If `enforce_private_server_bundles` is enabled:
36
37
- The server bundle will only be loaded from the private directory specified by `server_bundle_output_path`.
37
-
- If the bundle is not found there, it will *not* fall back to the public directory.
38
+
- If the bundle is not found there, it will _not_ fall back to the public directory.
38
39
- If `enforce_private_server_bundles` is not enabled and the bundle is not found in the private directory, it will fall back to the public directory.
39
40
- This logic ensures that, when strict enforcement is enabled, server bundles are never loaded from public directories, improving security and clarity of bundle resolution.
-`public_bundles_full_path`: New method specifically for webpack bundles in public directories
46
+
-`generated_assets_full_path`: Now deprecated (backwards-compatible alias)
47
+
- This eliminates confusion between webpack bundles and general Rails public assets
48
+
41
49
#### Security Enhancements
42
50
43
51
-**Private Server Bundle Enforcement**: When `enforce_private_server_bundles` is enabled, server bundles bypass public directory fallbacks and are only loaded from designated private locations
0 commit comments