Niklas Häusele

Add rename_csp_helper_nonce_attribute ActionView configuration to avoid value exfiltration

11

Adds a configuration to rename the CSP helper attribute name to avoid value exfiltration as described in https://github.com/rails/rails/issues/51580#issue-2246912613 It's disabled by default currently until the JS libraries are updated to...

### Motivation / Background The "Suppressing Callbacks" section of the ActiveRecord Suppressing Callback guide is incorrect. ### Detail The https://edgeguides.rubyonrails.org/active_record_callbacks.html#suppressing-callbacks section describes the `ActiveRecord::Suppressor` as a way to suppress callbacks....

Set the worker process count automatically with WEB_CONCURRENCY=auto

8

### Description Implements the `WEB_CONCURRENCY=auto` feature described in #3437. This implementation does not `require` `concurrent-ruby` at all (in puma). An alternative could be to `require "concurrent/utility/processor_counter"` inline. I'd be happy...

All meta descriptions and og:description meta tags currently are prefixed with the specific guide's h1. This happens when sanitizing the headers html fragment. For example: Before this change the (og)-description...