OpenProject is the leading open source project management software.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
openproject/config/initializers/new_framework_defaults_5_2.rb

49 lines
2.8 KiB

# Be sure to restart your server when you modify this file.
#
# This file contains migration options to ease your Rails 5.2 upgrade.
#
# Once upgraded flip defaults one by one to migrate to the new default.
#
# Read the Guide for Upgrading Ruby on Rails for more info on each option.
# https://guides.rubyonrails.org/configuring.html#config-active-record-cache-versioning
# Make Active Record use stable #cache_key alongside new #cache_version method.
# This is needed for recyclable cache keys. Previous versions had false.
# Rails 5.2+ default is true.
# Rails.application.config.active_record.cache_versioning = true
# https://guides.rubyonrails.org/configuring.html#config-action-dispatch-use-authenticated-cookie-encryption
# Use AES-256-GCM authenticated encryption for encrypted cookies.
# Also, embed cookie expiry in signed or encrypted cookies for increased security.
#
# This option is not backwards compatible with earlier Rails versions.
# It's best enabled when your entire app is migrated and stable on 5.2.
#
# Existing cookies will be converted on read then written with the new scheme.
# Previous versions had false. Rails 5.2+ default is true.
# Rails.application.config.action_dispatch.use_authenticated_cookie_encryption = true
# https://guides.rubyonrails.org/configuring.html#config-active-support-use-authenticated-message-encryption
# Use AES-256-GCM authenticated encryption as default cipher for encrypting messages
# instead of AES-256-CBC, when use_authenticated_message_encryption is set to true.
# Previous versions had false. Rails 5.2+ default is true.
# Rails.application.config.active_support.use_authenticated_message_encryption = true
# https://guides.rubyonrails.org/configuring.html#config-action-controller-default-protect-from-forgery
# Add default protection from forgery to ActionController::Base instead of in
# ApplicationController.
# Previous versions had false. Rails 5.2+ default is true.
# Rails.application.config.action_controller.default_protect_from_forgery = true
# https://guides.rubyonrails.org/configuring.html#config-active-support-hash-digest-class
# Use SHA-1 instead of MD5 to generate non-sensitive digests, such as the ETag header.
# Previous versions had false (OpenSSL::Digest::MD5).
# Rails 5.2 to 6.1 default is true (OpenSSL::Digest::SHA1).
# Rails 7.0 started using `config.active_support.hash_digest_class = OpenSSL::Digest::SHA256` instead
# and removed `Rails.application.config.active_support.use_sha1_digests` setting
# Rails.application.config.active_support.use_sha1_digests = true
# https://guides.rubyonrails.org/configuring.html#config-action-view-form-with-generates-ids
# Make `form_with` generate id attributes for any generated HTML tags.
# Previous versions had false. Rails 5.2+ default is true.
# Rails.application.config.action_view.form_with_generates_ids = true