# \#patch **URL:** https://discuss.rubyonrails.org/tag/patch/3.md [Latest](https://discuss.rubyonrails.org/latest.md) · [Categories](https://discuss.rubyonrails.org/categories.md) · [Tags](https://discuss.rubyonrails.org/tags.md) --- ## [Feature proposal: Add units option to distance\_of\_time\_in\_words helper](https://discuss.rubyonrails.org/t/feature-proposal-add-units-option-to-distance-of-time-in-words-helper/88646)
**Author:** [@Peer\_Allan](https://discuss.rubyonrails.org/u/Peer_Allan)\ **Replies:** 4\ **Last updated:** [October 24, 2026, 6:12pm UTC](https://discuss.rubyonrails.org/t/feature-proposal-add-units-option-to-distance-of-time-in-words-helper/88646 "2026-10-24T18:12:28Z")
In our app we need to display the amount of time passed since an object was created in the UI. Out of the box it looks like time\_ago\_in\_words was going to do the job. However, in our case we need to know the time in a s… --- ## [Bugfixes for deterministic encrypted queries](https://discuss.rubyonrails.org/t/bugfixes-for-deterministic-encrypted-queries/91509)
**Author:** [@ebarendt](https://discuss.rubyonrails.org/u/ebarendt)\ **Replies:** 0\ **Last updated:** [August 17, 2026, 11:17pm UTC](https://discuss.rubyonrails.org/t/bugfixes-for-deterministic-encrypted-queries/91509 "2026-08-17T23:17:11Z")
We discovered a couple of bugs with queries on deterministically encrypted columns and I’ve created PRs for them: Expand Set values Support hash join syntax (fixes #46809) These both caused some errors while migrating… --- ## [Not able to create the DB instance](https://discuss.rubyonrails.org/t/not-able-to-create-the-db-instance/84329)
**Author:** [@Akeelkumar](https://discuss.rubyonrails.org/u/Akeelkumar)\ **Replies:** 1\ **Last updated:** [December 29, 2025, 2:04am UTC](https://discuss.rubyonrails.org/t/not-able-to-create-the-db-instance/84329 "2025-12-29T02:04:37Z")
Hi Everyone I am new to Ruby on rails, trying to create my first app in windows Env not able to create a DB in postgresql . Getting below error , Could someone please guide or advise proceed further, tried few scenarios… --- ## [Patch: Fix active record insert values of type cast and serialize](https://discuss.rubyonrails.org/t/patch-fix-active-record-insert-values-of-type-cast-and-serialize/86031)
**Author:** [@OuYangJinTing](https://discuss.rubyonrails.org/u/OuYangJinTing)\ **Replies:** 0\ **Last updated:** [June 17, 2024, 4:32am UTC](https://discuss.rubyonrails.org/t/patch-fix-active-record-insert-values-of-type-cast-and-serialize/86031 "2024-06-17T04:32:22Z")
Hello there. I found that Model#insert and Model#create were dealing with attribute conversion, and there were inconsistencies, and opened PR and tried to fix it. At present, this PR has been more than a year. I want to … --- ## [Possible XSS Vulnerability in Action Controller](https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 2\ **Last updated:** [February 27, 2024, 1:30am UTC](https://discuss.rubyonrails.org/t/possible-xss-vulnerability-in-action-controller/84947 "2024-02-27T01:30:06Z")
There is a possible XSS vulnerability when using the translation helpers (translate, t, etc) in Action Controller. This vulnerability has been assigned the CVE identifier CVE-2024-26143. Versions Affected: \>= 7.0.0. No… --- ## [Possible ReDoS vulnerability in Accept header parsing in Action Dispatch](https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [February 21, 2024, 8:41pm UTC](https://discuss.rubyonrails.org/t/possible-redos-vulnerability-in-accept-header-parsing-in-action-dispatch/84946 "2024-02-21T20:41:44Z")
There is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatch. This vulnerability has been assigned the CVE identifier CVE-2024-26142. Versions Affected: \>= 7.1.0, \< 7.1.3.1 Not affec… --- ## [Possible Sensitive Session Information Leak in Active Storage](https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [February 21, 2024, 8:39pm UTC](https://discuss.rubyonrails.org/t/possible-sensitive-session-information-leak-in-active-storage/84945 "2024-02-21T20:39:49Z")
There is a possible sensitive session information leak in Active Storage. By default, Active Storage sends a Set-Cookie header along with the user’s session cookie when serving blobs. It also sets Cache-Control to publ… --- ## [Retry logic for killed Resque Workers](https://discuss.rubyonrails.org/t/retry-logic-for-killed-resque-workers/83987)
**Author:** [@geoffyoungs](https://discuss.rubyonrails.org/u/geoffyoungs)\ **Replies:** 0\ **Last updated:** [October 21, 2023, 7:41pm UTC](https://discuss.rubyonrails.org/t/retry-logic-for-killed-resque-workers/83987 "2023-10-21T19:41:47Z")
Hi, I’ve opened an issue (Killed Resque jobs cannot be retried using ActiveJob · Issue #49734 · rails/rails · GitHub) and a PR (Catch and handle Resque::DirtyExit exceptions in ActiveJob by geoffyoungs · Pull Request #4… --- ## [A filterable .includes or a .select with .includes](https://discuss.rubyonrails.org/t/a-filterable-includes-or-a-select-with-includes/83763)
**Author:** [@chuan29812](https://discuss.rubyonrails.org/u/chuan29812)\ **Replies:** 2\ **Last updated:** [September 22, 2023, 2:25pm UTC](https://discuss.rubyonrails.org/t/a-filterable-includes-or-a-select-with-includes/83763 "2023-09-22T14:25:41Z")
Hi everyone. I have been in search of something that would allow me to selectively select columns to load into an entity retrieved by using .includes(.preload or .eager\_load) like Project.includes(:active\_user\[:name, :ag… --- ## [Does Rails use an incorrect offset for Asia/Jerusalem's timezone?](https://discuss.rubyonrails.org/t/does-rails-use-an-incorrect-offset-for-asia-jerusalems-timezone/83711)
**Author:** [@raj.patel](https://discuss.rubyonrails.org/u/raj.patel)\ **Replies:** 1\ **Last updated:** [September 15, 2023, 6:27pm UTC](https://discuss.rubyonrails.org/t/does-rails-use-an-incorrect-offset-for-asia-jerusalems-timezone/83711 "2023-09-15T18:27:26Z")
I am using Ruby version 3.2.2 along with Rails version 7.0.7.2 Current Local Time in Jerusalem, Israel shows that Jerusalem has a UTC offset of +3 hours Is this something that needs to be changed on active support? --- ## [Unable to update property record data](https://discuss.rubyonrails.org/t/unable-to-update-property-record-data/83640)
**Author:** [@AsimKhan2019](https://discuss.rubyonrails.org/u/AsimKhan2019)\ **Replies:** 7\ **Last updated:** [September 6, 2023, 12:15pm UTC](https://discuss.rubyonrails.org/t/unable-to-update-property-record-data/83640 "2023-09-06T12:15:29Z")
Hi, I am having this weird error for the action controller where it says that there is a routing error and that the patch does not exist. I checked my routes and there was a patch path for the properties. I also added th… --- ## [Problem in gems](https://discuss.rubyonrails.org/t/problem-in-gems/83182)
**Author:** [@CodeFidyk](https://discuss.rubyonrails.org/u/CodeFidyk)\ **Replies:** 1\ **Last updated:** [July 5, 2023, 3:10pm UTC](https://discuss.rubyonrails.org/t/problem-in-gems/83182 "2023-07-05T15:10:22Z")
I have this problem installing gems and I can’t solve it. I use virtual box to run with vagrant, with git bash, but it’s giving me this error and I don’t know how to solve it. Does anyone know the solution to this proble… --- ## [Using Rack::Test::UploadedFile.new with StringIO causes an exception](https://discuss.rubyonrails.org/t/using-rack-uploadedfile-new-with-stringio-causes-an-exception/82574)
**Author:** [@pavlik](https://discuss.rubyonrails.org/u/pavlik)\ **Replies:** 0\ **Last updated:** [March 28, 2023, 8:28am UTC](https://discuss.rubyonrails.org/t/using-rack-uploadedfile-new-with-stringio-causes-an-exception/82574 "2023-03-28T08:28:38Z")
Hello there. I was wondering if someone could take a look at this PR I think I’ve found a genuine bug, and I’m excited to drive the PR all the way with your guidance. :heart: --- ## [\[CVE-2023-22799\] Possible ReDoS based DoS vulnerability in GlobalID](https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 9:45pm UTC](https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127 "2023-01-17T21:45:43Z")
There is a ReDoS based DoS vulnerability in the GlobalID gem. This vulnerability has been assigned the CVE identifier CVE-2023-22799. Versions Affected: \>= 0.2.1 Not affected: NOTAFFECTED Fixed Versions: 1.0.… --- ## [\[CVE-2022-44572\] Possible Denial of Service Vulnerability in Rack's RFC2183 boundary parsing](https://discuss.rubyonrails.org/t/cve-2022-44572-possible-denial-of-service-vulnerability-in-racks-rfc2183-boundary-parsing/82124)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 9:12pm UTC](https://discuss.rubyonrails.org/t/cve-2022-44572-possible-denial-of-service-vulnerability-in-racks-rfc2183-boundary-parsing/82124 "2023-01-17T21:12:50Z")
There is a denial of service vulnerability in the multipart parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44572. Versions Affected: \>= 2.0.0 Not affected: None. Fixed… --- ## [\[CVE-2022-44571\] Possible Denial of Service Vulnerability in Rack Content-Disposition parsing](https://discuss.rubyonrails.org/t/cve-2022-44571-possible-denial-of-service-vulnerability-in-rack-content-disposition-parsing/82126)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 9:25pm UTC](https://discuss.rubyonrails.org/t/cve-2022-44571-possible-denial-of-service-vulnerability-in-rack-content-disposition-parsing/82126 "2023-01-17T21:25:41Z")
There is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44571. Versions Affected: \>= 2.0.0 Not affected: N… --- ## [\[CVE-2023-27539\] Possible Denial of Service Vulnerability in Rack's header parsing](https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [March 13, 2023, 6:14pm UTC](https://discuss.rubyonrails.org/t/cve-2023-27539-possible-denial-of-service-vulnerability-in-racks-header-parsing/82466 "2023-03-13T18:14:41Z")
Possible Denial of Service Vulnerability in Rack’s header parsing There is a denial of service vulnerability in the header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2023-27539… --- ## [\[CVE-2023-27531\] Possible Deserialization of Untrusted Data vulnerability in Kredis JSON](https://discuss.rubyonrails.org/t/cve-2023-27531-possible-deserialization-of-untrusted-data-vulnerability-in-kredis-json/82467)
**Author:** [@eileencodes](https://discuss.rubyonrails.org/u/eileencodes)\ **Replies:** 0\ **Last updated:** [March 13, 2023, 6:29pm UTC](https://discuss.rubyonrails.org/t/cve-2023-27531-possible-deserialization-of-untrusted-data-vulnerability-in-kredis-json/82467 "2023-03-13T18:29:08Z")
There is a deserialization of untrusted data vulnerability in the Kredis JSON deserialization code. This vulnerability has been assigned the CVE identifier CVE-2023-27531. Versions Affected: All. Not affected: None. Fix… --- ## [\[CVE-2023-28120\] Possible XSS Security Vulnerability in SafeBuffer#bytesplice](https://discuss.rubyonrails.org/t/cve-2023-28120-possible-xss-security-vulnerability-in-safebuffer-bytesplice/82469)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [March 13, 2023, 7:06pm UTC](https://discuss.rubyonrails.org/t/cve-2023-28120-possible-xss-security-vulnerability-in-safebuffer-bytesplice/82469 "2023-03-13T19:06:14Z")
There is a vulnerability in ActiveSupport if the new bytesplice method is called on a SafeBuffer with untrusted user input. This vulnerability has been assigned the CVE identifier CVE-2023-28120. Versions Affected: All… --- ## [\[CVE-2023-23913\] DOM Based Cross-site Scripting in rails-ujs for contenteditable HTML Elements](https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs-for-contenteditable-html-elements/82468)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [March 13, 2023, 7:04pm UTC](https://discuss.rubyonrails.org/t/cve-2023-23913-dom-based-cross-site-scripting-in-rails-ujs-for-contenteditable-html-elements/82468 "2023-03-13T19:04:46Z")
There is a potential DOM based cross-site scripting issue in rails-ujs which leverages the Clipboard API to target HTML elements that are assigned the contenteditable attribute. This has the potential to occur when pasti… --- ## [\[CVE-2022-44570\] Possible Denial of Service Vulnerability in Rack's Range header parsing](https://discuss.rubyonrails.org/t/cve-2022-44570-possible-denial-of-service-vulnerability-in-racks-range-header-parsing/82125)
**Author:** [@tenderlove](https://discuss.rubyonrails.org/u/tenderlove)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 9:23pm UTC](https://discuss.rubyonrails.org/t/cve-2022-44570-possible-denial-of-service-vulnerability-in-racks-range-header-parsing/82125 "2023-01-17T21:23:30Z")
There is a possible denial of service vulnerability in the Range header parsing component of Rack. This vulnerability has been assigned the CVE identifier CVE-2022-44570. Versions Affected: \>= 1.5.0 Not affected: … --- ## [\[CVE-2023-22794\] SQL Injection Vulnerability via ActiveRecord comments](https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 7:18pm UTC](https://discuss.rubyonrails.org/t/cve-2023-22794-sql-injection-vulnerability-via-activerecord-comments/82117 "2023-01-17T19:18:00Z")
SQL Injection Vulnerability via ActiveRecord comments There is a possible vulnerability in ActiveRecord related to the sanitization of comments. This vulnerability has been assigned the CVE identifier CVE-2023-22794. Ve… --- ## [\[CVE-2023-22795\] Possible ReDoS based DoS vulnerability in Action Dispatch](https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 7:18pm UTC](https://discuss.rubyonrails.org/t/cve-2023-22795-possible-redos-based-dos-vulnerability-in-action-dispatch/82118 "2023-01-17T19:18:42Z")
Possible ReDoS based DoS vulnerability in Action Dispatch There is a possible regular expression based DoS vulnerability in Action Dispatch related to the If-None-Match header. This vulnerability has been assigned the CV… --- ## [\[CVE-2022-44566\] Possible Denial of Service Vulnerability in ActiveRecord's PostgreSQL adapter](https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 7:19pm UTC](https://discuss.rubyonrails.org/t/cve-2022-44566-possible-denial-of-service-vulnerability-in-activerecords-postgresql-adapter/82119 "2023-01-17T19:19:35Z")
Possible Denial of Service Vulnerability in ActiveRecord’s PostgreSQL adapter There is a potential denial of service vulnerability present in ActiveRecord’s PostgreSQL adapter. This has been assigned the CVE identifier … --- ## [\[CVE-2023-22797\] Possible Open Redirect Vulnerability in Action Pack](https://discuss.rubyonrails.org/t/cve-2023-22797-possible-open-redirect-vulnerability-in-action-pack/82120)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 7:20pm UTC](https://discuss.rubyonrails.org/t/cve-2023-22797-possible-open-redirect-vulnerability-in-action-pack/82120 "2023-01-17T19:20:22Z")
Possible Open Redirect Vulnerability in Action Pack There is a vulnerability in Action Controller’s redirect\_to. This vulnerability has been assigned the CVE identifier CVE-2023-22797. Versions Affected: \>= 7.0.0 Not a… --- ## [\[CVE-2023-22796\] Possible ReDoS based DoS vulnerability in Active Support's underscore](https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 7:17pm UTC](https://discuss.rubyonrails.org/t/cve-2023-22796-possible-redos-based-dos-vulnerability-in-active-supports-underscore/82116 "2023-01-17T19:17:20Z")
There is a possible regular expression based DoS vulnerability in Active Support. This vulnerability has been assigned the CVE identifier CVE-2023-22796. Versions Affected: All Not affected: None Fixed Versions: … --- ## [\[CVE-2023-22792\] Possible ReDoS based DoS vulnerability in Action Dispatch](https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/82115)
**Author:** [@jhawthorn](https://discuss.rubyonrails.org/u/jhawthorn)\ **Replies:** 0\ **Last updated:** [January 17, 2023, 7:16pm UTC](https://discuss.rubyonrails.org/t/cve-2023-22792-possible-redos-based-dos-vulnerability-in-action-dispatch/82115 "2023-01-17T19:16:23Z")
There is a possible regular expression based DoS vulnerability in Action Dispatch. This vulnerability has been assigned the CVE identifier CVE-2023-22792. Versions Affected: \>= 3.0.0 Not affected: \< 3.0.0 Fixed V… --- ## [A fix proposal for ActiveRecord::Persistence](https://discuss.rubyonrails.org/t/a-fix-proposal-for-activerecord-persistence/81893)
**Author:** [@dmytro.savochkin](https://discuss.rubyonrails.org/u/dmytro.savochkin)\ **Replies:** 0\ **Last updated:** [December 6, 2022, 9:37am UTC](https://discuss.rubyonrails.org/t/a-fix-proposal-for-activerecord-persistence/81893 "2022-12-06T09:37:29Z")
Hey! Writing here because “Contributing to RoR” guide says that if there is no feedback on your PR for Rails for some time you can “nudge things along” in this mailing list :slight\_smile: So here is my PR: Ensure \`relo… --- ## [I want to know how user send request from third party using ajax and set cookie into controller in ror](https://discuss.rubyonrails.org/t/i-want-to-know-how-user-send-request-from-third-party-using-ajax-and-set-cookie-into-controller-in-ror/81784)
**Author:** [@aman9162](https://discuss.rubyonrails.org/u/aman9162)\ **Replies:** 0\ **Last updated:** [November 18, 2022, 5:52pm UTC](https://discuss.rubyonrails.org/t/i-want-to-know-how-user-send-request-from-third-party-using-ajax-and-set-cookie-into-controller-in-ror/81784 "2022-11-18T17:52:27Z")
I want to know how user send request from third party using ajax and set cookie into controller in ror --- ## [Issue in set cookie using ajax in rail](https://discuss.rubyonrails.org/t/issue-in-set-cookie-using-ajax-in-rail/81699)
**Author:** [@aman9162](https://discuss.rubyonrails.org/u/aman9162)\ **Replies:** 0\ **Last updated:** [November 3, 2022, 9:11am UTC](https://discuss.rubyonrails.org/t/issue-in-set-cookie-using-ajax-in-rail/81699 "2022-11-03T09:11:33Z")
When I am trying to set cookies by hitting ajax from third party website to rail site then not able to set cookies is there any way to get out of it?? [Next page](https://discuss.rubyonrails.org/tag/patch/3.md?match_all_tags=true&page=1&tags%5B%5D=patch)