Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

separate UI locales from data locales #262

Open
Muskworker opened this issue Apr 11, 2018 · 1 comment
Open

separate UI locales from data locales #262

Muskworker opened this issue Apr 11, 2018 · 1 comment

Comments

@Muskworker
Copy link
Contributor

Muskworker commented Apr 11, 2018

Out of http://guides.rubyonrails.org/upgrading_ruby_on_rails.html :

config.i18n.enforce_available_locales = false

Note that this option was added as a security measure, to ensure user input cannot be used as locale information unless it is previously known. Therefore, it's recommended not to disable this option unless you have a strong reason for doing so.

Ideally we want to make it so we can remove this option, which is currently set because right now the same locale system that allows users to enter dictionary data for arbitrary languages is the same locale system that Rails uses for i18n of the app itself. The former should be allowed to be free/sanitized input, while the latter should be limited to people who can edit the UI translations anyway.

This may involve some overhauls.

@Muskworker
Copy link
Contributor Author

related #203

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant