Plugins » Foreman Remote Execution

On Rails 4.1.14.1 and 3.2.22.1, the deface overrides in foreman_remote_execution look like they will fail to render in a similar way to #13592.

These Rails versions fix an Activeview security issue that requires partials be in registered view directories (i.e. app/views/) and not be accessed via ../ etc.

foreman_remote_execution registers overrides with partials under app/overrides/foreman/ but must either register this directory and update the paths accordingly, or move them to app/views/.

e.g.

Deface::Override.new(:virtual_path  => 'nic/_base_form',
                     :name          => 'add_execution_interface',
                     :insert_after  => 'erb[loud]:contains("interface_provision")',
                     :partial       => '../overrides/foreman/nics/execution_interface')

This is likely to affect 1.10-stable and 1.11+.