Blame SOURCES/rubygem-actionpack-4.2.11.1-CVE-2019-5418-CVE-2019-5419-render-file.patch

2c61bb
diff --git a/actionpack/lib/action_dispatch/http/mime_negotiation.rb b/actionpack/lib/action_dispatch/http/mime_negotiation.rb
2c61bb
index 53a98c5d0a..00fd3d03df 100644
2c61bb
--- a/actionpack/lib/action_dispatch/http/mime_negotiation.rb
2c61bb
+++ b/actionpack/lib/action_dispatch/http/mime_negotiation.rb
2c61bb
@@ -61,7 +61,7 @@ module ActionDispatch
2c61bb
                               false
2c61bb
                             end
2c61bb
 
2c61bb
-          if params_readable
2c61bb
+          v = if params_readable
2c61bb
             Array(Mime[parameters[:format]])
2c61bb
           elsif use_accept_header && valid_accept_header
2c61bb
             accepts
2c61bb
@@ -70,6 +70,10 @@ module ActionDispatch
2c61bb
           else
2c61bb
             [Mime::HTML]
2c61bb
           end
2c61bb
+
2c61bb
+          v.select do |format|
2c61bb
+            format.symbol || format.ref == "*/*"
2c61bb
+          end
2c61bb
         end
2c61bb
       end
2c61bb