diff options
| author | David Heinemeier Hansson <david@loudthinking.com> | 2005-05-13 16:27:36 +0000 |
|---|---|---|
| committer | David Heinemeier Hansson <david@loudthinking.com> | 2005-05-13 16:27:36 +0000 |
| commit | 51f9c931ea47034bcedd5196a783262a4530386d (patch) | |
| tree | 3d0314ca8678e6a45b745c771c1870dd26d3cddb /actionpack/CHANGELOG | |
| parent | ee6882614f46c33277c36504d125672bb8f6c34e (diff) | |
| download | rails-51f9c931ea47034bcedd5196a783262a4530386d.tar.gz rails-51f9c931ea47034bcedd5196a783262a4530386d.tar.bz2 rails-51f9c931ea47034bcedd5196a783262a4530386d.zip | |
Fixed that render_partial_collection should always return a string (and not sometimes an array, despite <%= %> not caring)
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@1302 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
Diffstat (limited to 'actionpack/CHANGELOG')
| -rw-r--r-- | actionpack/CHANGELOG | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/actionpack/CHANGELOG b/actionpack/CHANGELOG index 8c20ac3606..50e135be72 100644 --- a/actionpack/CHANGELOG +++ b/actionpack/CHANGELOG @@ -1,5 +1,7 @@ *SVN* +* Fixed that render_partial_collection should always return a string (and not sometimes an array, despite <%= %> not caring) + * Added TextHelper#sanitize that can will remove any Javascript handlers, blocks, and forms from an input of HTML. This allows for use of HTML on public sites, but still be free of XSS issues. #1277 [Jamis Buck] * Fixed the HTML scanner used by assert_tag where a infinite loop could be caused by a stray less-than sign in the input #1270 [Jamis Buck] |