aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Digest auth option for ActiveResource.pivotal2009-10-155-35/+258
| | | | Signed-off-by: Michael Koziarski <michael@koziarski.com>
* Make sure non-escaped urls aren't considered safeMichael Koziarski2009-10-152-1/+6
|
* Use ERB::Util.h over CGI.escapeHTML as the former is safety aware and the ↵Michael Koziarski2009-10-152-2/+2
| | | | latter isn't
* ActionView.url_for doesn't escape by defaultPhil Darnowsky2009-10-152-4/+14
| | | | | | | | | | | | | | | | | ActionView::Helpers::UrlHelper#url_for used to escape the URLs it generated by default. This was most commonly seen when generating a path with multiple query parameters, e.g. url_for(:controller => :foo, :action => :bar, :this => 123, :that => 456) would return http://example.com/foo/bar?that=456&amp;this=123 escaping an ampersand that shouldn't be escaped. This is both wrong and inconsistent with the behavior of ActionController#url_for, and is changed. Signed-off-by: Michael Koziarski <michael@koziarski.com>
* Start adding configuration to ActionView instead of using constants.Yehuda Katz2009-10-147-13/+70
| | | | | | | By using config rather than hardcoded constants, we can evolve the configuration system over time (we'd just need to update the config method with more robust capabilities and all consumers would get the capabilities with no code changes)
* CookieJar#delete should return the key's value, consistent with a HashJeffrey Hardy2009-10-143-3/+11
| | | | Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net>
* Finish porting over the initializers to the app object and fix all the testsCarl Lerche2009-10-146-95/+109
|
* Add Gemfile to the rails application generatorYehuda Katz + Carl Lerche2009-10-142-0/+11
|
* Make rails configuration's path object's root lazyYehuda Katz + Carl Lerche2009-10-142-4/+28
|
* Refactor AS concern to avoid hacking the "include" method.Joshua Peek2009-10-133-24/+10
| | | Ruby Magic!
* Extend Callbacks and Rescuable with AS concernJoshua Peek2009-10-132-7/+5
|
* Make logger work again (h/t Sam Ruby)Yehuda Katz2009-10-131-1/+1
|
* Rewrite AS::TestCase setup/teardown as a single callback chainJoshua Peek2009-10-121-27/+30
|
* Get AS TestCase off deprecated callbacksJoshua Peek2009-10-122-55/+15
|
* Add erubis gem to ciJoshua Peek2009-10-121-0/+2
|
* Insert a deprecation warn notice when using AS::DeprecatedCallbacks.Joshua Peek2009-10-121-0/+2
| | | | | We are still using DeprecatedCallbacks in AS and AR. This is meant to annoy the shit out of Rails core until we fix it.
* Callbacks, DeprecatedCallbacks = NewCallbacks, CallbacksJoshua Peek2009-10-1215-1457/+1263
|
* Use "run_callbacks :foo" since it is the public api for callbacks [#3329Joshua Peek2009-10-123-19/+19
| | | | state:resolved]
* Kill unused SafelyMemoizable [#3323 state:resolved]Joshua Peek2009-10-121-13/+0
|
* Bundle with system gem sources rather than gems.rubyforge.org defaultJeremy Kemper2009-10-111-0/+2
|
* Fix generators load pathsJeremy Kemper2009-10-112-2/+3
|
* Fix rake dev.José Valim2009-10-111-1/+1
| | | | Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net>
* Kill mock routing assertion that tests router implementationJoshua Peek2009-10-101-13/+0
|
* Fix failing safe buffer test. We don't patch CGI.escapeHTML, only ERB:Util.Joshua Peek2009-10-101-1/+1
|
* Move safe buffer into test/templateJoshua Peek2009-10-101-0/+0
|
* Relative url generations are covered more thoroughly by url rewriter testsJoshua Peek2009-10-101-12/+0
|
* Add define another "stuff" controller to support routing testsJoshua Peek2009-10-101-0/+1
|
* Drop implementation specific routing test assertionsJoshua Peek2009-10-101-3/+0
|
* Add define a "stuff" controller in fixtures to support routing testsJoshua Peek2009-10-101-0/+1
|
* Fix a bug where render :text could not handle yield :symbol. Fixes guides ↵Yehuda Katz2009-10-101-9/+13
| | | | generation
* Mark html safetyJeremy Kemper2009-10-091-1/+1
|
* Uses fileutilsJeremy Kemper2009-10-091-0/+2
|
* To unmarshal MissingSourceFile from childJeremy Kemper2009-10-091-1/+3
|
* Add a :limit option to specify the maximum number of records that can be ↵Pratik Naik2009-10-092-1/+44
| | | | processed by accepts_nested_attributes_for
* Store entire options hash in the class var rather than just the reject_if ↵Pratik Naik2009-10-092-16/+19
| | | | proc for the nested attributes
* Mute log info coming from the local_cache strategyPratik Naik2009-10-094-5/+33
|
* Fix issue with standalone ActionViewYehuda Katz2009-10-091-1/+4
|
* Avoid super in define_method for RubiniusYehuda Katz2009-10-091-1/+6
|
* Get rid of constant name usage for stack trace help in favor of overriding ↵Yehuda Katz2009-10-091-9/+9
| | | | #inspect and .name.
* Ensure MessageVerifier raises appropriate exception on tampered dataPratik Naik2009-10-092-1/+2
|
* Finish porting over the initializers to the app object and fix all the testsCarl Lerche2009-10-0815-837/+482
|
* Even more initializers ported overCarl Lerche2009-10-084-142/+141
|
* Ported over more initializersCarl Lerche2009-10-084-54/+48
|
* Add a test that ensures that Rails::Initializable can be used with modulesCarl Lerche2009-10-081-0/+12
|
* Move the ensure_tmp_directories_exist initializer to the application objectCarl Lerche2009-10-082-7/+7
|
* Moving more initializers into the application objectCarl Lerche2009-10-088-209/+292
|
* Start moving the initializers into the application objectCarl Lerche2009-10-0810-73/+225
|
* Remove the old initializer file.Carl Lerche2009-10-081-1137/+0
|
* API change: content_tag_for outputs prefixed class nameJoshua Peek2009-10-082-4/+4
|
* Fix warning spew for 1.9Carl Lerche2009-10-081-1/+5
|