| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|
|
|
|
|
| |
Reference: https://github.com/rails/rails/commit/d4fd0bd17709735ac91e434c94fe99429f078c6e
cc @schneems
|
|
|
|
| |
Reference: https://github.com/rails/rails/commit/f7e4362011ceb1317fd401125d48d7ccb9a1079c
|
| |
|
|\
| |
| |
| |
| | |
Conflicts:
activerecord/lib/active_record/base.rb
|
| | |
|
| |
| |
| |
| |
| |
| |
| | |
This reverts commit 0f6b101e09d210cea2494c5d4225760f1951ea67.
Reason: It's better to let `unscope` be documented. We can add a
separate section for `except`.
|
| | |
|
| | |
|
| |
| |
| |
| | |
The example showed is `except`, however the method "documented" is `unstop`. Fix to align the docs to the example.
|
| |
| |
| |
| | |
Also use appropriate mailer syntax in the `find_each` block.
|
| |
| |
| |
| | |
Put all options for overloading `find` in one section
|
| |
| |
| |
| |
| |
| | |
Add docs on what happens when a numerical argument is provided to last.
Since `last!` behaves exactly the same way but can raise an argument we can consolidate it in the `last` section.
|
| |
| |
| |
| |
| |
| | |
Add docs on what happens when a numerical argument is provided to take.
Since `take!` behaves exactly the same way but can raise an argument we can consolidate it in the `take` section.
|
| |
| |
| |
| | |
Since `find_by!` behaves exactly the same way but can raise an argument we can consolidate it in the `find_by` section.
|
| |
| |
| |
| |
| |
| | |
Add docs for `first` when provided a numerical argument.
Since `first!` behaves exactly the same way but can raise an argument we can consolidate it in the `first` section.
|
| | |
|
| |
| |
| |
| |
| |
| | |
Just so it's clearer what's going on in the following assertion.
/cc #11993 @robin850
|
|\ \
| | |
| | | |
Silence Downloader's output
|
| | |
| | |
| | |
| | |
| | | |
This output isn't used anywhere for assertions so we can simply remove
it. The introducing commit was f238d495.
|
|\ \ \
| | | |
| | | | |
Fixing typo in comment
|
|/ / / |
|
|\ \ \
| |/ /
|/| | |
Use NameError#name to assert raised error.
|
| | |
| | |
| | |
| | |
| | | |
This makes the test compatible with other Ruby implementations, which
may implement error messages differently.
|
|\ \ \
| | | |
| | | | |
Don't rely on the column SQL type for bit string quoting
|
| | | | |
|
|\ \ \ \
| |/ / /
|/| | | |
Use a type object for type casting behavior on SQLite3
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
[Guides] Sentence break for clarity [ci-skip]
|
|/ / / / |
|
|\ \ \ \
| | | | |
| | | | | |
Fix incorrect unsubscription.
|
| | | | | |
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Use `#bytesize` instead of `#size` when checking for cookie overflow
|
|/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Although the cookie values happens to be ASCII strings because they are
Base64 encoded, it is semantically incorrect to check for the number of the
characters in the cookie, when we actually want to check for the number of the
bytes it consists of.
Furthermore it is unecessary coupling with the current implementation that
uses Base64 for encoding the values.
|
|/ / / /
| | | |
| | | |
| | | |
| | | | |
Also reordered some of the items to put newer ones on top (same order as
CHANGELOGs), which makes it easier to diff while we are still working on it.
|
| | | | |
|
|\ \ \ \
| | | | |
| | | | | |
Removed the single space character for Safari
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
`render nothing: true` or rendering a `nil` body no longer add a single
space to the response body.
The old behavior was added as a workaround for a bug in an early version of
Safari, where the HTTP headers are not returned correctly if the response
body has a 0-length. This is been fixed since and the workaround is no
longer necessary.
Use `render body: ' '` if the old behavior is desired.
|
|\ \ \ \
| | | | |
| | | | |
| | | | | |
Address CVE-2014-4671 (JSONP Flash exploit)
|
|/| | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
gcampbell-rosetta_flash
* 'rosetta_flash' of https://github.com/gcampbell/rails:
Address CVE-2014-4671 (JSONP Flash exploit)
Conflicts:
actionpack/CHANGELOG.md
|
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Adds a comment before JSONP callbacks. See
http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/ for more
details on the exploit in question.
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Force encoding of US-ASCII to UTF-8 in unescape_uri.
|
|/ / / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Because URI paths may contain non US-ASCII characters we need to force
the encoding of any unescaped URIs to UTF-8 if they are US-ASCII.
This essentially replicates the functionality of the monkey patch to
URI.parser.unescape in active_support/core_ext/uri.rb.
Fixes #16104.
|
|\ \ \ \ \
| | | | | |
| | | | | | |
[ci skip] Fixed link to strong params in Getting Started section 5.6.
|
|/ / / / / |
|
|\ \ \ \ \
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
egilburg/rails_4_1_upgrade_guide_json_time_with_zone_precision
[ci skip] Document millisecond precision change in ActiveSupport::TimeWithZone#as_json
|
| |/ / / /
| | | | |
| | | | |
| | | | | |
ActiveSupport::TimeWithZone#as_json
|
|\ \ \ \ \
| | | | | |
| | | | | | |
Reduce number of subscriptions created.
|
| | | | | | |
|