| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Also add a Changelog entry
[related #9702]
[fixes #8928]
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
So that irregular multi-word pluralization rules have to be defined only for snake-case strings.
|
| |\ \ \ \ \ \
| | |_|/ / / /
| |/| | | | | |
CSRF protection should rescue exception not extend
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Extend previous changes, include the default line from the application controller that new rails applications are created with:
protect_from_forgery with: :exception
Minor wording changes to align.
|
| | |/ / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
I think the changes to the default behaviour mean that rails will throw an exception when an invalid authenticity token is found. The previous proposed code of calling super then sign_out meant that sign_out was never reached - the exception handler never returned.
I think the best approach now is to catch the exception, although I'm not 100% certain on that.
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Related with cbb917455f306cf5818644b162f22be09f77d4b2
|
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
This was changed at cbb917455f306cf5818644b162f22be09f77d4b2
|
| |\ \ \ \ \
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Remove wrapping div with inline styles for hidden form fields.
Conflicts:
actionview/CHANGELOG.md
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
We are dropping HTML 4.01 and XHTML strict compliance since input
tags directly inside a form are valid HTML5, and the absense of
inline styles help in validating for Content Security Policy.
|
| | | | | | | |
|
| | | | | | | |
|
| | | | | | | |
|
| |\ \ \ \ \ \
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Use common to_io so users can access the underlying IO object
|
| | | |_|_|_|/
| | |/| | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
In some cases users may need to work with/manipulate more of the
Tempfile api than provided by Upload. Allow users to get at the
underlying io via the common to_io method of IO/IO-like objects
|
| |\ \ \ \ \ \
| | |_|_|/ / /
| |/| | | | | |
Bring SQLite3Adpter init API closer to others
|
| |/ / / / / |
|
| |\ \ \ \ \
| | | | | | |
| | | | | | | |
Autoload ActiveModel::StrictValidationFailed
|
| |/ / / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Currently, if environment doesn’t eager load code, invoking this
constant before calling #valid? on a model instance results in a
NameError.
|
| |\ \ \ \ \
| | | | | | |
| | | | | | | |
[ci skip] Added examples for telephone_field_tag and url_field_tag methods
|
| | | | | | | |
|
| | | | | | | |
|
| |\| | | | |
| | | | | | |
| | | | | | | |
[ci skip] Added examples for search_field_tag method
|
| |/ / / / / |
|
| |\ \ \ \ \
| | | | | | |
| | | | | | | |
[ci skip] Added examples for color_field_tag method
|
| | | | | | | |
|
| |\ \ \ \ \ \
| | |/ / / / /
| |/| | | | | |
Reorder i18n guide
|
| |/ / / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Currently, the section called "How to store your custom translations"
has several subheadings that make no sense, such as "Translations for
ActiveRecord models." These make more sense under the "Overview of the
I18n API Features" section. I moved the "How to store..." section down
to the more appropriate sub-headings "Using Different Backends" and
"Using Different Exception Handlers" and removed the "Customize your
i18n setup" header.
|
| |\ \ \ \ \
| | | | | | |
| | | | | | | |
Changed the NullRelation so that when count is called with #group it wil...
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
properly return an empty hash instead of zero. Fixes issue #14721
Conflicts:
activerecord/CHANGELOG.md
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
* This is a follow up to: fe4b0eee05f59831e1468ed50f55fbad0ce11e1d
* The originating PR is #14222
* It should fix the build
|
| |\ \ \ \ \ \
| | |/ / / / /
| |/| | | | | |
additional note about routes in functional tests for engines [ci skip]
|
| | | | | | | |
|
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Closes #14222.
This is a follow up to #6104
This does not have the backwards compatibility issues brought up in
implementation to break.
|
| |\ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Avoid suggesting dangerous code in i18n guide
|
| |/ / / / / /
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Calling `to_sym` on user input opens apps up to Denial of Service attacks, via the symbol table being expanded to consume vast swathes of memory.
It is a fairly common configuration to have DNS configured such that all subdomains route to your Rails app, in which case an attacker visits `www1.foo.com`, `www2.foo.com`, and so on until something gives.
It is far less likely to have this problem with TLDs, so that change was only for consistency.
|
| |\ \ \ \ \ \
| | | | | | | |
| | | | | | | | |
Improve tests for duplicable, remove unnecessary constant
|
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
1. Improve tests
2. Remove unnecessary constant
3. Add docs for BigDecimal#duplicable?
|
| |\ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Update AC::Metal documentation example
|
| |/ / / / / / /
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Include proper module since AV was extracted form AP as mentioned in #14659.
|
| | | | | | | | |
|
| |\ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | | |
Refactor counter cache create and destroy
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| | | | | | | | | |
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
destroy
|
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
create
|
| |\ \ \ \ \ \ \ \
| | | | | | | | | |
| | | | | | | | | | |
Changed change_column in PG schema_statements.rb to make sure that the u...
|
| |/ / / / / / / /
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
uuid_generate function was not being quoted.
|
| |\ \ \ \ \ \ \ \
| | | | | | | | | |
| | | | | | | | | | |
Display diagnostics in text format for xhr request
|
| | | | | | | | | | |
|