Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Removed tag.rb since it has been deprecated. | Timm | 2014-06-15 | 4 | -321/+0 |
| | |||||
* | Corrected documentation bug. | Timm | 2014-06-15 | 1 | -10/+57 |
| | |||||
* | Removed whitespace between dependencies. | Timm | 2014-06-15 | 1 | -0/+1 |
| | |||||
* | Updated documentation to tell that a custom scrubber takes precedence. | Timm | 2014-06-15 | 1 | -0/+1 |
| | |||||
* | Updated the documentation to reflect the scrubber option. | Timm | 2014-06-15 | 1 | -1/+22 |
| | |||||
* | Marked the private API as not needing code documentation. | Timm | 2014-06-15 | 2 | -0/+2 |
| | |||||
* | Added ability to pass a custom scrubber to sanitize. Includes test coverage. | Timm | 2014-06-15 | 2 | -1/+39 |
| | |||||
* | Moved requiring of Loofah from sanitizers.rb to action_view.rb. | Timm | 2014-06-15 | 2 | -1/+1 |
| | |||||
* | Marked tests in sanitize_helper_test.rb as pending. | Timm | 2014-06-15 | 1 | -8/+29 |
| | |||||
* | Marked a test in form_helper_test.rb as pending because of unknown encoding ↵ | Timm | 2014-06-15 | 1 | -0/+2 |
| | | | | ASCII-8BIT output error. | ||||
* | Marked some tests as pending in date_helper_test.rb. | Timm | 2014-06-15 | 1 | -0/+4 |
| | |||||
* | Added some tests for ActionView::Sanitizer. | Timm | 2014-06-15 | 1 | -0/+32 |
| | |||||
* | Added ActionView::Sanitizer and moved remove_xpaths to there. | Timm | 2014-06-15 | 1 | -7/+0 |
| | |||||
* | Changed the description of some pending tests. Changed the expected output ↵ | Timm | 2014-06-15 | 1 | -3/+4 |
| | | | | of a script test. | ||||
* | Extracted one highlight test method and marked it as pending. | Timm | 2014-06-15 | 1 | -0/+3 |
| | |||||
* | Added comment removal. Changed definitation of remove_xpaths to not use a ↵ | Timm | 2014-06-15 | 1 | -11/+24 |
| | | | | splat operator. | ||||
* | Extracted the xpath removals into some new API that allows users to remove ↵ | Timm | 2014-06-15 | 1 | -2/+8 |
| | | | | xpath subtrees. | ||||
* | Added removal of script tags to WhiteListSanitizer. | Timm | 2014-06-15 | 1 | -0/+1 |
| | |||||
* | Renamed the SanitizerTest class to SanitersTest, to remove the conflict with ↵ | Timm | 2014-06-15 | 1 | -1/+1 |
| | | | | the old SanitizerTest for html-scanner. | ||||
* | Added video poster sanitization testing (from @vipulnsward). | Timm | 2014-06-15 | 1 | -0/+5 |
| | |||||
* | Extracted failing tests in santiizers_test.rb into their own methods and ↵ | Timm | 2014-06-15 | 1 | -7/+71 |
| | | | | marked them as pending. | ||||
* | Added guard clauses to FullSanitizer. | Timm | 2014-06-15 | 1 | -1/+6 |
| | |||||
* | bad_tags include form since we remove it. Also to prevent a ↵ | Timm | 2014-06-15 | 1 | -1/+1 |
| | | | | should_allow_form_tag test creation. | ||||
* | Changed expected value from '<b>' to empty string. | Timm | 2014-06-15 | 1 | -1/+1 |
| | |||||
* | Removed the contains_bad_protocols? method as well as the tests for it. ↵ | Timm | 2014-06-15 | 2 | -41/+2 |
| | | | | Loofah already deals with this. | ||||
* | Reordered form removal with stripping. | Timm | 2014-06-15 | 2 | -5/+8 |
| | |||||
* | Added PermitScrubber which allows you to permit elements for sanitization. | Timm | 2014-06-15 | 2 | -13/+85 |
| | |||||
* | Removed duplication in the deprecated methods. | Timm | 2014-06-15 | 1 | -5/+5 |
| | |||||
* | Added Loofah as a dependency in actionview.gemspec. | Timm | 2014-06-11 | 7 | -32/+485 |
| | | | | | | Implemented ActionView: FullSanitizer, LinkSanitizer and WhiteListSanitizer in sanitizers.rb. Deprecated protocol_separator and bad_tags. Added new tests in sanitizers_test.rb and reimplemented assert_dom_equal with Loofah. | ||||
* | Merge pull request #15628 from akshay-vishnoi/test-cases | Yves Senn | 2014-06-11 | 1 | -0/+4 |
|\ | | | | | Add test cases for #in? and #presence_in | ||||
| * | Add test cases for #in? and #presence_in | Akshay Vishnoi | 2014-06-11 | 1 | -0/+4 |
| | | |||||
* | | Merge pull request #15637 from akshay-vishnoi/delete-deprecated-method | Santiago Pastorino | 2014-06-11 | 1 | -4/+0 |
|\ \ | | | | | | | Remove deprecation warning | ||||
| * | | Remove deprecation warning | Akshay Vishnoi | 2014-06-11 | 1 | -4/+0 |
| | | | |||||
* | | | Merge pull request #15638 from sgrif/sg-column-types | Rafael Mendonça França | 2014-06-11 | 1 | -6/+10 |
|\ \ \ | | | | | | | | | Ensure `column_types` returns a type object, and not a column | ||||
| * | | | Ensure `column_types` returns a type object, and not a column | Sean Griffin | 2014-06-11 | 1 | -6/+10 |
| | | | | |||||
* | | | | Merge pull request #15639 from sgrif/sg-column-serialization | Rafael Mendonça França | 2014-06-11 | 1 | -6/+2 |
|\ \ \ \ | |/ / / |/| | | | Remove YAML serialization workaround for columns | ||||
| * | | | Remove YAML serialization workaround for columns | Sean Griffin | 2014-06-11 | 1 | -6/+2 |
|/ / / | | | | | | | | | | | | | We are no longer including column objects in YAML serialization, thanks to https://github.com/rails/rails/pull/15621 | ||||
* | | | cleanup, get rid of trailing whitespace. [ci skip] | Yves Senn | 2014-06-11 | 1 | -2/+2 |
| | | | | | | | | | | | | | | | | | | Follow up to #15636. /cc @hundredwatt | ||||
* | | | Merge pull request #15636 from hundredwatt/patch-1 | Yves Senn | 2014-06-11 | 1 | -2/+4 |
|\ \ \ | | | | | | | | | Fix Apache Directives [ci skip] | ||||
| * | | | Fix Apache Directives [ci skip] | Jason Nochlin | 2014-06-11 | 1 | -2/+4 |
|/ / / | | | | | | | Directives need to be placed on their own lines in order to work. Tested on: `Server version: Apache/2.2.22 (Ubuntu); Server built: Mar 19 2014 21:11:15` | ||||
* | | | fix typo in changelog [ci skip] | Vijay Dev | 2014-06-11 | 1 | -1/+1 |
| | | | |||||
* | | | Merge pull request #15635 from kuldeepaggarwal/add-missing-changelog | Yves Senn | 2014-06-11 | 1 | -0/+6 |
|\ \ \ | |/ / |/| | | | | | add missing changelog entry. refer [#16db90d] [ci skip] | ||||
| * | | add missing changelog entry. refer [#16db90d] [ci skip] | Kuldeep Aggarwal | 2014-06-11 | 1 | -0/+4 |
|/ / | |||||
* | | remove deprecated code. Rely on `describe` provided by minitest | Aaron Patterson | 2014-06-10 | 1 | -24/+0 |
| | | |||||
* | | Merge pull request #15621 from sgrif/sg-column-type-decorations | Rafael Mendonça França | 2014-06-10 | 2 | -2/+1 |
|\ \ | | | | | | | No need to decorate columns twice | ||||
| * | | No need to decorate columns twice | Sean Griffin | 2014-06-10 | 2 | -2/+1 |
| | | | | | | | | | | | | | | | | | | | | | We never want result types to override column types, and `decorate_columns` can only affect column types. No need to go through the decoration multiple times, we can just exclude the column types from the result types instead. | ||||
* | | | Merge pull request #15619 from aditya-kapoor/fix-js-doc | Rafael Mendonça França | 2014-06-10 | 1 | -1/+7 |
|\ \ \ | | | | | | | | | [ci skip] Fix doc for javascript_helper | ||||
| * | | | [ci skip] Fix doc for javascript_helper | Aditya Kapoor | 2014-06-11 | 1 | -1/+7 |
| | | | | |||||
* | | | | Merge pull request #15620 from aditya-kapoor/correct-bundler-link | Zachary Scott | 2014-06-10 | 1 | -4/+3 |
|\ \ \ \ | |/ / / |/| | | | Correct Bundler link [ci skip] | ||||
| * | | | Correct Bundler link [ci skip] | Aditya Kapoor | 2014-06-11 | 1 | -4/+3 |
|/ / / |