| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
| |
|
|\
| |
| | |
Fix redis store clear keys outside the namespace
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Namespace not working in RedisCacheStore#clear method. Bacause
namespace = merged_options(options)[namespace]
is always nil, Correct is
namespace = merged_options(options)[:namespace]
|
|\ \
| |/
|/| |
Add missing `require "benchmark"`
|
|/ |
|
|\
| |
| | |
Fix broken nodocs
|
| |
| |
| |
| |
| | |
This commit fixes all references in the codebase missing a trailing :,
which causes the nodoc not to actually work :) [skip ci]
|
|\ \
| |/
|/|
| |
| | |
raderj89/jaredrader/update-docs-ActiveJob__Serializers__ObjectSerializer#deserialize-for-pr
fix spelling in docs for ActiveJob::Serializers::ObjectSerializer#deserialize
|
| | |
|
| | |
|
|\ \
| | |
| | | |
Add .keep exception for storage folder
|
| | |
| | |
| | | |
Fixes https://github.com/rails/rails/issues/32546 by including the `.keep` file in the .gitignore, bringing the `storage` folder in line with the `tmp` and `log` folders.
|
|\ \ \
| | | |
| | | | |
Update security.md with latest underground market prices
|
| |/ /
| | |
| | | |
Updated underground market prices according to the 2017 Symantec ISTR (was previously citing the 2008 report)
|
|/ /
| |
| |
| | |
Legit, but really an excuse to trigger the master hook in the docs server.
|
|/
|
|
|
|
|
|
|
|
| |
`SecureRandom.byes` was added in Ruby 2.4. So, 5-2-stable build is broken
because using `SecureRandom.bytes`.
https://travis-ci.org/rails/rails/jobs/365740667
Also, `SecureRandom.byes` seems to an undocumented method.
If need random binary strings, should use `SecureRandom.random_bytes`.
https://github.com/ruby/ruby/blob/trunk/lib/securerandom.rb
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Ok so apparently you can not just have a `default:` that manually is
merged in with YAML but you can also have a special "shared" config that
is automatically merged.
Example:
```
shared:
adapter: mysql2
host: <%= ENV["DB_HOST"] || "localhost" %>
username: root
connect_timeout: 0
pool: 100
reconnect: true
development:
database: development_db
adapter: mysql2
```
To fix, only create a DatabaseConfig object when an adapter, database,
or URL are present.
The merging behavior for `shared` doesn't work with a 3-tier config. I
don't think it worked before this change either - since Rails doesn't
know which point to merge it in. That's something we may have to fix
with the refactoring I'm working on.
|
|\
| |
| | |
Add WebSocket URI support to CSP DSL mappings
|
| | |
|
|\ \
| | |
| | | |
Don't doc _original_sum_with_required_identity
|
| |/
| |
| |
| | |
It's not public API so don't document it.
|
|\ \
| |/
|/| |
Fix ActiveSupport::Cache compression
|
| |
| |
| |
| | |
(See previous commit for a description of the issue)
|
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
On Rails 5.2, when compression is enabled (which it is by default),
the actual value being written to the underlying storage is actually
_bigger_ than the uncompressed raw value.
This is because the `@marshaled_value` instance variable (typically)
gets serialized with the entry object, which is then written to the
underlying storage, essentially double-storing every value (once
uncompressed, once possibly compressed).
This regression was introduced in #32254.
|
|\ \
| | |
| | |
| | |
| | | |
teddywing/active-support-cache-store--fix-end-tag-in-read-method-documentation
Cache::Store#read: Fix fixed-width end tag in docs
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Fix the ending `</tt>` tag for `:expires_in`. Otherwise, the "or" is
set in fixed-width also.
* Re-wrap paragraph to 80 columns.
[ci skip]
|
|\ \ \
| |/ /
|/| | |
Define callbacks on descendants.
|
| | |
| | |
| | |
| | | |
Addresses feedback from https://github.com/rails/rails/pull/31913#issuecomment-365983580
|
| | |
| | |
| | |
| | | |
We set callbacks on all descendants, so we need to make sure that they are also defined on all descendants as well.
|
|\ \ \
| |_|/
|/| | |
Fix MySpace Samy worm link [ci skip]
|
|/ /
| |
| |
| | |
The old link https://samy.pl/popular/tech.html is 404 not found.
|
|\ \
| | |
| | |
| | |
| | | |
lsylvester/fix-immutable-relation-error-with-http-caching-and-collection-caching
Fix ActiveRecord::ImmutableRelation is raised when collection caching and HTTP caching are used together
|
|/ /
| |
| |
| | |
effect the arel and the arel may already be generated by fresh_when
|
|\ \
| | |
| | | |
Use frozen string literal
|
| | | |
|
|/ /
| |
| |
| |
| |
| | |
See https://github.com/rails/rails-docs-server/pull/8 for reason.
[ci skip]
|
| |
| |
| |
| |
| | |
The issue was fixed with https://github.com/petergoldstein/dalli/pull/679,
and a new version containing that fix was released.
|
|\ \
| | |
| | | |
Fix turbolinks warning in railties test
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Upgrade turbolinks from v5.0.1 to v5.1.0
* Fix warning in railties test
lib/turbolinks/assertions.rb:17:
warning: assigned but unused variable - visit_action
|
|\ \ \
| | | |
| | | | |
Include default headers by default in API mode
|
| | | |
| | | |
| | | |
| | | | |
ActionDispatch's default headers are now moved into their own module that are by default included in both Base and API. This allows API-mode applications to take advantage of the default security headers, as well as providing an easy way to add more.
|
| | | |
| | | |
| | | |
| | | | |
[ci skip]
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
We don't want people to jump from the last release in the previous
series (4.2) straing to the first release in the current series that is
support (5.1), so we should be supporting the entire series for severe
security issues.
This will not be a problem because usually we only have 3 releases in a
series and backporting patches inside the same series is not harder than
backporting to a previous series.
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
Add explicit global namespace to `Rails::TestUnit::Runner` to resolve a
namespace conflict between `minitest-rails` and Rails test runner.
Fixes #31324
|
| | | |
| | | |
| | | |
| | | |
| | | |
| | | |
| | | | |
There's no reason to block future versions of Capybara since we don't
_know_ they are going to break. How will we know if we have a
conservative option set? This change prevents us from blocking users who
want to upgrade in the future.
|
|\ \ \ \
| | | | |
| | | | | |
Active Storage: Always exclude JSON root from direct_uploads#create response
|
|/ / / /
| | | |
| | | |
| | | |
| | | |
| | | | |
The JavaScript component expects a bare response.
Fixes #32365
|
| | | |
| | | |
| | | |
| | | | |
It is the last major release series.
|
|\ \ \ \
| | | | |
| | | | | |
Prevent changes_to_save from mutating attributes
|