| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | | | | | | | | | | | | | use hash defaults to dry up ||= calls | Aaron Patterson | 2011-02-11 | 1 | -27/+22 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | refactor fixtures to do less work in the constructor | Aaron Patterson | 2011-02-11 | 2 | -11/+24 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | favor composition over inheritence. use AS::OrderedHash rather than omap | Aaron Patterson | 2011-02-11 | 2 | -20/+25 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Fixes an issue when decoding a json string which looks like a date but is ↵ | Josh Kalderimis | 2011-02-11 | 4 | -3/+23 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | invalid. This DateTime parse error is now caught and the original string is instead passed back [#6286 state:resolved] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
| | * | | | | | | | | | | | | | Add missing deprecation require | Carlos Antonio da Silva | 2011-02-11 | 1 | -0/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
| | * | | | | | | | | | | | | | Remove misleading reference to polymorphic_url. | José Valim | 2011-02-11 | 1 | -2/+0 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | fixing tests on 1.8, using a list of lists because order is important | Aaron Patterson | 2011-02-10 | 2 | -2/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | simplify bind parameter logging | Aaron Patterson | 2011-02-10 | 2 | -4/+2 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | bind parameters are logged to debug log | Aaron Patterson | 2011-02-10 | 2 | -6/+48 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | test cases for bind parameter logging | Aaron Patterson | 2011-02-10 | 1 | -0/+56 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Removed Array#safe_join in AS core_ext and moved it to a view helper with ↵ | Josh Kalderimis | 2011-02-10 | 7 | -116/+70 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the same same. This also changes how safe_join works, if items or the separator are not html_safe they are html_escape'd, a html_safe string is always returned. Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
| | * | | | | | | | | | | | | | Revert "Removed Array#safe_join in AS core_ext and moved it to a view helper ↵ | José Valim | 2011-02-10 | 7 | -97/+116 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | with the same same." Applied the wrong version. This reverts commit 98c0c5db50a7679b3d58769ac22cb0a27a62c930. | |||||
| | * | | | | | | | | | | | | | Removed Array#safe_join in AS core_ext and moved it to a view helper with ↵ | Josh Kalderimis | 2011-02-10 | 7 | -116/+97 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the same same. | |||||
| | * | | | | | | | | | | | | | Corrected the html_safe implementation for Array. Moved the html safe ↵ | Josh Kalderimis | 2011-02-10 | 2 | -20/+35 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version of join to its own method (safe_join) as not to degrade the performance of join for unrelated html_safe use. [#6298 state:resolved] | |||||
| | * | | | | | | | | | | | | | Initial html_safe implemention for Array | Paul Hieromnimon | 2011-02-10 | 2 | -0/+60 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | log method takes an option list of bind values | Aaron Patterson | 2011-02-09 | 4 | -8/+10 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | fanout unsubscribe only accepted one argument, so taking *args here is ↵ | Aaron Patterson | 2011-02-09 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | probably bad | |||||
| | * | | | | | | | | | | | | | just use an attr_accessor so we do not pay ||= on every notification call | Aaron Patterson | 2011-02-09 | 2 | -7/+10 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | fixing indentation | Aaron Patterson | 2011-02-09 | 1 | -4/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | speed up notification publishing by writing the delegate method | Aaron Patterson | 2011-02-09 | 1 | -1/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | rawr, mysql, mysql2, why do you hate me. :'( | Aaron Patterson | 2011-02-09 | 1 | -2/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Fixed a bug where ActiveResource::HttpMock would not replace an existing ↵ | Josh Bassett | 2011-02-09 | 2 | -5/+39 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | response when passing a block to the respond_to method. Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
| | * | | | | | | | | | | | | | Override attributes_protected_by_default when has_secure_password is called. | Tsutomu Kuroda | 2011-02-09 | 4 | -2/+38 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | attr_protected should not be called, because it nullifies the mass assignment protection that has been set by attr_accessible. Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | |||||
| | * | | | | | | | | | | | | | removed some duplication from LH issue 5505 regarding AR touch and ↵ | Josh Kalderimis | 2011-02-09 | 2 | -9/+11 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | optimistic locking [#5505 state:resolved] Signed-off-by: Santiago Pastorino and José Ignacio Costa <santiago+jose@wyeworks.com> | |||||
| | * | | | | | | | | | | | | | The optimistic lock column should be increased when calling touch | Franck Verrot | 2011-02-09 | 3 | -0/+16 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Santiago Pastorino and José Ignacio Costa <santiago+jose@wyeworks.com> | |||||
| | * | | | | | | | | | | | | | use parenthesis so limit works on all dbs | Aaron Patterson | 2011-02-09 | 1 | -6/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | now that the API guidelines are a guide, it is enough to assert that the ↵ | Xavier Noria | 2011-02-09 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | names of Rails components have a space, no need to say it was checked with David in the past | |||||
| | * | | | | | | | | | | | | | removing text-format in favor of a more simple solution | Aaron Patterson | 2011-02-09 | 3 | -13/+19 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | bugfix for serialized_attributes to be class specific | Raimonds Simanovskis | 2011-02-09 | 2 | -1/+8 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | previously serialized_attributes were kept as class attribute of ActiveRecord::Base - if some attribute was defined as serialized in one subclass then it was serialized in all other subclasses as well (if it had the same name) | |||||
| | * | | | | | | | | | | | | | implementing include? on AM::Errors | Aaron Patterson | 2011-02-09 | 2 | -0/+11 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | text-format requires text-hyphen, which needs ruby 1.8 | Piotr Sarnacki | 2011-02-09 | 1 | -3/+1 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | we do not need message to be an array | Aaron Patterson | 2011-02-09 | 1 | -9/+8 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Allow limit values to accept an ARel SQL literal. | Ken Collins | 2011-02-09 | 2 | -5/+15 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | use map rather than array concatenation | Aaron Patterson | 2011-02-09 | 1 | -9/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | favor composition over inheritence | Aaron Patterson | 2011-02-09 | 1 | -9/+33 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | use 1 call to concat rather than calling << n times | Aaron Patterson | 2011-02-09 | 1 | -4/+4 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Application's assets should have higher priority than engine's ones | Piotr Sarnacki | 2011-02-09 | 1 | -1/+4 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [#6388 state:resolved] | |||||
| | * | | | | | | | | | | | | | Failing test for #6388 | Eric Allam | 2011-02-09 | 1 | -0/+28 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Add missing require | Santiago Pastorino and Emilio Tagua | 2011-02-09 | 1 | -1/+2 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | fix for AS Gzip returning a UTF-8 string in Ruby 1.9 when it is actually ↵ | Josh Kalderimis | 2011-02-09 | 2 | -0/+14 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | binary [#6386 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
| | * | | | | | | | | | | | | | comma limits do not make sense on oracle or pg | Aaron Patterson | 2011-02-08 | 1 | -3/+5 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | reduce string append funcalls | Aaron Patterson | 2011-02-08 | 1 | -3/+3 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | redcloth does not install on 1.9.3 | Aaron Patterson | 2011-02-08 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | primary keys should not be cleared on cache clear, fixing oracle tests | Aaron Patterson | 2011-02-08 | 5 | -6/+15 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Make rails.js include the CSRF token in the X-CSRF-Token header with every ↵ | Michael Koziarski | 2011-02-08 | 1 | -0/+16 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ajax request. | |||||
| | * | | | | | | | | | | | | | Change the CSRF whitelisting to only apply to get requests | Michael Koziarski | 2011-02-08 | 3 | -147/+86 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets. To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header: X-CSRF-Token: ... This fixes CVE-2011-0447 | |||||
| | * | | | | | | | | | | | | | limit() should sanitize limit values | Aaron Patterson | 2011-02-08 | 3 | -16/+50 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes CVE-2011-0448 | |||||
| | * | | | | | | | | | | | | | Use Mime::Type references. | José Valim | 2011-02-08 | 7 | -6/+26 | |
| | | | | | | | | | | | | | | | ||||||
| | * | | | | | | | | | | | | | Ensure render is case sensitive even on systems with case-insensitive ↵ | José Valim | 2011-02-08 | 2 | -3/+22 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | filesystems. This fixes CVE-2011-0449 | |||||
| | * | | | | | | | | | | | | | Be sure to javascript_escape the email address to prevent apostrophes ↵ | Michael Koziarski | 2011-02-08 | 2 | -9/+11 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | inadvertently causing javascript errors. This fixes CVE-2011-0446 | |||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Eilertsens Kodeknekkeri |
| aboutsummaryrefslogtreecommitdiffstats |