aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/abstract_controller/rendering.rb
Commit message (Collapse)AuthorAgeFilesLines
* update rendering commentArthur Neves2016-03-141-1/+1
| | | | [skip ci]
* Add missing require to fileArthur Neves2016-03-011-0/+1
|
* Complete work on 3.2 for render_data_leak patch.Arthur Neves2016-02-291-2/+1
| | | | | | | | | | | | | | | | | | Render could leak access to external files before this patch. A previous patch(CVE-2016-0752), attempted to fix this. However the tests were miss-placed outside the TestCase subclass, so they were not running. We should allow :file to be outside rails root, but anything else must be inside the rails view directory. The implementation has changed a bit though. Now the patch is more similar with the 4.x series patches. Now `render 'foo/bar'`, will add a special key in the options hash, and not use the :file one, so when we look up that file, we don't set the fallbacks, and only lookup a template, to constraint the folders that can be accessed. CVE-2016-2097
* Fix #5440 - multiple render_to_string breaks partials formatsPiotr Sarnacki2012-03-171-0/+1
| | | | | | | | | This fixes situation where rendering template to string sets `rendered_format` to the format rendered there. This is ok to have consistent formats rendered in partials, but it breaks on next renders if format is explicitly set or on last render where default format does not necessarily need to be the format of first rendered template.
* Remove unecessary config_accessors.José Valim2011-12-241-7/+1
|
* Some small optimizations and improvements to benchmark code.José Valim2011-12-081-6/+1
|
* TestCase should respect the view_assigns API instead of pulling variables on ↵José Valim2011-10-021-2/+2
| | | | its own.
* More updates to ivars list.José Valim2011-05-061-1/+1
|
* Move variables to underscore format, update protected instance variables list.José Valim2011-05-061-6/+22
|
* More AV::Base cleanup.José Valim2011-05-041-15/+3
|
* Move prefixes to view paths as they are now a lookup context dependency.José Valim2011-05-041-21/+0
|
* no @controller dependency in Renderers.Nick Sutterer2011-05-041-1/+1
|
* Add a shared entry point for AV and AC render which can be used as extension ↵José Valim2011-05-031-5/+1
| | | | in the future.
* Introduce view renderer.José Valim2011-05-011-2/+11
|
* Do not inherit from Rack::Response, remove a shit-ton of unused code.José Valim2011-04-191-7/+1
|
* Slightly reorganize rendering stack.José Valim2011-04-181-6/+25
|
* render :once, YAGNI.José Valim2011-04-151-1/+1
|
* Fix missing requires in Action MailerPrem Sichanugrist2011-04-131-0/+1
| | | | | | This made the isolated test failed on CI server. Signed-off-by: Xavier Noria <fxn@hashref.com>
* render_to_string must ensure that response_bodyNeeraj Singh2011-01-251-1/+1
| | | | | | | | is nil [ #5875 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com>
* Solve SystemStackError when changing locale inside ActionMailer [#5329 ↵José Valim2011-01-191-4/+5
| | | | state:resolved]
* Speed up template inheritance and remove template inheritance optionwycats2010-12-261-16/+17
|
* #948 make template inheritance optionalartemave2010-12-261-4/+12
|
* #948 template_inheritanceartemave2010-12-261-4/+12
|
* Avoid range object creationSantiago Pastorino2010-11-201-1/+1
|
* Fix indentationSantiago Pastorino2010-11-191-1/+1
|
* Don't merge just directly add to the action to the :partial keySantiago Pastorino2010-11-191-1/+1
|
* Useless assignationSantiago Pastorino2010-11-191-1/+1
|
* Allow generated url helpers to be overriden [#5243 state:resolved]Andrew White2010-10-261-5/+5
|
* Add support to render :once.José Valim2010-10-101-1/+1
| | | | This will be used internally by sprockets to ensure requires are executed just once.
* render :template => 'foo/bar.json' now works as it should.José Valim2010-10-071-1/+0
|
* Make collection rendering faster.José Valim2010-10-071-1/+1
|
* Avoid (@_var ||= nil) pattern by using initialize methods and ensuring ↵José Valim2010-09-291-1/+1
| | | | everyone calls super as expected.
* Avoid more uninitialized variable warnings.Emilio Tagua2010-09-281-1/+1
|
* Add mounted_helpers to routesPiotr Sarnacki2010-09-031-0/+1
| | | | | | | | | | | | | | | | mounted_helpers are a bit similar to url_helpers. They're automatically included in controllers for Rails.application and each of mounted Engines. Mounted helper allows to call url_for and named helpers for given application. Given Blog::Engine mounted as blog_engine, there are 2 helpers defined: app and blog_engine. You can call routes for app and engine using those helpers: app.root_url app.url_for(:controller => "foo") blog_engine.posts_path blog_engine.url_for(@post)
* Unify routes naming by renaming router to routesPiotr Sarnacki2010-07-021-2/+2
| | | | Signed-off-by: José Valim <jose.valim@gmail.com>
* Changes made while working on upgrading cells to Rails 3wycats2010-06-021-0/+1
|
* Fix ActionMailer test broken in 99d54599215c2a8cea7e57f609e8e578043d71b2José Valim2010-04-121-2/+1
|
* render_to_string should have the identical signature as renderwycats2010-04-041-9/+8
|
* Well that was a bustwycats2010-03-181-1/+5
|
* We seem to have removed the URL helpers from ActionView subclasses...wycats2010-03-181-0/+6
|
* Each controller class has it's own view context subclass. This removes the ↵Carlhuda2010-03-181-4/+24
| | | | need for ActionView::Base.for_controller
* Return a valid Rack response from bare ActionController::MetalCarlhuda2010-03-181-13/+1
|
* All tests pass without memoizing view_contextCarlhuda2010-03-181-3/+13
|
* Ensure json is loaded before using responders.José Valim2010-03-171-1/+0
|
* Remove unneeded AV::Base and AV::Template monkey-patchesCarlhuda2010-03-171-0/+1
|
* Finish cleaning up rendering stack from views and move assigns evaluation to ↵José Valim2010-03-121-8/+8
| | | | controller (so plugins and/or controllers can overwrite just one method).
* Optimize and clean up how details key get expired.José Valim2010-03-101-0/+28
|
* Clean up the API required from ActionView::Template.José Valim2010-03-091-1/+1
|
* Clean LookupContext API.José Valim2010-03-081-1/+1
|
* Move details to lookup_context and make resolvers use the cache key.José Valim2010-03-081-10/+0
|