Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | update rendering comment | Arthur Neves | 2016-03-14 | 1 | -1/+1 |
| | | | | [skip ci] | ||||
* | Add missing require to file | Arthur Neves | 2016-03-01 | 1 | -0/+1 |
| | |||||
* | Complete work on 3.2 for render_data_leak patch. | Arthur Neves | 2016-02-29 | 1 | -2/+1 |
| | | | | | | | | | | | | | | | | | | Render could leak access to external files before this patch. A previous patch(CVE-2016-0752), attempted to fix this. However the tests were miss-placed outside the TestCase subclass, so they were not running. We should allow :file to be outside rails root, but anything else must be inside the rails view directory. The implementation has changed a bit though. Now the patch is more similar with the 4.x series patches. Now `render 'foo/bar'`, will add a special key in the options hash, and not use the :file one, so when we look up that file, we don't set the fallbacks, and only lookup a template, to constraint the folders that can be accessed. CVE-2016-2097 | ||||
* | Fix #5440 - multiple render_to_string breaks partials formats | Piotr Sarnacki | 2012-03-17 | 1 | -0/+1 |
| | | | | | | | | | This fixes situation where rendering template to string sets `rendered_format` to the format rendered there. This is ok to have consistent formats rendered in partials, but it breaks on next renders if format is explicitly set or on last render where default format does not necessarily need to be the format of first rendered template. | ||||
* | Remove unecessary config_accessors. | José Valim | 2011-12-24 | 1 | -7/+1 |
| | |||||
* | Some small optimizations and improvements to benchmark code. | José Valim | 2011-12-08 | 1 | -6/+1 |
| | |||||
* | TestCase should respect the view_assigns API instead of pulling variables on ↵ | José Valim | 2011-10-02 | 1 | -2/+2 |
| | | | | its own. | ||||
* | More updates to ivars list. | José Valim | 2011-05-06 | 1 | -1/+1 |
| | |||||
* | Move variables to underscore format, update protected instance variables list. | José Valim | 2011-05-06 | 1 | -6/+22 |
| | |||||
* | More AV::Base cleanup. | José Valim | 2011-05-04 | 1 | -15/+3 |
| | |||||
* | Move prefixes to view paths as they are now a lookup context dependency. | José Valim | 2011-05-04 | 1 | -21/+0 |
| | |||||
* | no @controller dependency in Renderers. | Nick Sutterer | 2011-05-04 | 1 | -1/+1 |
| | |||||
* | Add a shared entry point for AV and AC render which can be used as extension ↵ | José Valim | 2011-05-03 | 1 | -5/+1 |
| | | | | in the future. | ||||
* | Introduce view renderer. | José Valim | 2011-05-01 | 1 | -2/+11 |
| | |||||
* | Do not inherit from Rack::Response, remove a shit-ton of unused code. | José Valim | 2011-04-19 | 1 | -7/+1 |
| | |||||
* | Slightly reorganize rendering stack. | José Valim | 2011-04-18 | 1 | -6/+25 |
| | |||||
* | render :once, YAGNI. | José Valim | 2011-04-15 | 1 | -1/+1 |
| | |||||
* | Fix missing requires in Action Mailer | Prem Sichanugrist | 2011-04-13 | 1 | -0/+1 |
| | | | | | | This made the isolated test failed on CI server. Signed-off-by: Xavier Noria <fxn@hashref.com> | ||||
* | render_to_string must ensure that response_body | Neeraj Singh | 2011-01-25 | 1 | -1/+1 |
| | | | | | | | | is nil [ #5875 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Solve SystemStackError when changing locale inside ActionMailer [#5329 ↵ | José Valim | 2011-01-19 | 1 | -4/+5 |
| | | | | state:resolved] | ||||
* | Speed up template inheritance and remove template inheritance option | wycats | 2010-12-26 | 1 | -16/+17 |
| | |||||
* | #948 make template inheritance optional | artemave | 2010-12-26 | 1 | -4/+12 |
| | |||||
* | #948 template_inheritance | artemave | 2010-12-26 | 1 | -4/+12 |
| | |||||
* | Avoid range object creation | Santiago Pastorino | 2010-11-20 | 1 | -1/+1 |
| | |||||
* | Fix indentation | Santiago Pastorino | 2010-11-19 | 1 | -1/+1 |
| | |||||
* | Don't merge just directly add to the action to the :partial key | Santiago Pastorino | 2010-11-19 | 1 | -1/+1 |
| | |||||
* | Useless assignation | Santiago Pastorino | 2010-11-19 | 1 | -1/+1 |
| | |||||
* | Allow generated url helpers to be overriden [#5243 state:resolved] | Andrew White | 2010-10-26 | 1 | -5/+5 |
| | |||||
* | Add support to render :once. | José Valim | 2010-10-10 | 1 | -1/+1 |
| | | | | This will be used internally by sprockets to ensure requires are executed just once. | ||||
* | render :template => 'foo/bar.json' now works as it should. | José Valim | 2010-10-07 | 1 | -1/+0 |
| | |||||
* | Make collection rendering faster. | José Valim | 2010-10-07 | 1 | -1/+1 |
| | |||||
* | Avoid (@_var ||= nil) pattern by using initialize methods and ensuring ↵ | José Valim | 2010-09-29 | 1 | -1/+1 |
| | | | | everyone calls super as expected. | ||||
* | Avoid more uninitialized variable warnings. | Emilio Tagua | 2010-09-28 | 1 | -1/+1 |
| | |||||
* | Add mounted_helpers to routes | Piotr Sarnacki | 2010-09-03 | 1 | -0/+1 |
| | | | | | | | | | | | | | | | | mounted_helpers are a bit similar to url_helpers. They're automatically included in controllers for Rails.application and each of mounted Engines. Mounted helper allows to call url_for and named helpers for given application. Given Blog::Engine mounted as blog_engine, there are 2 helpers defined: app and blog_engine. You can call routes for app and engine using those helpers: app.root_url app.url_for(:controller => "foo") blog_engine.posts_path blog_engine.url_for(@post) | ||||
* | Unify routes naming by renaming router to routes | Piotr Sarnacki | 2010-07-02 | 1 | -2/+2 |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Changes made while working on upgrading cells to Rails 3 | wycats | 2010-06-02 | 1 | -0/+1 |
| | |||||
* | Fix ActionMailer test broken in 99d54599215c2a8cea7e57f609e8e578043d71b2 | José Valim | 2010-04-12 | 1 | -2/+1 |
| | |||||
* | render_to_string should have the identical signature as render | wycats | 2010-04-04 | 1 | -9/+8 |
| | |||||
* | Well that was a bust | wycats | 2010-03-18 | 1 | -1/+5 |
| | |||||
* | We seem to have removed the URL helpers from ActionView subclasses... | wycats | 2010-03-18 | 1 | -0/+6 |
| | |||||
* | Each controller class has it's own view context subclass. This removes the ↵ | Carlhuda | 2010-03-18 | 1 | -4/+24 |
| | | | | need for ActionView::Base.for_controller | ||||
* | Return a valid Rack response from bare ActionController::Metal | Carlhuda | 2010-03-18 | 1 | -13/+1 |
| | |||||
* | All tests pass without memoizing view_context | Carlhuda | 2010-03-18 | 1 | -3/+13 |
| | |||||
* | Ensure json is loaded before using responders. | José Valim | 2010-03-17 | 1 | -1/+0 |
| | |||||
* | Remove unneeded AV::Base and AV::Template monkey-patches | Carlhuda | 2010-03-17 | 1 | -0/+1 |
| | |||||
* | Finish cleaning up rendering stack from views and move assigns evaluation to ↵ | José Valim | 2010-03-12 | 1 | -8/+8 |
| | | | | controller (so plugins and/or controllers can overwrite just one method). | ||||
* | Optimize and clean up how details key get expired. | José Valim | 2010-03-10 | 1 | -0/+28 |
| | |||||
* | Clean up the API required from ActionView::Template. | José Valim | 2010-03-09 | 1 | -1/+1 |
| | |||||
* | Clean LookupContext API. | José Valim | 2010-03-08 | 1 | -1/+1 |
| | |||||
* | Move details to lookup_context and make resolvers use the cache key. | José Valim | 2010-03-08 | 1 | -10/+0 |
| |