rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Expand)	Author	Age	Files	Lines
*	Build fix for ActionMailer	Arun Agrawal	2012-09-14	1	-0/+1
*	Implement :null_session CSRF protection method	Sergey Nartimov	2012-09-13	1	-22/+70
*	load active_support/core_ext/class/attribute in active_support/rails	Xavier Noria	2012-08-02	1	-1/+0
*	copy editing [ci skip]	Vijay Dev	2012-06-14	1	-4/+7
*	on CSRF whitelisting the argument for :if must be a symbol	Daniel Lopes	2012-06-07	1	-1/+1
*	fix typos on the CSRF whitelisting doc	Daniel Lopes	2012-06-07	1	-3/+3
*	Document the CSRF whitelisting on get requests	Daniel Lopes	2012-06-07	1	-5/+16
*	Removing ==Examples and last blank lines of docs from actionpack	Francesco Rodriguez	2012-05-15	1	-2/+0
*	CSRF messages are no longer controlled by 422.html because InvalidAuthenticit...	Tony Primerano	2012-03-28	1	-1/+0
*	configure how unverified request will be handled	Sergey Nartimov	2012-03-09	1	-2/+18
*	removed warning because logger.warn differentiate the warings	Karunakar (Ruby)	2012-01-05	1	-1/+1
*	Change log level for CSRF token verification warning	Mike Dillon	2011-09-10	1	-1/+1
*	Changed a few instances of of words in the API docs written in British Englis...	Oemuer Oezkir	2011-07-24	1	-1/+1
*	TODO fix explicitly loading exceptations, autoload removed	Vishnu Atrai	2011-07-11	1	-0/+1
*	document handle_unverified_request method	Vijay Dev	2011-07-02	1	-0/+2
*	update doc about resetting the session in case of authenticity token mismatch	Vijay Dev	2011-07-01	1	-6/+5
*	Merge branch 'master' of git://github.com/lifo/docrails	Xavier Noria	2011-05-25	1	-3/+3
\|\
\| *	Remove extra white spaces on ActionPack docs.	Sebastian Martinez	2011-05-23	1	-3/+3
* \|	Replace references to ActiveSupport::SecureRandom with just SecureRandom, and...	Jon Leighton	2011-05-23	1	-1/+1
\|/
*	Warn if we cannot verify CSRF token authenticity	José Valim	2011-05-09	1	-1/+4
*	Prepend the CSRF filter to make it much more difficult to execute application...	Michael Koziarski	2011-02-23	1	-1/+1
*	Change the CSRF whitelisting to only apply to get requests	Michael Koziarski	2011-02-08	1	-10/+9
*	Add explicit statement that verify_authenticity_token can be turned off for a...	Ryan Bigg	2010-11-27	1	-3/+7
*	revises implementation and documentation of csrf_meta_tags, and aliases csrf_...	Xavier Noria	2010-09-11	1	-2/+2
*	Revert "Setup explicit requires for files with exceptions. Removed them from ...	José Valim	2010-09-02	1	-1/+0
*	Setup explicit requires for files with exceptions. Removed them from autoload...	Łukasz Strzałkowski	2010-09-02	1	-0/+1
*	Reflect how CSRF protection now works and refer to the Security Guide for mor...	Joost Baaij	2010-08-26	1	-36/+18
*	Fix a bunch of minor spelling mistakes	Evgeniy Dolzhenko	2010-06-11	1	-1/+1
*	Changes made while working on upgrading cells to Rails 3	wycats	2010-06-02	1	-0/+1
*	Clean up the config object in ActionPack. Create config_accessor which just d...	José Valim	2010-04-22	1	-74/+44
*	ActionController::Base.request_forgery_protection_token should actually be th...	Carl Lerche	2010-03-11	1	-1/+1
*	Move request forgery protection configuration to the AC config object	Carl Lerche	2010-03-08	1	-4/+41
*	Convert to class_attribute	Jeremy Kemper	2010-02-01	1	-2/+4
*	Use extlib_inheritable_accessor in request_forgery_protection.rb.	Carl Lerche	2009-12-29	1	-1/+1
*	Merge Session stuff into RackConvenience	Joshua Peek	2009-12-20	1	-16/+16
*	Extract form_authenticity_param instance method so it's overridable in subcla...	Jeremy Kemper	2009-11-17	1	-0/+5
*	Reorganize CSRF a bit	Yehuda Katz	2009-10-28	1	-33/+23
*	Rename /base to /metal and make base.rb and metal.rb top-level to reflect the...	Yehuda Katz	2009-08-06	1	-0/+118