rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Expand)	Author	Age	Files	Lines
*	Prepend the CSRF filter to make it much more difficult to execute application...	Michael Koziarski	2011-02-23	1	-1/+1
*	Change the CSRF whitelisting to only apply to get requests	Michael Koziarski	2011-02-08	1	-10/+9
*	Add explicit statement that verify_authenticity_token can be turned off for a...	Ryan Bigg	2010-11-27	1	-3/+7
*	revises implementation and documentation of csrf_meta_tags, and aliases csrf_...	Xavier Noria	2010-09-11	1	-2/+2
*	Revert "Setup explicit requires for files with exceptions. Removed them from ...	José Valim	2010-09-02	1	-1/+0
*	Setup explicit requires for files with exceptions. Removed them from autoload...	Łukasz Strzałkowski	2010-09-02	1	-0/+1
*	Reflect how CSRF protection now works and refer to the Security Guide for mor...	Joost Baaij	2010-08-26	1	-36/+18
*	Fix a bunch of minor spelling mistakes	Evgeniy Dolzhenko	2010-06-11	1	-1/+1
*	Changes made while working on upgrading cells to Rails 3	wycats	2010-06-02	1	-0/+1
*	Clean up the config object in ActionPack. Create config_accessor which just d...	José Valim	2010-04-22	1	-74/+44
*	ActionController::Base.request_forgery_protection_token should actually be th...	Carl Lerche	2010-03-11	1	-1/+1
*	Move request forgery protection configuration to the AC config object	Carl Lerche	2010-03-08	1	-4/+41
*	Convert to class_attribute	Jeremy Kemper	2010-02-01	1	-2/+4
*	Use extlib_inheritable_accessor in request_forgery_protection.rb.	Carl Lerche	2009-12-29	1	-1/+1
*	Merge Session stuff into RackConvenience	Joshua Peek	2009-12-20	1	-16/+16
*	Extract form_authenticity_param instance method so it's overridable in subcla...	Jeremy Kemper	2009-11-17	1	-0/+5
*	Reorganize CSRF a bit	Yehuda Katz	2009-10-28	1	-33/+23
*	Rename /base to /metal and make base.rb and metal.rb top-level to reflect the...	Yehuda Katz	2009-08-06	1	-0/+118