aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/metal
Commit message (Expand)AuthorAgeFilesLines
* Remove unnecessary `Hash.method_defined?(:dig)` checkingyuuji.yaginuma2018-03-111-13/+11
* Always yield a CSP policy instanceAndrew White2018-03-081-1/+5
* Add the ability to disable the global CSP in a controllerAndrew White2018-03-081-1/+5
* Add support for automatic nonce generation for Rails UJSAndrew White2018-02-191-0/+18
* Rails 6 requires Ruby 2.4.1+Jeremy Daer2018-02-171-1/+0
* Remove usage of strip_heredoc in the framework in favor of <<~Rafael Mendonça França2018-02-161-2/+1
* Fix typos, update documentationJames Lovejoy2018-01-111-2/+2
* Add missing require for `strip_heredoc`Peter Wagenet2018-01-041-0/+1
* Added reference to default value of `allow_other_host` [ci skip]Prathamesh Sonpatki2017-12-171-1/+1
* [ci skip] update linkDixit Patel2017-12-151-1/+1
* Merge pull request #30780 from JackMc/fix-chrome-referrer-invalidauthenticity...Sean Griffin2017-12-071-0/+10
|\
| * Add a better error message when a "null" Origin header occursJack McCracken2017-11-031-0/+10
* | Yield array from AC::Parameters#each for block with one argDominic Cleal2017-12-061-1/+1
* | Add DSL for configuring Content-Security-Policy headerAndrew White2017-11-271-0/+26
* | Merge pull request #24510 from vipulnsward/make-variable_size_secure_compare-...Rafael Mendonça França2017-11-252-9/+6
|\ \
| * | Changed default behaviour of `ActiveSupport::SecurityUtils.secure_compare`,Vipul A M2017-06-072-9/+6
* | | Update incorrect backtick usage in RDoc to teletypeT.J. Schuck2017-11-222-5/+5
* | | Bump RuboCop to 0.51.0Koichi ITO2017-11-101-1/+1
* | | Show `RequestForgeryProtection` methods in api doc [ci skip]yuuji.yaginuma2017-11-051-0/+1
| |/ |/|
* | checking for nested attributes when attribute names specified to wrap them as...Kelton Manzanares2017-10-251-6/+7
* | Fixed functionality to include method in params_wrapper.rbRyan Perez2017-10-251-0/+7
* | [Action Pack] require => require_relativeAkira Matsuda2017-10-212-2/+2
* | Keep `:api: plugin` methods in the doc [ci skip]Ryuta Kamizono2017-10-201-2/+2
* | Remove unused `UnknownController` classyuuji.yaginuma2017-10-181-3/+0
* | Remove unused `before_filters`yuuji.yaginuma2017-10-151-6/+0
* | Fix some typos.Mike Boone2017-10-101-1/+1
* | Add allow_other_host option to redirect_back methodTim Masliuchenko2017-10-101-7/+16
* | Remove `:api:` tag that has leaked on the doc directly [ci skip]Ryuta Kamizono2017-09-301-4/+0
* | Merge pull request #30493 from koic/fix_cant_modify_frozen_string_error_in_ac...Ryuta Kamizono2017-09-021-1/+1
|\ \
| * | Fix `can't modify frozen String` error in AC::RenderingKoichi ITO2017-09-021-1/+1
* | | Remove unused requireRyuta Kamizono2017-09-011-2/+0
* | | Clarify intentions around method redefinitionsMatthew Draper2017-09-011-1/+1
|/ /
* | Use tt in doc for ActionPack [ci skip]Yoshiyuki Hirano2017-08-262-4/+4
* | Update links to use https link instead of http [ci skip]Yoshiyuki Hirano2017-08-223-6/+6
* | Use frozen string literal in actionpack/Kir Shatrov2017-07-2926-1/+53
* | Merge pull request #29919 from kirs/actionpack-frozen-friendlyRafael França2017-07-241-1/+3
|\ \
| * | Make actionpack frozen string friendlyKir Shatrov2017-07-241-1/+3
* | | Fix typo in API docsRyan Lue2017-07-201-1/+1
* | | Correct API documentation for ActionController::Parameters#deleteRyan Lue2017-07-201-4/+4
|/ /
* | Assign `content_type` only onceyui-knk2017-07-131-2/+2
* | Add ActionController::Base.skip_forgery_protectionLisa Ugray2017-07-101-0/+9
* | Protect from forgery by defaultLisa Ugray2017-07-101-0/+4
* | Merge branch 'master' into require_relative_2017Xavier Noria2017-07-021-7/+2
|\ \
| * \ Merge pull request #29566 from eugeneius/wrap_parameters_queryKasper Timm Hansen2017-07-021-7/+2
| |\ \
| | * | Don't wrap parameters if query parameter existsEugene Kenny2017-06-251-7/+2
| * | | Revert "Merge pull request #29540 from kirs/rubocop-frozen-string"Matthew Draper2017-07-0227-27/+0
| * | | Merge pull request #29540 from kirs/rubocop-frozen-stringMatthew Draper2017-07-0227-0/+27
| |\ \ \
| | * | | Enforce frozen string in RubocopKir Shatrov2017-07-0127-0/+27
| | |/ /
* | / / [Action Controller] require => require_relativeAkira Matsuda2017-07-012-2/+2
|/ / /
* | | Fix format of `ActionController::Parameters#to_s` doc [ci skip]yuuji.yaginuma2017-07-011-0/+1