aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/metal
Commit message (Expand)AuthorAgeFilesLines
* remove unused #await_closeSergey Alekseev2014-12-041-6/+0
* Pass symbol as an argument instead of a blockErik Michaels-Ober2014-11-291-1/+1
* Merge pull request #17186 from tgxworld/header_authentication_tokenMatthew Draper2014-11-271-2/+9
|\
| * Allow authentication header to not have to specify 'token=' key.Guo Xiang Tan2014-10-101-2/+9
* | Wrap code snippets in +, not backticks, in sdocclaudiob2014-11-202-5/+5
* | Use request method instead of ActionDispatch::Request#request_method instead ...Ilya Katz2014-11-201-1/+1
* | Removed documentation that still mentioned using respond_with in placeRobert Evans2014-11-052-18/+5
* | Call gsub with a Regexp instead of a String for better performancePablo Herrero2014-11-011-1/+1
* | let's warn with heredocsXavier Noria2014-10-281-4/+7
* | UrlGenerationError are not catched as 404 anymoreJean Boussier2014-10-271-1/+1
* | Use AS secure_compare for CSRF token comparisonGuillermo Iguaran2014-10-231-2/+2
* | remove duplicate method (_status_code) in action_dispatchAbdelkader Boudih2014-10-191-1/+1
* | Merge pull request #17302 from claudiob/replace-slower-block-call-with-faster...Rafael Mendonça França2014-10-181-2/+2
* | Revert "Replace (slower) block.call with (faster) yield"Zachary Scott2014-10-181-2/+2
* | Replace (slower) block.call with (faster) yieldclaudiob2014-10-181-2/+2
|/
* Rephrasing sentencesNeeraj Singh2014-10-071-2/+2
* Merge branch 'master' of github.com:rails/docrailsVijay Dev2014-09-281-6/+6
|\
| * Consistently markup etag options.Steven Harman2014-09-161-3/+3
| * Consistently capitalize ETag.Steven Harman2014-09-161-3/+3
* | code gardening in ActionController::RenderersXavier Noria2014-09-041-7/+12
|/
* Merge pull request #16570 from bradleybuda/breach-mitigation-mask-csrf-tokenJeremy Kemper2014-08-191-3/+65
|\
| * Auth token mask from breach-mitigation-rails gemBradley Buda2014-08-191-3/+65
* | Merge pull request #16299 from sikachu/ps-safer-ac-paramsJeremy Kemper2014-08-191-3/+84
|\ \
| * | User `#to_hash` instead of calling `super`Prem Sichanugrist2014-08-181-1/+1
| * | Fix failing test on several methods on ParameterPrem Sichanugrist2014-08-181-1/+25
| * | Refactor code to reduce duplicate `self.class.new`Prem Sichanugrist2014-08-181-12/+10
| * | Add missing `Hash` methods to `AC::Parameters`Prem Sichanugrist2014-08-181-0/+40
| * | Make `AC::Params#to_h` return Hash with safe keysPrem Sichanugrist2014-08-181-0/+19
* | | Merge branch 'master' of github.com:rails/docrailsVijay Dev2014-08-191-2/+2
|\ \ \ | |/ / |/| |
| * | Uppercase HTML in docs.Hendy Tanata2014-08-082-9/+9
* | | `responders` 1.x won't do it. Told you to RTFM for details!Godfrey Chan2014-08-171-3/+6
* | | The gem is called 'responders'Godfrey Chan2014-08-171-2/+2
* | | Raise a more helpful error for people who are using these extracted featuresGodfrey Chan2014-08-171-1/+16
* | | Move respond_with to the responders gemJosé Valim2014-08-172-528/+3
* | | When your templates change, browser caches bust automatically.Jeremy Kemper2014-08-172-6/+81
| |/ |/|
* | Pass block for logging.Guo Xiang Tan2014-08-091-4/+6
* | refactor Redirecting so we do not need a controller instanceAaron Patterson2014-08-061-3/+5
|/
* just set the host, no need for another hash allocation / merge!Aaron Patterson2014-08-011-1/+1
* Simplify code branch, remove #tapCarlos Antonio da Silva2014-07-311-7/+6
* Avoid a new hash objectCarlos Antonio da Silva2014-07-311-1/+1
* Fix protect_from_forgery docsDavid Albert2014-07-271-1/+1
* docs, add ref where to find valid `head` status symbols.Yves Senn2014-07-251-0/+2
* Don't accept parameters as argument for redirect to [via @homakov]Santiago Pastorino2014-07-161-0/+1
* Removed single space padding from empty response body.Godfrey Chan2014-07-101-6/+2
* Address CVE-2014-4671 (JSONP Flash exploit)Greg Campbell2014-07-091-1/+1
* Merge pull request #16011 from xjlu/token_and_optionsRafael Mendonça França2014-07-041-1/+1
|\
| * Improve token_and_options regex and testXinjiang Lu2014-07-011-1/+1
* | Change the JSON renderer to enforce the 'JS' Content TypeLucas Mazza2014-07-021-1/+4
|/
* Merge pull request #15933 from rafael/masterRafael Mendonça França2014-06-271-5/+20
|\
| * Improvements per code review.Rafael Chacón2014-06-271-4/+3