Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | This cache is not needed | Santiago Pastorino | 2013-02-21 | 1 | -2/+1 | |
| | ||||||
* | Use composition to figure out the forgery protection strategy | Santiago Pastorino | 2013-02-21 | 1 | -9/+27 | |
| | ||||||
* | Rack::Test::UploadedFile is a permitted scalar | Fabio Kreusch | 2013-02-21 | 1 | -3/+4 | |
| | ||||||
* | Fix #9168 Initialize NullCookieJar with all options needed for KeyGenerator | Andrey Chernih | 2013-02-08 | 1 | -1/+1 | |
| | ||||||
* | Missing require hash/keys | Akira Matsuda | 2013-02-01 | 1 | -0/+2 | |
| | ||||||
* | Missing or unneeded require extract_options | Akira Matsuda | 2013-02-01 | 1 | -0/+1 | |
| | ||||||
* | Use \A in Regexps | Egor Homakov | 2013-02-01 | 1 | -1/+1 | |
| | | | | | So, if there is redirect_to params[:q] i can send ?q=javascript:asdf()%0A/localpath Or something more nasty, so please use \A | |||||
* | Merge pull request #9032 from firmhouse/head-breaks-csrf | Santiago Pastorino | 2013-01-28 | 1 | -2/+2 | |
|\ | | | | | Make HEAD work / convert to GET once more | |||||
| * | Added request.head? to forgery protection code | Michiel Sikkes | 2013-01-22 | 1 | -2/+2 | |
| | | ||||||
* | | Integrate Action Pack with Rack 1.5 | Carlos Antonio da Silva | 2013-01-25 | 1 | -3/+4 | |
| | | | | | | | | | | | | All ActionPack and Railties tests are passing. Closes #8891. [Carlos Antonio da Silva + Santiago Pastorino] | |||||
* | | ActionDispatch::Http::UploadedFile is a permitted scalar [Closes #9051] | Xavier Noria | 2013-01-23 | 1 | -2/+5 | |
|/ | ||||||
* | Only check for unpermmited parameters if | Rafael Mendonça França | 2013-01-22 | 1 | -1/+1 | |
| | | | | action_on_unpermitted_parameters is present | |||||
* | avoid creating an object in every call | Xavier Noria | 2013-01-22 | 1 | -1/+2 | |
| | | | | This was a suggestion of @carlosantoniodasilva, thanks! | |||||
* | Refactor grep call to remove .each | Carlos Antonio da Silva | 2013-01-20 | 1 | -1/+1 | |
| | | | | Grep already yields the matching keys to the given block. | |||||
* | Use 1.9 hash style in docs/comments [ci skip] | Carlos Antonio da Silva | 2013-01-20 | 1 | -3/+3 | |
| | ||||||
* | Removing warning: shadowing outer local variable | Arun Agrawal | 2013-01-20 | 1 | -3/+3 | |
| | ||||||
* | strong parameters filters permitted scalars | Xavier Noria | 2013-01-20 | 1 | -22/+92 | |
| | ||||||
* | Restore and adapt the implementation reverted at | Rafael Mendonça França | 2013-01-19 | 1 | -19/+46 | |
| | | | | | | https://github.com/rails/rails/commit/cc1c3c5be061e7572018f734e5239750ab449e3f Now instead of raise, we log by default in development and test | |||||
* | Added ability to raise or log on unpermitted params. | Thomas Drake-Brockman | 2013-01-20 | 1 | -0/+25 | |
| | ||||||
* | Revert "Merge pull request #8989 from robertomiranda/use-rails-4-find-by" | Guillermo Iguaran | 2013-01-18 | 1 | -2/+2 | |
| | | | | | This reverts commit 637a7d9d357a0f3f725b0548282ca8c5e7d4af4a, reversing changes made to 5937bd02dee112646469848d7fe8a8bfcef5b4c1. | |||||
* | User Rails 4 find_by | robertomiranda | 2013-01-18 | 1 | -2/+2 | |
| | ||||||
* | strong parameters exception handling | Brian Alexander | 2013-01-15 | 1 | -6/+0 | |
| | ||||||
* | Revert "log at debug level what line caused the redirect_to" | Carlos Antonio da Silva | 2013-01-15 | 1 | -1/+0 | |
| | | | | | | | | This reverts commit 3fa00070047b5d019d39e691598ee2890283d052. Reason: This message is usually not accurate and annoying: Redirected by ~/.rbenv/versions/1.9.3-p327-perf/lib/ruby/1.9.1/logger.rb:371:in `add'` | |||||
* | Merge branch 'master' of github.com:lifo/docrails | Vijay Dev | 2013-01-09 | 4 | -10/+10 | |
|\ | | | | | | | | | Conflicts: guides/source/getting_started.md | |||||
| * | prefer american spelling of 'behavior' | Gosha Arinich | 2013-01-07 | 1 | -1/+1 | |
| | | ||||||
| * | HTTP 302 means Found, not Moved | Chase DuBois | 2013-01-05 | 1 | -1/+1 | |
| | | ||||||
| * | PUT => PATCH | Akira Matsuda | 2013-01-03 | 1 | -1/+1 | |
| | | ||||||
| * | find_or_create_by is deprecated in AR 4 | Akira Matsuda | 2013-01-02 | 1 | -3/+3 | |
| | | ||||||
| * | Model.scoped is deprecated in favour of Model.all | Akira Matsuda | 2013-01-02 | 1 | -4/+4 | |
| | | ||||||
* | | Revert "unpermitted params" exception -- it's just not going to work. See ↵ | David Heinemeier Hansson | 2013-01-08 | 1 | -49/+4 | |
| | | | | | | | | the discussion on https://github.com/rails/strong_parameters/pull/75. | |||||
* | | Never treat action or controller as unpermitted params | David Heinemeier Hansson | 2013-01-08 | 1 | -6/+15 | |
| | | ||||||
* | | improve StrongParameters documentation [ci skip] | Francesco Rodriguez | 2013-01-07 | 1 | -8/+7 | |
| | | ||||||
* | | Reduce number of Strings a bit | Akira Matsuda | 2013-01-07 | 1 | -1/+1 | |
| | | ||||||
* | | Namespace HashWithIndifferentAccess | Akira Matsuda | 2013-01-07 | 1 | -1/+1 | |
| | | ||||||
* | | These are already required through AS/rails | Akira Matsuda | 2013-01-06 | 2 | -3/+0 | |
| | | | | | | | | | | | | | | * core_ext/object/blank * concern * core_ext/class/attribute * deprecation | |||||
* | | Wrong copy and paste :bomb: | Rafael Mendonça França | 2013-01-05 | 1 | -1/+1 | |
| | | | | | | | | [ci skip] | |||||
* | | Add documentation to raise_on_unpermitted_parameters option | Rafael Mendonça França | 2013-01-05 | 1 | -2/+17 | |
| | | | | | | | | [ci skip] | |||||
* | | Rename the configuration to raise_on_unpermitted_parameters | Rafael Mendonça França | 2013-01-05 | 1 | -9/+9 | |
| | | | | | | | | Also changed the exception to UnpermittedParameters | |||||
* | | Allow developers to enable raising of exception when unexpected params are ↵ | Thomas Drake-Brockman | 2013-01-05 | 1 | -0/+22 | |
| | | | | | | | | provided. | |||||
* | | Change docs to use update instead of update_attributes | Amparo Luna + Guillermo Iguaran | 2013-01-03 | 1 | -2/+2 | |
|/ | ||||||
* | charset should not be appended for `head` responses | Yves Senn | 2012-12-31 | 1 | -0/+1 | |
| | | | | | | | 1) Failure: test_head_created_with_image_png_content_type(RenderTest) [test/controller/render_test.rb:1238]: Expected: "image/png" Actual: "image/png; charset=utf-8" | |||||
* | "warning: ambiguous first argument; put parentheses or even spaces" | Akira Matsuda | 2012-12-24 | 1 | -1/+1 | |
| | ||||||
* | Refactoring the token_and_options method to fix bugs | Kurtis Rainbolt-Greene | 2012-12-15 | 1 | -11/+27 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding a test for the equal trun bug Adding a test for the after equal trunc bug Adding a test for the slash bug Adding a test for the slash quote bug Adding a helper method for creating a sample request object with token Writing a method to create params array from raw params Writing a method to rewrite param values in the params Writing a method to get the token params from an authorization value Refactoring the token_and_options method to fix bugs Removing unnessecary test A constant for this shared regex seemed appropriate Wanting to split up this logic Adding small documentation pieces | |||||
* | Add missing require. | Rafael Mendonça França | 2012-12-13 | 1 | -0/+1 | |
| | | | | | I was trying to use those files without Rails and that require was missing. | |||||
* | Bring back helpers_path attr accessor | Carlos Antonio da Silva | 2012-12-13 | 1 | -1/+1 | |
| | | | | | This is apparently used by the railtie to setup the app helpers paths correctly between initializers. I'll need to check it further. | |||||
* | Refactor helpers code in Action Pack a bit | Carlos Antonio da Silva | 2012-12-13 | 2 | -7/+5 | |
| | | | | | | | | * Avoid calling class_eval when not needed * Remove helpers_path attr accessor, it's defined as a class attribute a few lines later * Avoid creating extra arrays when finding helpers, use flat_map and sort! * Remove not required refer variable when redirecting :back | |||||
* | Remove not used variable warnings from AM and AC | Carlos Antonio da Silva | 2012-12-11 | 1 | -1/+1 | |
| | ||||||
* | use `_action` instead of `_filter` callbacks | Francesco Rodriguez | 2012-12-07 | 1 | -6/+6 | |
| | ||||||
* | update documentation and code to use _action callbacks | Francesco Rodriguez | 2012-12-07 | 2 | -7/+7 | |
| | ||||||
* | Merge pull request #8404 from freegenie/filter_redirects | Andrew White | 2012-12-05 | 1 | -1/+1 | |
|\ |