aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/request_forgery_protection.rb
Commit message (Expand)AuthorAgeFilesLines
* Reorganize ActionController folder structureJoshua Peek2009-01-271-108/+0
* Change the forgery token implementation to just be a simple random string.Michael Koziarski2008-11-231-39/+7
* Changed request forgery protection to only worry about HTML-formatted content...Jeff Cohen2008-11-131-1/+1
* Merge with docrails.Pratik Naik2008-07-161-1/+1
* Merge branch 'master' of git@github.com:rails/railsrick2008-05-131-3/+3
|\
| * Bug: Earlier Check for Session in Forgery ProtectionPeter Jones2008-05-111-3/+3
* | fix merge conflict with actionpack changelogrick2008-05-101-2/+2
|\|
| * Merge docrails:Pratik Naik2008-05-091-2/+2
* | change ActionController::RequestForgeryProtection to use Mime::Type#verify_re...rick2008-05-061-1/+1
* | Change the request forgery protection to go by Content-Type instead of reques...rick2008-05-061-1/+1
|/
* Improve documentation coverage and markupXavier Noria2008-05-021-1/+2
* Correct inconsistencies in RequestForgeryProtection docs. #11032 [mislav]Rick Olson2008-02-061-34/+41
* Document how to disable forgery protection for tests. Useful note for those u...Jeremy Kemper2007-12-101-1/+7
* Better error messages if you leave out the :secret option for request forgery...Rick Olson2007-09-281-1/+5
* Allow ability to disable request forgery protection, disable it in test mode ...Rick Olson2007-09-281-3/+11
* Change from InvalidToken to InvalidAuthenticityToken to be more specificDavid Heinemeier Hansson2007-09-241-7/+12
* port over some of the csrf_killer README docsRick Olson2007-09-241-0/+13
* Beefed up docs a bitDavid Heinemeier Hansson2007-09-241-17/+27
* Rename some RequestForgeryProtection methods. The class method is now #prote...Rick Olson2007-09-231-20/+31
* Merge csrf_killer plugin into rails. Adds RequestForgeryProtection model tha...Rick Olson2007-09-231-0/+75