aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/vendor
Commit message (Expand)AuthorAgeFilesLines
* fix protocol checking in sanitization [CVE-2013-1857]Aaron Patterson2013-03-151-2/+2
* fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855]Charlie Somerville2013-03-151-3/+3
* HTMl -> HTML: html scanner comment fixAlexey Vakhov2011-10-151-1/+1
* add missing require to html sanitizerAlexey Vakhov2011-09-271-0/+1
* Tags with invalid names should also be stripped in order to preventAaron Patterson2011-08-161-1/+1
* Remove extra white spaces on ActionPack docs.Sebastian Martinez2011-05-231-1/+1
* Merge pull request #280 from jballanc/frozen-string-strip-tagsJosé Valim2011-05-071-1/+1
|\
| * Fix for stripping tags from frozen strings.Joshua Ballanco2011-04-141-1/+1
* | document HTML::Selector's :has(string) pseudo classmisfo2011-04-231-0/+2
|/
* ActionController::Base.helpers.sanitize ignores case in protocolTimothy N. Tsvetkov2010-12-301-1/+1
* class inheritable attributes is used no more! all internal use of class inher...Josh Kalderimis2010-11-201-2/+2
* Remove more warnings shadowing outer local variable.Emilio Tagua2010-09-271-3/+3
* Remove more warnings shadowing outer local variable.Emilio Tagua2010-09-271-3/+3
* Refactor methods in html node to avoid injects.Emilio Tagua2010-09-221-8/+4
* Use join instead of looping and calling to_s [#5492 state:resolved]Thiago Pradi2010-09-011-3/+1
* Deletes trailing whitespaces (over text files only find * -type f -exec sed '...Santiago Pastorino2010-08-145-65/+65
* Strip_tags never ending attribute should not raise a TypeError [#4870 state:r...Bruno Michel2010-06-282-0/+2
* regular expressions are usually ASCII-encoded, so force_encoding the content ...wycats2010-06-071-0/+1
* Flip deferrable autoload conventionJoshua Peek2009-12-221-12/+14
* Reorganize autoloads:Carlhuda2009-12-021-0/+2
* html-scanner uses Set and class_inheritable_accessorJeremy Kemper2009-05-301-0/+3
* Ensure WhiteListSanitizer allows dl tag [#2393 state:resolved]Jeffrey Chupp2009-05-171-1/+1
* Move bundled rack into ActionDispatchJoshua Peek2009-04-1450-4998/+0
* Ensure our bundled version of rack is at the front of the load pathJoshua Peek2009-03-151-1/+1
* Add Rack version to Rails infoJoshua Peek2009-03-141-2/+2
* Update rack to fix multipart uploads with an empty file [#1945 state:resolved]Joshua Peek2009-03-1313-42/+98
* Update bundled Rack to fix Litespeed compatibility [#2198 state:resolved]Russ Smith2009-03-117-10/+25
* update bundled version of rack before 2.3 finalJoshua Peek2009-03-1010-11/+42
* Ensure assert_select works with XML namespaced attributes [#1547 state:resolv...Pratik Naik2009-03-071-1/+1
* Update bundled rack to fix more parameter parsing issuesJoshua Peek2009-02-142-12/+25
* Reapply 0d5b3e6Joshua Peek2009-02-101-1/+1
* Update vendored rackJoshua Peek2009-02-105-9/+32
* Make sure vendored rack is at the front of the load pathJoshua Peek2009-02-101-2/+1
* Update bundled Rack for Ruby 1.9 spec changesJoshua Peek2009-02-0710-25/+29
* Temporarily bundle Rack 1.0 prerelease for testingJoshua Peek2009-02-0748-0/+4857
* Depend on rack 0.4.0 instead of vendoring itJoshua Peek2008-11-2541-4225/+0
* Ensure all HTML:: constants are available to autoload [#1462 state:resolved]Craig Davey2008-11-251-1/+8
* Autoload HTML::Document and sanitizersJeremy Kemper2008-11-231-0/+9
* Use a relative require for bundled rack libJeremy Kemper2008-11-221-1/+2
* Vendor rack 0.4.0Joshua Peek2008-11-2241-0/+4224
* Fixed the sanitize helper to avoid double escaping already properly escaped e...David Heinemeier Hansson2008-11-061-1/+1
* Fix incorrect closing CDATA delimiter. Add tests for CDATA nodes.Jeffrey Hardy2008-10-231-1/+1
* Fix that HTML::Node.parse would blow up on unclosed CDATA sections.Jeffrey Hardy2008-10-231-1/+8
* Merge with docrails.Pratik Naik2008-07-161-2/+2
* Patched HTML::Document#initialize call to Node.parse so that it includes the ...Jimmy Baker2008-06-241-1/+1
* Fixed HTML::Tokenizer (used in sanitize helper) didnt handle unclosed CDATA t...David Heinemeier Hansson2008-03-281-1/+1
* Fix HTML Sanitizer to allow trailing spaces in CSS style attributes. Closes ...Rick Olson2007-12-231-2/+2
* Removed some of the tags that does not make sense to allow per default in the...David Heinemeier Hansson2007-12-041-2/+2
* Refactor sanitizer helpers into HTML classes and make it easy to swap them ou...Rick Olson2007-11-262-0/+174
* Fixed spelling errors (closes #9706) [tarmo/rmm5t]David Heinemeier Hansson2007-09-281-1/+1
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-29 07:23:55 +0000