Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix examples | David Heinemeier Hansson | 2011-03-28 | 1 | -1/+1 |
| | |||||
* | Added Base.http_basic_authenticate_with to do simple http basic ↵ | David Heinemeier Hansson | 2011-03-28 | 1 | -14/+16 |
| | | | | authentication with a single class method call [DHH] | ||||
* | Merge branch 'master' of git://github.com/lifo/docrails | Xavier Noria | 2011-03-27 | 1 | -7/+6 |
|\ | |||||
| * | Proc objects for cache_path for caches_action no longer need controller ↵ | Ryan Bigg | 2011-03-26 | 1 | -7/+6 |
| | | | | | | | | object, nor to use send when calling routing helpers | ||||
* | | Add controller-specific `force_ssl` method to force web browser to use HTTPS ↵ | Prem Sichanugrist | 2011-03-28 | 2 | -0/+36 |
|/ | | | | | | | | protocol This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH. | ||||
* | Improve testing of cookies in functional tests: | Andrew White | 2011-03-06 | 1 | -1/+10 |
| | | | | | | | | | - cookies can be set using string or symbol keys - cookies are preserved across calls to get, post, etc. - cookie names and values are escaped - cookies can be cleared using @request.cookies.clear [#6272 state:resolved] | ||||
* | Action Pack typos. | R.T. Lechow | 2011-03-05 | 2 | -2/+2 |
| | |||||
* | Fix Action caching bug where an action that has a non-cacheable response ↵ | Cheah Chu Yeow | 2011-03-02 | 1 | -3/+5 |
| | | | | | | | | | | always renders a nil response body. It now correctly renders the response body. Note that only GET and HTTP 200 responses can be cached. [#6480 state:committed] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | ||||
* | prefer composition over inheritance with AD::MS | Aaron Patterson | 2011-03-01 | 1 | -1/+1 |
| | |||||
* | Prepend the CSRF filter to make it much more difficult to execute ↵ | Michael Koziarski | 2011-02-23 | 1 | -1/+1 |
| | | | | application code before it fires. | ||||
* | merges docrails | Xavier Noria | 2011-02-18 | 1 | -0/+37 |
|\ | |||||
| * | add some docs for ActionController::Renderers | Gabriel Horner | 2011-02-10 | 1 | -0/+37 |
| | | |||||
* | | Remove misleading reference to polymorphic_url. | José Valim | 2011-02-11 | 1 | -2/+0 |
| | | |||||
* | | Change the CSRF whitelisting to only apply to get requests | Michael Koziarski | 2011-02-08 | 1 | -10/+9 |
| | | | | | | | | | | | | | | | | Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets. To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header: X-CSRF-Token: ... This fixes CVE-2011-0447 | ||||
* | | Use Mime::Type references. | José Valim | 2011-02-08 | 1 | -1/+1 |
| | | |||||
* | | Allow page_cache_directory to be set as a Pathname | Andre Arko | 2011-02-06 | 1 | -1/+1 |
|/ | | | | | | For example, page_cache_directory = Rails.root.join("public/cache") Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | ||||
* | revises a metal example | Xavier Noria | 2011-02-02 | 1 | -4/+4 |
| | |||||
* | copy-edits 2446b13 | Xavier Noria | 2011-02-02 | 1 | -14/+13 |
| | |||||
* | Merge branch 'master' of git://github.com/lifo/docrails | Xavier Noria | 2011-02-02 | 1 | -5/+55 |
|\ | |||||
| * | Provide documentation for ActionController::Metal | Bernerd Schaefer | 2011-02-02 | 1 | -5/+55 |
| | | |||||
* | | If I want to set respond_body to nil then it | Neeraj Singh | 2011-01-25 | 1 | -1/+1 |
| | | | | | | | | | | | | | | should be nil and not [nil]. If anything other than nil then wrap it in array Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | | A patch so that http status codes are still included in logs even during an ↵ | Doug Fales | 2011-01-25 | 1 | -1/+5 |
|/ | | | | | | exception [#6333 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | html_safe.to_str makes no sense | Santiago Pastorino | 2011-01-11 | 1 | -1/+1 |
| | |||||
* | ActionController::Base.helpers.sanitize ignores case in protocol | Timothy N. Tsvetkov | 2010-12-30 | 1 | -1/+1 |
| | | | | | | [#6044 state:committed] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | ||||
* | Merge branch 'master' of git://github.com/lifo/docrails | Xavier Noria | 2010-12-29 | 1 | -1/+1 |
|\ | |||||
| * | .erb => .html.erb | Akira Matsuda | 2010-12-25 | 1 | -1/+1 |
| | | |||||
* | | No need to symbolize these. | José Valim | 2010-12-27 | 1 | -2/+2 |
| | | |||||
* | | #948 template_inheritance | artemave | 2010-12-26 | 1 | -2/+2 |
|/ | |||||
* | Edits to caching/fragments. | Rizwan Reza | 2010-12-23 | 1 | -17/+39 |
| | |||||
* | Fix respond_with example code so it makes sense | Will | 2010-12-19 | 1 | -2/+2 |
| | |||||
* | Correct deprecated AR usage in ActionController::MimeResponds documentation | Will | 2010-12-19 | 1 | -4/+4 |
| | |||||
* | Set proper engine's asset directories when assets are served from engine. | Piotr Sarnacki | 2010-12-15 | 1 | -0/+8 |
| | | | | | | | | | When using stylesheet_link_tag(:all) or javascript_include_tag(:all), assets directories are searched for css or js files. When config.serve_static_assets is set to true, those files can be served directly from engine's directories. That's why assets paths should be set individually for controllers inside engine if we want to serve static assets with ActionDispatch::Static | ||||
* | Ensure that while caching a page rails takes into | Neeraj Singh | 2010-12-09 | 1 | -7/+13 |
| | | | | | | | | account the resolved mime type for the request [#6110 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Clean up asset_host and asset_path. | José Valim | 2010-12-09 | 1 | -2/+2 |
| | |||||
* | makes a pass to the action caching rdoc | Xavier Noria | 2010-12-08 | 1 | -32/+41 |
| | |||||
* | Add to documentation that action caching does | Neeraj Singh | 2010-12-06 | 1 | -0/+5 |
| | | | | | | handle HTTP_ACCEPT attribute properly and might provide wrong result. Use params[:format] to avoid this issue. | ||||
* | Merge branch 'master' of git://github.com/lifo/docrails | Xavier Noria | 2010-11-27 | 1 | -3/+7 |
|\ | |||||
| * | Add explicit statement that verify_authenticity_token can be turned off for ↵ | Ryan Bigg | 2010-11-27 | 1 | -3/+7 |
| | | | | | | | | actions. | ||||
* | | implicit self here | Santiago Pastorino | 2010-11-25 | 1 | -1/+1 |
| | | |||||
* | | move the setting up of the mime collector into the collector on init | Josh Kalderimis | 2010-11-25 | 1 | -3/+3 |
| | | | | | | | | Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | ||||
* | | If a user wants json output then try best to render json output. In such ↵ | Neeraj Singh | 2010-11-24 | 1 | -1/+1 |
|/ | | | | | | | | cases prefer kind_of(String) over respond_to?(to_str) [#5841 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | :subdomain, :domain and :tld_length options can now be used in url_for, ↵ | Josh Kalderimis | 2010-11-23 | 1 | -1/+3 |
| | | | | | | allowing for easy manipulation of the host during link generation. Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Remove unused constant | Santiago Pastorino | 2010-11-22 | 1 | -2/+0 |
| | |||||
* | There's no need for ternary op here | Santiago Pastorino | 2010-11-22 | 1 | -1/+1 |
| | |||||
* | Remove unneeded metaprogramming and method generation in favor of direct ↵ | Santiago Pastorino | 2010-11-22 | 1 | -24/+10 |
| | | | | definition | ||||
* | class inheritable attributes is used no more! all internal use of class ↵ | Josh Kalderimis | 2010-11-20 | 2 | -4/+6 |
| | | | | | | inheritable has been changed to class_attribute. class inheritable attributes has been deprecated. Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Fix indentation | Santiago Pastorino | 2010-11-20 | 1 | -24/+23 |
| | |||||
* | Add config.action_controller.include_all_helpers, by default it is set to true. | Piotr Sarnacki | 2010-11-18 | 2 | -2/+5 |
| | | | | | | | In older rails versions there was a way to use only helpers from helper file corresponding to current controller and you could also include all helpers by saying 'helper :all' in controller. This config allows to return to older behavior by setting it to false. | ||||
* | Move @assigns from the controller to the test itself | Santiago Pastorino | 2010-11-06 | 2 | -1/+1 |
| | |||||
* | Fix problems trying to functional test AC::Metal controllers | Santiago Pastorino | 2010-11-06 | 2 | -11/+3 |
| | | | | [#5393 state:committed] |