aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller
Commit message (Collapse)AuthorAgeFilesLines
* Remove misleading reference to polymorphic_url.José Valim2011-02-111-2/+0
|
* Change the CSRF whitelisting to only apply to get requestsMichael Koziarski2011-02-081-10/+9
| | | | | | | | Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets. To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header: X-CSRF-Token: ... This fixes CVE-2011-0447
* Use Mime::Type references.José Valim2011-02-081-1/+1
|
* Allow page_cache_directory to be set as a PathnameAndre Arko2011-02-061-1/+1
| | | | | | For example, page_cache_directory = Rails.root.join("public/cache") Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
* revises a metal exampleXavier Noria2011-02-021-4/+4
|
* copy-edits 2446b13Xavier Noria2011-02-021-14/+13
|
* Merge branch 'master' of git://github.com/lifo/docrailsXavier Noria2011-02-021-5/+55
|\
| * Provide documentation for ActionController::MetalBernerd Schaefer2011-02-021-5/+55
| |
* | If I want to set respond_body to nil then itNeeraj Singh2011-01-251-1/+1
| | | | | | | | | | | | | | should be nil and not [nil]. If anything other than nil then wrap it in array Signed-off-by: José Valim <jose.valim@gmail.com>
* | A patch so that http status codes are still included in logs even during an ↵Doug Fales2011-01-251-1/+5
|/ | | | | | exception [#6333 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com>
* html_safe.to_str makes no senseSantiago Pastorino2011-01-111-1/+1
|
* ActionController::Base.helpers.sanitize ignores case in protocolTimothy N. Tsvetkov2010-12-301-1/+1
| | | | | | [#6044 state:committed] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
* Merge branch 'master' of git://github.com/lifo/docrailsXavier Noria2010-12-291-1/+1
|\
| * .erb => .html.erbAkira Matsuda2010-12-251-1/+1
| |
* | No need to symbolize these.José Valim2010-12-271-2/+2
| |
* | #948 template_inheritanceartemave2010-12-261-2/+2
|/
* Edits to caching/fragments.Rizwan Reza2010-12-231-17/+39
|
* Fix respond_with example code so it makes senseWill2010-12-191-2/+2
|
* Correct deprecated AR usage in ActionController::MimeResponds documentationWill2010-12-191-4/+4
|
* Set proper engine's asset directories when assets are served from engine.Piotr Sarnacki2010-12-151-0/+8
| | | | | | | | | When using stylesheet_link_tag(:all) or javascript_include_tag(:all), assets directories are searched for css or js files. When config.serve_static_assets is set to true, those files can be served directly from engine's directories. That's why assets paths should be set individually for controllers inside engine if we want to serve static assets with ActionDispatch::Static
* Ensure that while caching a page rails takes intoNeeraj Singh2010-12-091-7/+13
| | | | | | | | account the resolved mime type for the request [#6110 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com>
* Clean up asset_host and asset_path.José Valim2010-12-091-2/+2
|
* makes a pass to the action caching rdocXavier Noria2010-12-081-32/+41
|
* Add to documentation that action caching doesNeeraj Singh2010-12-061-0/+5
| | | | | | handle HTTP_ACCEPT attribute properly and might provide wrong result. Use params[:format] to avoid this issue.
* Merge branch 'master' of git://github.com/lifo/docrailsXavier Noria2010-11-271-3/+7
|\
| * Add explicit statement that verify_authenticity_token can be turned off for ↵Ryan Bigg2010-11-271-3/+7
| | | | | | | | actions.
* | implicit self hereSantiago Pastorino2010-11-251-1/+1
| |
* | move the setting up of the mime collector into the collector on initJosh Kalderimis2010-11-251-3/+3
| | | | | | | | Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
* | If a user wants json output then try best to render json output. In such ↵Neeraj Singh2010-11-241-1/+1
|/ | | | | | | | cases prefer kind_of(String) over respond_to?(to_str) [#5841 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com>
* :subdomain, :domain and :tld_length options can now be used in url_for, ↵Josh Kalderimis2010-11-231-1/+3
| | | | | | allowing for easy manipulation of the host during link generation. Signed-off-by: José Valim <jose.valim@gmail.com>
* Remove unused constantSantiago Pastorino2010-11-221-2/+0
|
* There's no need for ternary op hereSantiago Pastorino2010-11-221-1/+1
|
* Remove unneeded metaprogramming and method generation in favor of direct ↵Santiago Pastorino2010-11-221-24/+10
| | | | definition
* class inheritable attributes is used no more! all internal use of class ↵Josh Kalderimis2010-11-202-4/+6
| | | | | | inheritable has been changed to class_attribute. class inheritable attributes has been deprecated. Signed-off-by: José Valim <jose.valim@gmail.com>
* Fix indentationSantiago Pastorino2010-11-201-24/+23
|
* Add config.action_controller.include_all_helpers, by default it is set to true.Piotr Sarnacki2010-11-182-2/+5
| | | | | | | In older rails versions there was a way to use only helpers from helper file corresponding to current controller and you could also include all helpers by saying 'helper :all' in controller. This config allows to return to older behavior by setting it to false.
* Move @assigns from the controller to the test itselfSantiago Pastorino2010-11-062-1/+1
|
* Fix problems trying to functional test AC::Metal controllersSantiago Pastorino2010-11-062-11/+3
| | | | [#5393 state:committed]
* Correctly handle the case of an API response that returns a hash by treating ↵Chris Eppstein2010-11-061-1/+1
| | | | a single hash argument as the resource instead of as options.
* AC::Caching DRYupKrekoten' Marjan2010-10-181-5/+1
| | | | | | | Remove ActionController::Caching::Pages#caching_allowed because it duplicates ActionController::Caching#caching_allowed? Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
* Reset assert_template instance variables between requests [#5832 state:resolved]Andrew White2010-10-181-0/+7
|
* replace if ! with unlessNeeraj Singh2010-10-171-1/+1
| | | | Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
* Merge branch 'master' of git://github.com/lifo/docrailsXavier Noria2010-10-141-1/+1
|\
| * Fix small typo in documentationKrekoten' Marjan2010-10-121-1/+1
| |
* | Return a valid empty JSON on successful PUT and DELETE requests. [#5199 ↵Szymon Nowak2010-10-121-0/+20
|/ | | | | | state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com>
* Rendering doesn't need RackDelegationwycats2010-10-101-1/+0
|
* Fix a few bugs when trying to use Head standalonewycats2010-10-102-4/+7
|
* Merge branch 'master' of git://github.com/lifo/docrailsXavier Noria2010-10-061-4/+0
|\
| * `render :text => proc { ... }` is no longer supported.John Firebaugh2010-10-041-4/+0
| |
* | Provide a cleaner syntax for paths configuration that does not rely on ↵José Valim2010-10-062-6/+8
| | | | | | | | method_missing.