| Commit message (Expand) | Author | Age | Files | Lines |
* | Use Rack to generate query information under test | Aaron Patterson | 2018-06-08 | 1 | -1/+1 |
* | Avoid unused capture in `non_xhr_javascript_response?` | Ryuta Kamizono | 2018-05-31 | 1 | -1/+1 |
* | Include application/javascript when checking content_type | Gabriel Jaldon | 2018-05-27 | 1 | -1/+1 |
* | Speed up xor_byte_strings by 70% | Jeremy Evans | 2018-05-18 | 1 | -3/+8 |
* | Fix documentation for ActionController::Params#fetch | Linus Marton | 2018-05-18 | 1 | -1/+3 |
* | Merge pull request #32773 from eugeneius/content_length_multiple_requests | George Claghorn | 2018-04-30 | 1 | -0/+1 |
|\ |
|
| * | Reset CONTENT_LENGTH between test requests | Eugene Kenny | 2018-05-01 | 1 | -0/+1 |
* | | Add quotes to code in rdoc comment in ActionController [ci skip] | Eddie Lebow | 2018-04-30 | 1 | -1/+1 |
|/ |
|
* | Reset RAW_POST_DATA between test requests | Eugene Kenny | 2018-04-20 | 1 | -4/+5 |
* | Merge pull request #29286 from vinistock/create_missing_exact_template_exception | Rafael Mendonça França | 2018-04-20 | 2 | -12/+5 |
|\ |
|
| * | Create MissingExactTemplate exception with separate template | Vinicius Stock | 2018-04-20 | 2 | -12/+5 |
* | | Fixes StrongParameters permit! to work with nested arrays | Steve Hull | 2018-04-16 | 1 | -1/+1 |
* | | Merge pull request #32484 from kddeisz/default-headers | Rafael França | 2018-04-10 | 3 | -6/+19 |
|\ \ |
|
| * | | Include default headers by default in API mode | Kevin Deisz | 2018-04-06 | 3 | -6/+19 |
* | | | Improve the null origin error message | Patrik Bóna | 2018-04-09 | 1 | -1/+1 |
|/ / |
|
* | | Remove superfluous `ActionController::` | Francois Chagnon | 2018-04-04 | 1 | -1/+1 |
* | | Merge pull request #32336 from vincedevendra/allow_mutating_dig_return_value | Aaron Patterson | 2018-04-02 | 1 | -1/+2 |
|\ \ |
|
| * | | Make mutating params#dig mutate underlying params | Vince DeVendra | 2018-03-24 | 1 | -1/+2 |
* | | | Deprecate controller level force_ssl | Derek Prior | 2018-03-30 | 1 | -55/+14 |
|/ / |
|
* | | Remove unnecessary `Hash.method_defined?(:dig)` checking | yuuji.yaginuma | 2018-03-11 | 1 | -13/+11 |
* | | Always yield a CSP policy instance | Andrew White | 2018-03-08 | 1 | -1/+5 |
* | | Add the ability to disable the global CSP in a controller | Andrew White | 2018-03-08 | 1 | -1/+5 |
* | | Add support for automatic nonce generation for Rails UJS | Andrew White | 2018-02-19 | 1 | -0/+18 |
* | | Rails 6 requires Ruby 2.4.1+ | Jeremy Daer | 2018-02-17 | 1 | -1/+0 |
* | | Remove usage of strip_heredoc in the framework in favor of <<~ | Rafael Mendonça França | 2018-02-16 | 1 | -2/+1 |
|/ |
|
* | ActionController::TestCase: fix #post documentation [ci skip] | Misty De Meo | 2018-01-29 | 1 | -1/+1 |
* | Remove code duplication for `ActionController::Metal.action` | fatkodima | 2018-01-22 | 1 | -10/+8 |
* | Fix typos, update documentation | James Lovejoy | 2018-01-11 | 1 | -2/+2 |
* | Add missing require for `strip_heredoc` | Peter Wagenet | 2018-01-04 | 1 | -0/+1 |
* | Added reference to default value of `allow_other_host` [ci skip] | Prathamesh Sonpatki | 2017-12-17 | 1 | -1/+1 |
* | [ci skip] update link | Dixit Patel | 2017-12-15 | 1 | -1/+1 |
* | Merge pull request #30780 from JackMc/fix-chrome-referrer-invalidauthenticity... | Sean Griffin | 2017-12-07 | 1 | -0/+10 |
|\ |
|
| * | Add a better error message when a "null" Origin header occurs | Jack McCracken | 2017-11-03 | 1 | -0/+10 |
* | | Yield array from AC::Parameters#each for block with one arg | Dominic Cleal | 2017-12-06 | 1 | -1/+1 |
* | | Add DSL for configuring Content-Security-Policy header | Andrew White | 2017-11-27 | 2 | -0/+27 |
* | | Merge pull request #24510 from vipulnsward/make-variable_size_secure_compare-... | Rafael Mendonça França | 2017-11-25 | 2 | -9/+6 |
|\ \ |
|
| * | | Changed default behaviour of `ActiveSupport::SecurityUtils.secure_compare`, | Vipul A M | 2017-06-07 | 2 | -9/+6 |
* | | | Update incorrect backtick usage in RDoc to teletype | T.J. Schuck | 2017-11-22 | 2 | -5/+5 |
* | | | Bump RuboCop to 0.51.0 | Koichi ITO | 2017-11-10 | 1 | -1/+1 |
* | | | Show `RequestForgeryProtection` methods in api doc [ci skip] | yuuji.yaginuma | 2017-11-05 | 1 | -0/+1 |
| |/
|/| |
|
* | | checking for nested attributes when attribute names specified to wrap them as... | Kelton Manzanares | 2017-10-25 | 1 | -6/+7 |
* | | Fixed functionality to include method in params_wrapper.rb | Ryan Perez | 2017-10-25 | 1 | -0/+7 |
* | | [Action Pack] require => require_relative | Akira Matsuda | 2017-10-21 | 6 | -7/+7 |
* | | Keep `:api: plugin` methods in the doc [ci skip] | Ryuta Kamizono | 2017-10-20 | 1 | -2/+2 |
* | | Remove unused `UnknownController` class | yuuji.yaginuma | 2017-10-18 | 1 | -3/+0 |
* | | Remove unused `before_filters` | yuuji.yaginuma | 2017-10-15 | 1 | -6/+0 |
* | | Fix some typos. | Mike Boone | 2017-10-10 | 1 | -1/+1 |
* | | Add allow_other_host option to redirect_back method | Tim Masliuchenko | 2017-10-10 | 1 | -7/+16 |
* | | Remove `:api:` tag that has leaked on the doc directly [ci skip] | Ryuta Kamizono | 2017-09-30 | 1 | -4/+0 |
* | | Merge pull request #30493 from koic/fix_cant_modify_frozen_string_error_in_ac... | Ryuta Kamizono | 2017-09-02 | 1 | -1/+1 |
|\ \ |
|