| Commit message (Expand) | Author | Age | Files | Lines |
* | Merge pull request #10478 from cainlevy/patch-1 | Rafael Mendonça França | 2013-05-06 | 1 | -1/+1 |
* | Fixed test failures on 1.8.7 caused by 74e59ea | Fred Wu | 2013-03-27 | 1 | -1/+1 |
* | Backport #5808 | Mack Earnhardt | 2013-03-24 | 1 | -6/+21 |
* | Merge pull request #9802 from newsline/fix-broken-action-missing | Rafael Mendonça França | 2013-03-20 | 1 | -1/+1 |
* | fix protocol checking in sanitization [CVE-2013-1857] | Aaron Patterson | 2013-03-15 | 1 | -2/+2 |
* | fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855] | Charlie Somerville | 2013-03-15 | 1 | -3/+3 |
* | Check for `method_missing` in public and protected | Prem Sichanugrist | 2013-02-24 | 1 | -1/+2 |
* | There is already a Set of non-hidden action_names lying around. | thedarkone | 2013-02-24 | 1 | -8/+2 |
* | Remove warning of not used variable | Carlos Antonio da Silva | 2013-01-17 | 1 | -1/+1 |
* | Merge pull request #5288 from lest/patch-2 | José Valim | 2013-01-17 | 1 | -0/+2 |
* | Accept symbols as #send_data :disposition value | Elia Schito | 2012-11-27 | 1 | -1/+1 |
* | Revert "Merge pull request #7659 from HugoLnx/template_error_no_matches_rebased" | Rafael Mendonça França | 2012-10-31 | 1 | -13/+6 |
* | Revert "Merge pull request #7797 from senny/7459_prefix_tempalte_assertion_va... | Rafael Mendonça França | 2012-10-30 | 1 | -20/+20 |
* | Merge pull request #7848 from senny/3415_assert_template_has_nil_variable | Rafael Mendonça França | 2012-10-06 | 1 | -3/+7 |
* | Merge pull request #7797 from senny/7459_prefix_tempalte_assertion_variables | Rafael Mendonça França | 2012-10-01 | 1 | -20/+20 |
* | Merge pull request #7659 from HugoLnx/template_error_no_matches_rebased | Rafael Mendonça França | 2012-09-30 | 1 | -6/+13 |
* | Don't paramify ActionDispatch::Http::UploadedFile in tests | Tim Vandecasteele | 2012-09-29 | 1 | -1/+1 |
* | log 404 status when ActiveRecord::RecordNotFound was raised (#7646) | Yves Senn | 2012-09-17 | 1 | -1/+2 |
* | Backport 5c51cd0: #send_file leans on Rack::Sendfile to X-Accel-Redirect the ... | Jeremy Kemper | 2012-08-15 | 1 | -2/+22 |
* | * Do not convert digest auth strings to symbols. CVE-2012-3424 | Aaron Patterson | 2012-07-26 | 1 | -2/+2 |
* | Show in log correct wrapped keys | Dmitry Vorotilin | 2012-07-05 | 1 | -1/+2 |
* | ActionController::Caching depends on RackDelegation and AbstractController::C... | Santiago Pastorino | 2012-06-13 | 1 | -0/+3 |
* | Revert "fix the Flash middleware loading the session on every request (very d... | Rafael Mendonça França | 2012-06-05 | 1 | -0/+1 |
* | If content_type is explicitly passed to the :head method use the value or fal... | Kunal Shah | 2012-05-07 | 1 | -1/+2 |
* | Add a role option to wrap_parameters. | Nick Ragaz | 2012-05-04 | 1 | -2/+3 |
* | fix the Flash middleware loading the session on every request (very dangerous... | Will Bryant | 2012-04-30 | 1 | -1/+0 |
* | Add note about using 303 See Other for XHR requests other than GET/POST | Andrew White | 2012-04-30 | 1 | -0/+10 |
* | Don't convert params if the request isn't HTML - fixes #5341 | Andrew White | 2012-04-29 | 1 | -6/+18 |
* | We dont need to merge in the parameters as thats all being reset by the rack ... | David Heinemeier Hansson | 2012-03-20 | 1 | -1/+0 |
* | Merge pull request #5456 from brianmario/redirect-sanitization | Aaron Patterson | 2012-03-15 | 1 | -1/+1 |
* | Remove ActionController::TestCase#rescue_action_in_public! | Piotr Sarnacki | 2012-03-15 | 1 | -5/+0 |
* | Remove usage of deprecated module. | José Valim | 2012-03-07 | 1 | -1/+0 |
* | Set the rendered_format on respond_to. | José Valim | 2012-03-07 | 1 | -0/+1 |
* | Deprecate ActionController::SessionManagement | Santiago Pastorino | 2012-03-06 | 1 | -0/+5 |
* | Always passing a respond block from to responder | Prem Sichanugrist | 2012-03-05 | 2 | -12/+13 |
* | format lookup for partials is derived from the format in which the template i... | Santiago Pastorino | 2012-02-22 | 2 | -2/+2 |
* | search private / protected methods in trunk ruby | Aaron Patterson | 2012-02-20 | 1 | -1/+1 |
* | Rack body respond to each and not to join | Santiago Pastorino | 2012-02-14 | 1 | -2/+4 |
* | Fixed force_ssl redirects to include original query params | Ryan McGeary | 2012-02-06 | 1 | -0/+1 |
* | Clean up a bit default_response handling and cache format negotiation. | José Valim | 2012-02-04 | 2 | -19/+17 |
* | Fix override API response bug in respond_with | Prem Sichanugrist | 2012-02-03 | 1 | -8/+23 |
* | example bracket error | Damian Le Nouaille | 2012-01-26 | 1 | -1/+1 |
* | Do not deprecate performed? | José Valim | 2012-01-19 | 2 | -6/+4 |
* | Remove duplicated constant definition | Carlos Antonio da Silva | 2012-01-17 | 1 | -3/+0 |
* | Deprecate AC::UnknownError and AC::DoubleRenderError | Carlos Antonio da Silva | 2012-01-17 | 1 | -2/+2 |
* | Deprecate default_charset= at controller level | Carlos Antonio da Silva | 2012-01-17 | 1 | -2/+4 |
* | Add some deprecations for logic being removed in 4.0 | Carlos Antonio da Silva | 2012-01-17 | 1 | -2/+15 |
* | Made an example a little more realistic | codesnik | 2012-01-11 | 1 | -1/+1 |
* | Rails initialization with initialize_on_precompile = false should set assets_dir | Santiago Pastorino | 2012-01-10 | 1 | -1/+4 |
* | Fix http digest authentication with trailing '/' or '?' (fixes #4038 and #3228) | Piotr Sarnacki | 2012-01-10 | 1 | -5/+8 |