Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Don't convert empty arrays to nils when deep munging params | Chris Sinjakli | 2014-12-15 | 1 | -4/+0 |
| | |||||
* | Log which keys were set to nil in deep_munge | Lukasz Sarnacki | 2014-01-28 | 1 | -4/+9 |
| | | | | | | | | deep_munge solves CVE-2013-0155 security vulnerability, but its behaviour is definately confuisng. This commit adds logging to deep_munge. It logs keys for which values were set to nil. Also mentions in guides were added. | ||||
* | Add configuration option to optionally disable deep_munge | Bernard Potocki | 2013-12-05 | 1 | -0/+6 |
| | |||||
* | Extract ActionDispatch::Request#deep_munge | Genadi Samokovarov | 2013-05-30 | 1 | -0/+24 |
ActionDispatch::Request#deep_munge was introduced as a private method, but was turned into a public one for the use of ActionDispatch::ParamsParser. I have extracted it into ActionDispatch::Request::Utils, so it does not get mixed up with the Request public methods. |