Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | errors in ActionView should not be namespaced as well. | José Valim | 2010-01-07 | 1 | -1/+1 |
| | |||||
* | Fix error_messages_for when instance variable names are given. | José Valim | 2009-10-21 | 1 | -6/+6 |
| | | | | Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Bring agnosticism to error_messages_for. | José Valim | 2009-10-17 | 1 | -6/+10 |
| | |||||
* | error procs have to be safe too | Michael Koziarski | 2009-10-08 | 1 | -1/+1 |
| | |||||
* | Switch to on-by-default XSS escaping for rails. | Michael Koziarski | 2009-10-08 | 1 | -0/+1 |
| | | | | | | | | | | | | This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration. | ||||
* | Ruby 1.9.2: implicit argument passing of super from method defined by ↵ | Jeremy Kemper | 2009-08-07 | 1 | -3/+1 |
| | | | | define_method() is not supported | ||||
* | Add support for error_messages_for(@obj) | Yehuda Katz | 2009-07-28 | 1 | -6/+24 |
| | |||||
* | Rename ActiveRecordHelper to ActiveModelHelper | Yehuda Katz | 2009-07-20 | 1 | -0/+285 |