rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Merge remote branch 'mainstream/master'	Pratik Naik	2010-01-04	1	-0/+1
\|\
\| *	All AD modules are "deferrable"	Joshua Peek	2009-12-22	1	-0/+1
\| \|
* \|	Merge commit 'mainstream/master'	Pratik Naik	2009-10-10	1	-2/+10
\|\\|
\| *	Switch to on-by-default XSS escaping for rails.	Michael Koziarski	2009-10-08	1	-2/+10
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration.
* \|	Add missing end ERB tag.	Ryan Bigg	2009-08-22	1	-1/+1
\|/
*	prefer autoloaded html scanner	Joshua Peek	2008-11-24	1	-1/+0
\|
*	Autoload HTML::Document and sanitizers	Jeremy Kemper	2008-11-23	1	-10/+1
\|
*	Require missing libraries and check for defined ActionController constant so ↵	Joshua Peek	2008-08-26	1	-1/+10
\| \| \| \|	ActionView can be used standalone
*	Include all helpers into ActionView::Helper	Joshua Peek	2008-08-25	1	-31/+54
\|
*	Merge with docrails.	Pratik Naik	2008-07-16	1	-1/+1
\|
*	Merge docrails.	Pratik Naik	2008-05-25	1	-15/+16
\| \| \| \|	Signed-off-by: Pratik Naik <pratiknaik@gmail.com>
*	Added not to sanitize helper docs that it doesn't guarantee well-formed markup.	Michael Schuerig	2008-05-12	1	-0/+5
\| \| \| \| \| \|	Signed-off-by: Michael Koziarski <michael@koziarski.com> [#166 state:resolved]
*	Improve documentation coverage and markup	Xavier Noria	2008-05-02	1	-2/+2
\| \| \| \|	Signed-off-by: Pratik Naik <pratiknaik@gmail.com>
*	Refactor sanitizer helpers into HTML classes and make it easy to swap them ↵	Rick Olson	2007-11-26	1	-155/+53
\| \| \| \| \| \|	out with custom implementations. Closes #10129. [rick] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@8213 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
*	Extracted sanitization methods from TextHelper to SanitizeHelper [DHH] ↵	David Heinemeier Hansson	2007-10-10	1	-0/+325
	Changed SanitizeHelper#sanitize to only allow the custom attributes and tags when specified in the call [DHH] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7825 5ecf4fe2-1ee6-0310-87b1-e25e094e27de