Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
| | * | removes now void extending.rb | Xavier Noria | 2010-01-26 | 1 | -1/+0 | |
| | | | ||||||
| * | | Fix t('.helper'). | José Valim | 2010-01-26 | 1 | -2/+6 | |
| |/ | ||||||
* | | removes unnecessary curlies in collection_select rdoc | Xavier Noria | 2010-01-28 | 1 | -1/+1 | |
| | | ||||||
* | | Fixing up that _delete is no longer used on the form helper for ↵ | Mikel Lindsaar | 2010-01-24 | 1 | -4/+4 | |
|/ | | | | accepts_nested_attributes_for, it is now _destroy | |||||
* | Make @controller an internal ivar in the view | Joshua Peek | 2010-01-22 | 3 | -11/+11 | |
| | ||||||
* | debug helper output should not be sanitized | Joshua Peek | 2010-01-16 | 1 | -2/+2 | |
| | ||||||
* | Merge docrails | Pratik Naik | 2010-01-17 | 3 | -5/+6 | |
| | ||||||
* | Allow f.submit to be localized per object. | José Valim | 2010-01-15 | 1 | -2/+14 | |
| | ||||||
* | Move Dispatcher setup to Railties and add instrumentation hook. | José Valim | 2010-01-15 | 1 | -1/+1 | |
| | ||||||
* | Add documentation to f.submit and make scaffold generators use the new shortcut. | José Valim | 2010-01-14 | 1 | -15/+34 | |
| | ||||||
* | Custom 'type' attribute support for text_field. [#3646 status:resolved] | Stephen Celis | 2010-01-14 | 1 | -1/+1 | |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
* | Make check boxes accept :multiple as option so they can handle collections ↵ | José Valim | 2010-01-14 | 1 | -1/+6 | |
| | | | | (such as HABTM). | |||||
* | Call :to_model before working with the object. | José Valim | 2010-01-14 | 1 | -6/+11 | |
| | ||||||
* | Add possibility to use i18n translatios in submit FormHelper. | Carlos Antonio da Silva | 2010-01-14 | 1 | -3/+14 | |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
* | Fixed that PrototypeHelper#update_page should return html_safe [DHH] | David Heinemeier Hansson | 2010-01-08 | 1 | -1/+1 | |
| | ||||||
* | Fixed that much of DateHelper wouldn't return html_safe? strings [DHH] | David Heinemeier Hansson | 2010-01-08 | 1 | -5/+5 | |
| | ||||||
* | From now on, parameters defined in default_url_options can be absent from ↵ | José Valim | 2010-01-07 | 1 | -0/+5 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | named routes. This allows the following setup to work: # app/controllers/application_controller.rb class ApplicationController def default_url_options(options=nil) { :locale => I18n.locale } end end # From your views and controllers: I18n.locale #=> :en users_url #=> "/en/users" users_url(:pl) #=> "/pl/users" user_url(1) #=> "/en/users/1" user_url(:pl, 1) #=> "/pl/users/1" user_url(1, :locale => :pl) #=> "/pl/users/1" If you provide all expected parameters, it still works as previously. But if any parameter is missing, it tries to assign all possible ones with the hash returned in default_url_options or the one passed straight to the named route method. Beware that default_url_options in ApplicationController is not shared with ActionMailer, so you are required to always give the locale in your email views. | |||||
* | Updated the documentation for helpers.label. | José Valim | 2010-01-07 | 1 | -3/+3 | |
| | ||||||
* | Use helpers.label instead of views.labels. | José Valim | 2010-01-07 | 2 | -2/+2 | |
| | ||||||
* | errors in ActionView should not be namespaced as well. | José Valim | 2010-01-07 | 1 | -1/+1 | |
| | ||||||
* | Remove CGI.escape in function of Rack::Mount.escape | José Valim | 2010-01-06 | 1 | -4/+4 | |
| | ||||||
* | NumberHelper#number_to_currency should output html_safe strings so the units ↵ | David Heinemeier Hansson | 2010-01-05 | 1 | -1/+1 | |
| | | | | are not escaped | |||||
* | adding fix for auto linking to master too | Zach Brock | 2010-01-05 | 1 | -1/+1 | |
| | | | | Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
* | Do not enforce human_attribute_name as required API. | José Valim | 2010-01-02 | 1 | -3/+6 | |
| | ||||||
* | I18n label helper [#745 status:resolved] | Carsten Gehling | 2010-01-02 | 1 | -3/+36 | |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | |||||
* | Translated strings in the view are assumed html_safe (Closes #3401) | David Heinemeier Hansson | 2009-12-24 | 1 | -1/+1 | |
| | ||||||
* | All AD modules are "deferrable" | Joshua Peek | 2009-12-22 | 1 | -0/+1 | |
| | ||||||
* | Allow explicit placement of hidden id element for nested models. | Will Read | 2009-11-15 | 1 | -2/+11 | |
| | | | | | | [#3259 state:resolved] Signed-off-by: Eloy Duran <eloy.de.enige@gmail.com> | |||||
* | Fix some Ruby warnings: `*' interpreted as argument prefix | Bryan Helmkamp | 2009-11-09 | 1 | -1/+1 | |
| | ||||||
* | Fix error_messages_for when instance variable names are given. | José Valim | 2009-10-21 | 1 | -6/+6 | |
| | | | | Signed-off-by: Joshua Peek <josh@joshpeek.com> | |||||
* | Bring agnosticism to error_messages_for. | José Valim | 2009-10-17 | 1 | -6/+10 | |
| | ||||||
* | Unify benchmark APIs. | José Valim | 2009-10-15 | 1 | -54/+0 | |
| | ||||||
* | Make sure non-escaped urls aren't considered safe | Michael Koziarski | 2009-10-15 | 1 | -1/+1 | |
| | ||||||
* | ActionView.url_for doesn't escape by default | Phil Darnowsky | 2009-10-15 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | ActionView::Helpers::UrlHelper#url_for used to escape the URLs it generated by default. This was most commonly seen when generating a path with multiple query parameters, e.g. url_for(:controller => :foo, :action => :bar, :this => 123, :that => 456) would return http://example.com/foo/bar?that=456&this=123 escaping an ampersand that shouldn't be escaped. This is both wrong and inconsistent with the behavior of ActionController#url_for, and is changed. Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
* | Start adding configuration to ActionView instead of using constants. | Yehuda Katz | 2009-10-14 | 1 | -12/+16 | |
| | | | | | | | By using config rather than hardcoded constants, we can evolve the configuration system over time (we'd just need to update the config method with more robust capabilities and all consumers would get the capabilities with no code changes) | |||||
* | API change: content_tag_for outputs prefixed class name | Joshua Peek | 2009-10-08 | 1 | -3/+3 | |
| | ||||||
* | error procs have to be safe too | Michael Koziarski | 2009-10-08 | 1 | -1/+1 | |
| | ||||||
* | Switch to on-by-default XSS escaping for rails. | Michael Koziarski | 2009-10-08 | 12 | -25/+43 | |
| | | | | | | | | | | | | This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration. | |||||
* | NumberHelper depends on big decimal extensions | Joshua Peek | 2009-10-03 | 1 | -0/+1 | |
| | ||||||
* | Introduce :almost keyword for distance_of_time_in_words. Make 1.75 days - 2 ↵ | John Trupiano | 2009-09-28 | 1 | -10/+19 | |
| | | | | | | | days return '2 days'. Signed-off-by: Michael Koziarski <michael@koziarski.com> [#3266 state:committed] | |||||
* | Enhancing distance_of_time_in_words to prefix year output with over and ↵ | Jay Pignata | 2009-09-28 | 1 | -4/+7 | |
| | | | | | | | about depending upon how many months have elapsed Signed-off-by: Michael Koziarski <michael@koziarski.com> [#3106 state:committed] | |||||
* | AV::UrlHelper depends on Array#second | Joshua Peek | 2009-09-13 | 1 | -0/+1 | |
| | ||||||
* | Don't force test suite to use bundler | Joshua Peek | 2009-09-13 | 1 | -0/+1 | |
| | ||||||
* | Allow fields_for on a nested_attributes association to accept an explicit ↵ | Andrew France | 2009-09-12 | 1 | -7/+19 | |
| | | | | | | collection to be used. [#2648 state:resolved] Signed-off-by: Eloy Duran <eloy.de.enige@gmail.com> | |||||
* | Clean tag attributes before passing through the escape_once logic. | Michael Koziarski | 2009-09-04 | 1 | -1/+1 | |
| | | | | Addresses CVE-2009-3009 | |||||
* | Don't raise exceptions for missing javascript_include_tag or ↵ | Sam Pohlenz | 2009-09-03 | 1 | -2/+6 | |
| | | | | | | stylesheet_link_tag sources unless the :cache or :concat options are given. [#2738 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> | |||||
* | I18n: use I18n for select helpers' prompt text | Akira Matsuda | 2009-08-26 | 1 | -1/+2 | |
| | | | | | | [#2252 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Revert "I18n: use I18n for select helpers' prompt text" | Jeremy Kemper | 2009-08-26 | 1 | -2/+1 | |
| | | | | | | | | Broke CI. [#2252 state:open] This reverts commit adedf72821a5623227ce91e6b298838e692477e4. | |||||
* | I18n: use I18n for select helpers' prompt text | Akira Matsuda | 2009-08-26 | 1 | -1/+2 | |
| | | | | | | [#2252 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Got tests to pass with some more changes. | Yehuda Katz | 2009-08-15 | 1 | -2/+3 | |
| | | | | | | | | | | | | | | | | * request.formats is much simpler now * For XHRs or Accept headers with a single item, we use the Accept header * For other requests, we use params[:format] or fallback to HTML * This is primarily to work around the fact that browsers provide completely broken Accept headers, so we have to whitelist the few cases we can specifically isolate and treat other requests as coming from the browser * For APIs, we can support single-item Accept headers, which disambiguates from the browsers * Requests to an action that only has an XML template from the browser will no longer find the template. This worked previously because most browsers provide a catch-all */*, but this was mostly accidental behavior. If you want to serve XML, either use the :xml format in links, or explicitly specify the XML template: render "template.xml". |