Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Complete work on 3.2 for render_data_leak patch. | Arthur Neves | 2016-02-29 | 1 | -2/+3 |
| | | | | | | | | | | | | | | | | | | Render could leak access to external files before this patch. A previous patch(CVE-2016-0752), attempted to fix this. However the tests were miss-placed outside the TestCase subclass, so they were not running. We should allow :file to be outside rails root, but anything else must be inside the rails view directory. The implementation has changed a bit though. Now the patch is more similar with the 4.x series patches. Now `render 'foo/bar'`, will add a special key in the options hash, and not use the :file one, so when we look up that file, we don't set the fallbacks, and only lookup a template, to constraint the folders that can be accessed. CVE-2016-2097 | ||||
* | fix issue #11605 | Kassio Borges | 2013-08-24 | 1 | -3/+2 |
| | |||||
* | Common behavior with adding formats to lookup_context for TemplateRenderer ↵ | Dmitry Vorotilin | 2013-04-02 | 1 | -2/+3 |
| | | | | and PartialRenderer | ||||
* | Set proper rendered_format when doing render :inline | Santiago Pastorino | 2012-03-28 | 1 | -2/+2 |
| | | | | Closes #5632 | ||||
* | Just change the formats on first render, closes #5307, closes #5308. | José Valim | 2012-03-07 | 1 | -2/+7 |
| | |||||
* | format lookup for partials is derived from the format in which the template ↵ | Santiago Pastorino | 2012-02-22 | 1 | -1/+2 |
| | | | | | | is being rendered Closes #5025 part 2 | ||||
* | raises an ArgumentError if no valid options are given to ↵ | Lucas Mazza | 2011-12-21 | 1 | -0/+2 |
| | | | | | | TemplateRenderer#determine_template Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Fix another regression related to the layout optimization. | José Valim | 2011-12-08 | 1 | -0/+2 |
| | |||||
* | Fix a regression and also fix broken test. | José Valim | 2011-12-08 | 1 | -4/+9 |
| | |||||
* | Optimize layout lookup to avoid double calls. | José Valim | 2011-12-08 | 1 | -7/+14 |
| | |||||
* | Allow both sym and array for details options in #render. using ↵ | Nick Sutterer | 2011-09-23 | 1 | -1/+1 |
| | | | | LC#registered_details to extract options. | ||||
* | Get rid of update_details in favor of passing details to find_template. | José Valim | 2011-09-22 | 1 | -15/+12 |
| | |||||
* | it is now possible to pass details options (:formats, :details, :locales, ↵ | Nick Sutterer | 2011-09-22 | 1 | -2/+3 |
| | | | | ...) to #render, #find_template and friends. this doesn't change anything in global context. | ||||
* | remove warning: assigned but unused variable | Santiago Pastorino | 2011-06-08 | 1 | -1/+1 |
| | |||||
* | Also allow prefixes as third argument to lookup context. | José Valim | 2011-05-04 | 1 | -1/+1 |
| | |||||
* | Remove view dependency from AV::Renderer. | José Valim | 2011-05-01 | 1 | -1/+3 |
| | |||||
* | More cleanup and moving responsibilities around. | José Valim | 2011-05-01 | 1 | -1/+1 |
| | |||||
* | Yo dawg, I heard you like streaming. So I put a fiber, inside a block, ↵ | José Valim | 2011-04-16 | 1 | -1/+0 |
| | | | | inside a body, so you can stream. | ||||
* | Initial work on fibered layout. | José Valim | 2011-04-16 | 1 | -2/+2 |
| | |||||
* | render :once, YAGNI. | José Valim | 2011-04-15 | 1 | -25/+0 |
| | |||||
* | Final tidy up on templates inheritance. | José Valim | 2010-12-27 | 1 | -1/+1 |
| | |||||
* | all tests pass | artemave | 2010-12-26 | 1 | -2/+2 |
| | |||||
* | #948 template_inheritance | artemave | 2010-12-26 | 1 | -2/+2 |
| | |||||
* | Deprecate handler_class_for_extension as template handlers can be any Ruby ↵ | José Valim | 2010-12-01 | 1 | -1/+1 |
| | | | | object, not necessarily a class. | ||||
* | Delegate freeze_formats to lookup_context | Santiago Pastorino | 2010-10-16 | 1 | -2/+2 |
| | |||||
* | Remove :cache => true on lookup templates initialization. | José Valim | 2010-10-14 | 1 | -1/+1 |
| | |||||
* | render :once should consider the current controller prefix. | José Valim | 2010-10-14 | 1 | -1/+2 |
| | |||||
* | Use identifiers for template equality. | José Valim | 2010-10-10 | 1 | -1/+1 |
| | |||||
* | Add support to render :once. | José Valim | 2010-10-10 | 1 | -18/+49 |
| | | | | This will be used internally by sprockets to ensure requires are executed just once. | ||||
* | Clean up the house before moving in the new furniture. | José Valim | 2010-10-10 | 1 | -0/+66 |
This commit moves all the template rendering logic that was hanging around AV::Base to renderer objects. |