aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_view/template/handlers/erb.rb
Commit message (Collapse)AuthorAgeFilesLines
* Instead of marking raw text in templates as safe, and then putting them ↵Yehuda Katz2009-12-241-1/+2
| | | | through String#<< which checks if the String is safe, use safe_concat, which uses the original (internal) String#<< and leaves the safe flag as is. Results in a significant performance improvement.
* Reorganize autoloads:Carlhuda2009-12-021-2/+2
| | | | | | | | | | | | | | | | | | | | | * A new module (ActiveSupport::Autoload) is provide that extends autoloading with new behavior. * All autoloads in modules that have extended ActiveSupport::Autoload will be eagerly required in threadsafe environments * Autoloads can optionally leave off the path if the path is the same as full_constant_name.underscore * It is possible to specify that a group of autoloads live under an additional path. For instance, all of ActionDispatch's middlewares are ActionDispatch::MiddlewareName, but they live under "action_dispatch/middlewares/middleware_name" * It is possible to specify that a group of autoloads are all found at the same path. For instance, a number of exceptions might all be declared there. * One consequence of this is that testing-related constants are not autoloaded. To get the testing helpers for a given component, require "component_name/test_case". For instance, "action_controller/test_case". * test_help.rb, which is automatically required by a Rails application's test helper, requires the test_case.rb for all active components, so this change will not be disruptive in existing or new applications.
* Make encodings work with Erubis and 1.9 againYehuda Katz2009-10-161-3/+5
|
* Make the erubis implementation easier for plugins to change.Michael Koziarski2009-10-151-1/+4
|
* Switch to on-by-default XSS escaping for rails.Michael Koziarski2009-10-081-3/+25
| | | | | | | | | | | | This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration.
* Fix pattern to match various magic comment formatsAkira Matsuda2009-07-011-1/+1
|
* Try speeding up rails bootingYehuda Katz + Carl Lerche2009-06-251-1/+2
|
* Ensure ERB source begins with the encoding commentJeremy Kemper2009-06-011-1/+3
|
* Ruby 1.9: ERB template encoding using a magic comment at the top of the fileJeremy Kemper2009-05-281-5/+1
|
* Remove some response content type concepts from ActionViewYehuda Katz + Carl Lerche2009-05-211-0/+2
|
* Cherry-pick core extensionsJeremy Kemper2009-05-131-0/+1
|
* First, very early, AbstractController code. More to comeYehuda Katz2009-02-241-0/+2
|
* Begin unifying the interface between ActionController and ActionViewYehuda Katz2009-01-221-0/+22