| Commit message (Expand) | Author | Age | Files | Lines |
... | |
| * | Recommend adding the requested domain to hosts whitelist only in development | Marc Schütz | 2019-01-23 | 2 | -4/+4 |
* | | Merge pull request #35018 from gmcgibbon/revert_redirect_to_allow_other_host | Rafael França | 2019-01-22 | 2 | -29/+7 |
|\ \ |
|
| * | | Revert ensure external redirects are explicitly allowed | Gannon McGibbon | 2019-01-22 | 2 | -29/+7 |
| |/ |
|
* | | Merge pull request #34952 from rails/template-stuff | Aaron Patterson | 2019-01-22 | 3 | -4/+11 |
|\ \
| |/
|/| |
|
| * | Only cache the view_context_class in one place | Aaron Patterson | 2019-01-18 | 1 | -1/+8 |
| * | Remove args from `default_render` | Aaron Patterson | 2019-01-17 | 2 | -3/+3 |
* | | Preparing for 6.0.0.beta1 release | Rafael Mendonça França | 2019-01-18 | 1 | -1/+1 |
* | | Remove secret_token rack env and cookie upgrade code | Rafael Mendonça França | 2019-01-17 | 2 | -39/+1 |
* | | Remove deprecated `fragment_cache_key` helper in favor of `combined_fragment_... | Rafael Mendonça França | 2019-01-17 | 1 | -19/+0 |
* | | Remove deprecated methods in ActionDispatch::TestResponse | Rafael Mendonça França | 2019-01-17 | 1 | -27/+0 |
* | | Update the promisse that ActionController::TestCase will be extracted | Rafael Mendonça França | 2019-01-17 | 1 | -1/+1 |
* | | Ensure external redirects are explicitly allowed | Gannon McGibbon | 2019-01-17 | 3 | -17/+39 |
* | | Merge pull request #34944 from dasch/patch-7 | Rafael França | 2019-01-16 | 1 | -0/+8 |
|\ \ |
|
| * | | Document that `format.any` can match all formats | Daniel Schierbeck | 2019-01-16 | 1 | -0/+8 |
| |/ |
|
* / | Revert "Don't handle params option in a special way in url_for helper" | Rafael Mendonça França | 2019-01-16 | 2 | -0/+5 |
|/ |
|
* | Merge pull request #34894 from hahmed/tames-params-wrapper-errors | Kasper Timm Hansen | 2019-01-09 | 1 | -16/+17 |
|\ |
|
| * | Capture parsing errors for ActionController::ParamsWrapper#process_action | Haroon Ahmed | 2019-01-08 | 1 | -16/+17 |
* | | Allow using combine the Cache-Control `public` and `no-cache` headers | yuuji.yaginuma | 2019-01-07 | 1 | -4/+6 |
|/ |
|
* | Remove mention about `Test::Unit::TestCase` [ci skip] | bogdanvlviv | 2019-01-02 | 1 | -3/+0 |
* | Bump license years for 2019 | Arun Agrawal | 2018-12-31 | 2 | -2/+2 |
* | Import Action Mailbox | George Claghorn | 2018-12-25 | 1 | -12/+11 |
* | Enable `Style/RedundantBegin` cop to avoid newly adding redundant begin block | Ryuta Kamizono | 2018-12-21 | 5 | -29/+19 |
* | Module#{define_method,alias_method,undef_method,remove_method} become public ... | Ryuta Kamizono | 2018-12-21 | 1 | -4/+4 |
* | Use native `Array#append`, `Array#prepend`, `Hash#transform_keys`, and `Hash#... | Ryuta Kamizono | 2018-12-20 | 2 | -4/+0 |
* | Allow nil params on controller HTTP test methods | r7kamura | 2018-12-18 | 1 | -2/+2 |
* | Merge branch 'master' into host-authorization | Eileen M. Uchitelle | 2018-12-17 | 1 | -6/+5 |
|\ |
|
| * | Allow using parsed_body in ActionController::TestCase | Tobias Bühlmann | 2018-12-16 | 1 | -6/+5 |
* | | Introduce a guard against DNS rebinding attacks | Genadi Samokovarov | 2018-12-15 | 6 | -41/+171 |
|/ |
|
* | Upgrade Rubocop to 0.61.1 and fix offenses | Vinicius Stock | 2018-12-10 | 1 | -79/+79 |
* | Expand metaprogramming for Symbol, Slash and Dot. | Alberto Almagro | 2018-12-07 | 1 | -6/+7 |
* | colorize the unpermitted params log message | blahed | 2018-12-03 | 1 | -1/+1 |
* | Remove unnecessary variable route | Alberto Almagro | 2018-12-02 | 1 | -11/+2 |
* | Merge pull request #34554 from sj26/group-exception-logs | Rafael França | 2018-11-28 | 1 | -5/+8 |
|\ |
|
| * | Avoid extra array allocations | Samuel Cochran | 2018-11-29 | 1 | -2/+2 |
| * | Log exceptions atomically | Samuel Cochran | 2018-11-28 | 1 | -5/+8 |
* | | Add autoload hook for AbstractController::ActionNotFound | Rafael Mendonça França | 2018-11-28 | 1 | -0/+1 |
|/ |
|
* | Raise an error on root route naming conflicts. | Gannon McGibbon | 2018-11-20 | 1 | -4/+2 |
* | Merge pull request #20865 from colavitam/only-except-behavior | Rafael Mendonça França | 2018-11-19 | 1 | -2/+8 |
|\ |
|
| * | :only and :except are now chained for routing resource(s) | Michael Colavita | 2015-07-13 | 1 | -3/+9 |
* | | Remove unused `Journey::Router::RoutingError` | yuuji.yaginuma | 2018-11-18 | 1 | -3/+0 |
* | | Allow rescue from parameter parse errors | Gannon McGibbon | 2018-11-13 | 5 | -8/+25 |
* | | Reset sessions on failed system test screenshot | Maxim Perepelitsa | 2018-11-13 | 1 | -2/+5 |
* | | Merge pull request #34314 from bf4/patch-2 | Gannon McGibbon | 2018-10-30 | 1 | -1/+1 |
|\ \ |
|
| * | | ActionController::API *does* support cookies, sessions | Benjamin Fleischer | 2018-10-25 | 1 | -1/+1 |
* | | | We don't want these internal methods as public methods in our controllers | Akira Matsuda | 2018-10-30 | 1 | -23/+25 |
|/ / |
|
* | | Use request object for context if there's no controller | Andrew White | 2018-10-22 | 1 | -1/+2 |
* | | Apply mapping to symbols returned from dynamic CSP sources | Andrew White | 2018-10-22 | 1 | -1/+2 |
* | | Fix `ActionController::Parameters#each_value` and add changelog entry to this... | Bogdan | 2018-10-15 | 1 | -1/+1 |
* | | Remove invalid magic comment [ci skip] | Yoshiyuki Kinjo | 2018-10-11 | 1 | -2/+0 |
* | | Merge pull request #34109 from bogdanvlviv/follow-up-34064 | Eileen M. Uchitelle | 2018-10-10 | 1 | -21/+0 |
|\ \ |
|