Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add key rotation cookies middleware | Michael Coyne | 2017-09-24 | 1 | -1/+3 |
| | | | | | | Using the action_dispatch.cookies_rotations interface, key rotation is now possible with cookies. Thus the secret_key_base as well as salts, ciphers, and digests, can be rotated without expiring sessions. | ||||
* | Use frozen string literal in actionpack/ | Kir Shatrov | 2017-07-29 | 1 | -0/+2 |
| | |||||
* | Revert "Merge pull request #29540 from kirs/rubocop-frozen-string" | Matthew Draper | 2017-07-02 | 1 | -1/+0 |
| | | | | | This reverts commit 3420a14590c0e6915d8b6c242887f74adb4120f9, reversing changes made to afb66a5a598ce4ac74ad84b125a5abf046dcf5aa. | ||||
* | Enforce frozen string in Rubocop | Kir Shatrov | 2017-07-01 | 1 | -0/+1 |
| | |||||
* | improve error message when include assertions fail | Michael Grosser | 2016-09-16 | 1 | -1/+1 |
| | | | | | | assert [1, 3].includes?(2) fails with unhelpful "Asserting failed" message assert_includes [1, 3], 2 fails with "Expected [1, 3] to include 2" which makes it easier to debug and more obvious what went wrong | ||||
* | Include the content of the flash in the auto-generated etag (#26250) | David Heinemeier Hansson | 2016-08-22 | 1 | -0/+29 |
| | | | Include the content of the flash in the auto-generated etag | ||||
* | Add three new rubocop rules | Rafael Mendonça França | 2016-08-16 | 1 | -4/+4 |
| | | | | | | | | Style/SpaceBeforeBlockBraces Style/SpaceInsideBlockBraces Style/SpaceInsideHashLiteralBraces Fix all violations in the repository. | ||||
* | modernizes hash syntax in actionpack | Xavier Noria | 2016-08-06 | 1 | -18/+18 |
| | |||||
* | applies new string literal convention in actionpack/test | Xavier Noria | 2016-08-06 | 1 | -21/+21 |
| | | | | | The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default. | ||||
* | Deprecate :controller and :action path parameters | Andrew White | 2016-03-01 | 1 | -1/+3 |
| | | | | | | | | Allowing :controller and :action values to be specified via the path in config/routes.rb has been an underlying cause of a number of issues in Rails that have resulted in security releases. In light of this it's better that controllers and actions are explicitly whitelisted rather than trying to blacklist or sanitize 'bad' values. | ||||
* | finish deprecating handling strings and symbols | Aaron Patterson | 2015-08-07 | 1 | -1/+1 |
| | | | | | since we only work with instances of classes, it greatly simplifies the `Middleware` implementation. | ||||
* | Remove `assigns` and `assert_template`. | Guo Xiang Tan | 2015-05-30 | 1 | -24/+25 |
| | |||||
* | Deprecate `:nothing` option for render method | Mehmet Emin İNAÇ | 2015-05-28 | 1 | -1/+1 |
| | | | | `head` method works similar to `render` method with `:nothing` option | ||||
* | Switch to kwargs in ActionController::TestCase and ActionDispatch::Integration | Kir Shatrov | 2015-01-29 | 1 | -7/+9 |
| | | | | | | | | Non-kwargs requests are deprecated now. Guides are updated as well. `post url, nil, nil, { a: 'b' }` doesn't make sense. `post url, params: { y: x }, session: { a: 'b' }` would be an explicit way to do the same | ||||
* | Remove unused `subclass_controller_with_flash_type_bar` var from flash test. | Vipul A M | 2014-04-07 | 1 | -2/+2 |
| | |||||
* | Fix setup of adding _flash_types test. | Guo Xiang Tan | 2014-04-06 | 1 | -6/+15 |
| | | | | | | | Adding flash types to a controller within any of the tests will result in a global state change of the controller under test. This patch will prevent state leaks and allow us to run the test in random order. | ||||
* | Fixed broken flash tests | Godfrey Chan | 2014-02-11 | 1 | -4/+4 |
| | |||||
* | Typo fixes [ci skip] | Akshay Vishnoi | 2013-11-30 | 1 | -2/+2 |
| | |||||
* | Custom flash should be defined only for the class that defines it and it's ↵ | Ricardo de Cillo | 2013-09-13 | 1 | -0/+12 |
| | | | | subclasses. | ||||
* | Remove comments about removing LegacyKeyGenerator in 4.1 | Trevor Turk | 2013-04-03 | 1 | -1/+0 |
| | |||||
* | Rename DummyKeyGenerator -> LegacyKeyGenerator | Trevor Turk | 2013-04-02 | 1 | -2/+2 |
| | |||||
* | use `_action` instead of `_filter` callbacks | Francesco Rodriguez | 2012-12-07 | 1 | -3/+3 |
| | |||||
* | Remove extra whitespace | Santiago Pastorino | 2012-11-15 | 1 | -1/+1 |
| | |||||
* | Sign cookies using key deriver | Santiago Pastorino | 2012-11-03 | 1 | -2/+4 |
| | |||||
* | Use "instance_accessor" for flash types class attribute | Carlos Antonio da Silva | 2012-07-07 | 1 | -1/+0 |
| | |||||
* | Added support add_flash_types | kennyj | 2012-07-07 | 1 | -0/+26 |
| | |||||
* | Remove unused code. | kennyj | 2012-07-07 | 1 | -4/+0 |
| | |||||
* | Remove default match without specified method | Jose and Yehuda | 2012-04-24 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | In the current router DSL, using the +match+ DSL method will match all verbs for the path to the specified endpoint. In the vast majority of cases, people are currently using +match+ when they actually mean +get+. This introduces security implications. This commit disallows calling +match+ without an HTTP verb constraint by default. To explicitly match all verbs, this commit also adds a :via => :all option to +match+. Closes #5964 | ||||
* | Remove rescue_action from compatibility module and tests | Carlos Antonio da Silva | 2012-01-17 | 1 | -4/+0 |
| | |||||
* | Get rid of the close checks since we cannot reliably close the session anyway. | José Valim | 2011-12-16 | 1 | -40/+0 |
| | |||||
* | Don't reuse a closed flash when using now | Florent Piteau | 2011-04-20 | 1 | -0/+8 |
| | |||||
* | Be sure to not store the closed flash in the session. | José Valim | 2011-04-19 | 1 | -1/+8 |
| | |||||
* | favor composition over inheritance, have FlashHash delegate to a Hash | Aaron Patterson | 2011-04-06 | 1 | -4/+4 |
| | |||||
* | raise if someone tries to modify the flash when it was already streamed back ↵ | Santiago Pastorino | 2011-04-05 | 1 | -0/+50 |
| | | | | to the client or converted to HTTP headers | ||||
* | Remove deprecated stuff in ActionController | Carlos Antonio da Silva | 2010-09-26 | 1 | -1/+1 |
| | | | | | | This removes all deprecated classes in ActionController related to Routing, Abstract Request/Response and Integration/IntegrationTest. All tests and docs were changed to ActionDispatch instead of ActionController. | ||||
* | Removed deprecated RouteSet API, still many tests fail | Piotr Sarnacki | 2010-09-05 | 1 | -1/+1 |
| | |||||
* | Just reading flash messages should not create a session if one does not ↵ | José Valim | 2010-06-25 | 1 | -3/+17 |
| | | | | exist yet. | ||||
* | Ruby 1.9.1 compat: constant lookup | Jeremy Kemper | 2010-06-11 | 1 | -1/+1 |
| | |||||
* | Simplify cookie_store by simply relying on cookies.signed. | José Valim | 2010-05-18 | 1 | -1/+10 |
| | |||||
* | Add tests for convenience methods #notice and #alert to flash.now [#4369 ↵ | Anil Wadghule | 2010-05-15 | 1 | -0/+20 |
| | | | | | | state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Module lookup issue on flash_test using ruby 1.9 solved [#3716 status:resolved] | Sam Elliott and Santiago Pastorino | 2010-01-17 | 1 | -1/+1 |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Move Flash into middleware | Joshua Peek | 2010-01-15 | 1 | -2/+40 |
| | |||||
* | reset_session needs to be a real method so flash can override it | Joshua Peek | 2009-12-21 | 1 | -12/+12 |
| | |||||
* | Added alert/notice from 2-3-stable and refactored redirect_to into just ↵ | David Heinemeier Hansson | 2009-12-17 | 1 | -1/+28 |
| | | | | living in Redirector [DHH] | ||||
* | The FlashHash and friends causes a lot of needless session storing, when we ↵ | Johan Sörensen | 2009-05-28 | 1 | -1/+6 |
| | | | | | | know for a fact that there's no content in the flash. By not storing the empty hash in the session we save a lot of communication with the various session backends, while still keeping the same interface to the flash. [#2703 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | ActionController::Flash::FlashHash.use now returns either the value ↵ | Niels Ganser | 2009-05-27 | 1 | -0/+15 |
| | | | | | | corresponding to the passed key or itself when no key is passed [#1792 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> | ||||
* | Make ActionController::Flash work with new_base | Pratik Naik | 2009-05-21 | 1 | -24/+25 |
| | |||||
* | Deprecate template, session, assigns, and layout accessors on response ↵ | Joshua Peek | 2009-04-28 | 1 | -24/+24 |
| | | | | object. Instead access them through the controller instance. This mainly affects functional test assertions. | ||||
* | Include process methods in ActionController::TestCase only. No need to ↵ | Jeremy Kemper | 2009-01-07 | 1 | -6/+2 |
| | | | | alias_method_chain :process either. | ||||
* | Move missing template logic to ActionView | Pratik Naik | 2008-04-19 | 1 | -1/+1 |
| |