aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/test/controller/new_base/render_template_test.rb
Commit message (Collapse)AuthorAgeFilesLines
* html_escape should escape single quotesSantiago Pastorino2012-07-311-1/+1
| | | | | https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content Closes #7215
* deprecate `describe` without a block.Aaron Patterson2012-07-091-2/+0
| | | | | minitest/spec provides `describe`, so deprecate the rails version and have people use the superclass version
* Remove default match without specified methodJose and Yehuda2012-04-241-1/+1
| | | | | | | | | | | | | | | | In the current router DSL, using the +match+ DSL method will match all verbs for the path to the specified endpoint. In the vast majority of cases, people are currently using +match+ when they actually mean +get+. This introduces security implications. This commit disallows calling +match+ without an HTTP verb constraint by default. To explicitly match all verbs, this commit also adds a :via => :all option to +match+. Closes #5964
* Show detailed exceptions no longer returns true if the request is local in ↵José Valim2011-12-161-0/+6
| | | | production.
* Get rid of update_details in favor of passing details to find_template.José Valim2011-09-221-3/+3
|
* realigns a series of hash arrowsXavier Noria2010-11-211-10/+10
|
* Added support for Erubis <%== tagJan Maurits Faber2010-11-081-0/+10
| | | | | | | <%== x %> is syntactic sugar for <%= raw(x) %> Signed-off-by: Michael Koziarski <michael@koziarski.com> [#5918 status:committed]
* Allow cache to be temporarily disabled through lookup_context.José Valim2010-10-071-1/+12
|
* render :template => 'foo/bar.json' now works as it should.José Valim2010-10-071-1/+14
|
* Fixed routes to use new API in a few more actionpack testsPiotr Sarnacki2010-09-051-3/+7
|
* Add support for compile-time <%= raw %>Yehuda Katz2010-01-311-22/+34
|
* Redraw default routes on all internal integration tests. We don't need ↵Joshua Peek2009-10-031-3/+3
| | | | SimpleRouteCase anymore
* File extra test folders into controller, dispatch, or templateJoshua Peek2009-10-031-0/+170