aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/test/controller/request_forgery_protection_test.rb
Commit message (Expand)AuthorAgeFilesLines
* Clearly limit new CSRF protection to GET requestsJeremy Kemper2013-12-171-0/+10
* CSRF protection from cross-origin <script> tagsJeremy Kemper2013-12-171-9/+69
* NullSessionHash#destroy should be a no-opJonathan Baudanza2013-09-181-0/+10
* Fix #9168 Initialize NullCookieJar with all options needed for KeyGeneratorAndrey Chernih2013-02-081-0/+35
* Added a test that shows that a HEAD request does not normally pass CSRF prote...Michiel Sikkes2013-01-221-0/+4
* deprecate `assert_blank` and `assert_present`.Yves Senn2013-01-051-1/+1
* Implement :null_session CSRF protection methodSergey Nartimov2012-09-131-10/+6
* no need to pass an empty block to button_to helperSergey Nartimov2012-05-301-2/+2
* Cover one more case in auth_token and remote formsPiotr Sarnacki2012-03-281-0/+7
* config.action_view.embed_authenticity_token_in_remote_forms is true by defaultPiotr Sarnacki2012-03-281-19/+14
* Added config.action_view.embed_authenticity_token_in_remote_formsPiotr Sarnacki2012-03-281-2/+48
* fixed - warning: ambiguous first argument; put parentheses or even spacesSandeep2012-03-161-1/+1
* Allow you to force the authenticity_token to be rendered even on remote forms...David Heinemeier Hansson2012-03-141-0/+11
* Do not include the authenticity token in forms where remote: true as ajax for...David Heinemeier Hansson2012-03-141-0/+13
* configure how unverified request will be handledSergey Nartimov2012-03-091-2/+2
* Add config.default_method_for_update to support PATCHDavid Lee2012-02-221-1/+14
* Remove not used requires from csrf helper file and testCarlos Antonio da Silva2012-01-211-7/+0
* Remove rescue_action from compatibility module and testsCarlos Antonio da Silva2012-01-171-2/+0
* Use ensure instead of rescueMike Dillon2011-09-101-1/+1
* Add test for warning and CHANGELOG entryMike Dillon2011-09-101-0/+16
* Replace references to ActiveSupport::SecureRandom with just SecureRandom, and...Jon Leighton2011-05-231-3/+3
* Test csrf token param name customizationDavid Lee2011-05-101-7/+18
* Make csrf_meta_tags use the tag helperJames Robinson2011-04-081-5/+3
* Change the CSRF whitelisting to only apply to get requestsMichael Koziarski2011-02-081-136/+75
* put authenticity_token option in parity w/ remoteDan Pickett2011-02-061-2/+2
* Added tests for form_for and an authenticity_token option. Added docs for for...Timothy N. Tsvetkov2011-02-051-0/+18
* authenticity_token option for form_tag [#2988 state:resolved]Jakub Kuźma2011-01-091-0/+18
* Fix indentation.Emilio Tagua2010-09-271-19/+18
* get csrf_meta_tag back to the generated layout in deference to existing print...Xavier Noria2010-09-141-1/+1
* revises implementation and documentation of csrf_meta_tags, and aliases csrf_...Xavier Noria2010-09-111-2/+6
* code gardening: we have assert_(nil|blank|present), more concise, with better...Xavier Noria2010-08-171-1/+1
* Test that csrf meta content is html-escaped, tooJeremy Kemper2010-02-041-1/+2
* Revert dumb testJeremy Kemper2010-02-041-2/+2
* HTML-escape csrf meta contentsJeremy Kemper2010-02-041-2/+2
* Expose CSRF param name alsoJeremy Kemper2010-02-041-1/+1
* Expose CSRF tag for UJS adaptersJeremy Kemper2010-02-041-1/+15
* Move form_remote_tag and remote_form_for into prototype_legacy_helperJoshua Peek2010-01-301-27/+18
* Fix test bleedJeremy Kemper2009-11-181-1/+1
* Extract form_authenticity_param instance method so it's overridable in subcla...Jeremy Kemper2009-11-171-1/+19
* Cleanup route reloading in tests. Prefer with_routing over using ActionContro...Joshua Peek2009-08-161-5/+1
* Don't check authenticity tokens for any AJAX requestsRoss Kaffenburger and Bryan Helmkamp2009-04-151-5/+6
* Ruby 1.9 compat: rename deprecated assert_raises to assert_raise.Jeremy Kemper2009-03-081-9/+9
* Change the forgery token implementation to just be a simple random string.Michael Koziarski2008-11-231-87/+6
* Merge branch 'master' into testingJeremy Kemper2008-11-151-52/+66
|\
| * Changed request forgery protection to only worry about HTML-formatted content...Jeff Cohen2008-11-131-52/+66
* | Move controller assertions from base TestCase to AC:: and AV::TestCaseJeremy Kemper2008-11-071-5/+5
|/
* Merge branch 'master' of git@github.com:rails/railsrick2008-05-131-0/+24
|\
| * Bug: Earlier Check for Session in Forgery ProtectionPeter Jones2008-05-111-0/+24
* | change ActionController::RequestForgeryProtection to use Mime::Type#verify_re...rick2008-05-061-3/+45
* | Change the request forgery protection to go by Content-Type instead of reques...rick2008-05-061-4/+25
|/
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-01 07:04:00 +0000