Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Test csrf token param name customization | David Lee | 2011-05-10 | 1 | -7/+18 |
| | |||||
* | Get around weird missing constant error caused by AS instead of simply ↵ | José Valim | 2011-05-11 | 1 | -21/+24 |
| | | | | raising NameError, closes #477. | ||||
* | Revert to old semantics, use available_action? instead of action_method?. | José Valim | 2011-05-06 | 1 | -4/+4 |
| | |||||
* | controller's prefixes are now added to LookupContext. | Nick Sutterer | 2011-05-03 | 1 | -0/+4 |
| | |||||
* | Fix typos in test method names | Vijay Dev | 2011-05-03 | 1 | -3/+3 |
| | |||||
* | raise an error if the old router draw method is used, along with a message ↵ | Josh Kalderimis | 2011-05-03 | 1 | -0/+6 |
| | | | | advising them to either upgrade their routes or add rails_legacy_mapper to their Gemfile | ||||
* | Fix broken params_wrapper_test on 1.8.7 :bomb: | Prem Sichanugrist | 2011-05-03 | 1 | -36/+80 |
| | | | | | I have to keep in mind that 1.8.7 does *not* preserve the hash order. Guys, let's move to use 1.9.2 in production! | ||||
* | Improve performance for filtered parameters and add tests. | José Valim | 2011-05-03 | 1 | -0/+11 |
| | |||||
* | Move most processing to load time for performance and improve test suite. | José Valim | 2011-05-03 | 1 | -12/+27 |
| | |||||
* | Add `ActionController::ParamsWrapper` to wrap parameters into a nested hash | Prem Sichanugrist | 2011-05-03 | 1 | -0/+187 |
| | | | This will allow us to do a rootless JSON/XML request to server. | ||||
* | Tidy up pending TODOs after discussion with Mr. Gatoz (@wycats). | José Valim | 2011-05-01 | 1 | -7/+7 |
| | |||||
* | log errors when an exception happens when streaming. | José Valim | 2011-05-01 | 1 | -0/+13 |
| | |||||
* | Add a test for rendering from the controller context. | José Valim | 2011-05-01 | 1 | -0/+54 |
| | |||||
* | prevent errors when passing a frozen string as a param to ↵ | misfo | 2011-04-28 | 1 | -0/+12 |
| | | | | | | | ActionController::TestCase#process since ActionDispatch::Http::Parameters#encode_params will force encoding on all params strings (when using an encoding aware Ruby), dup all strings passed into process. This prevents modification of params passed in and, more importantly, doesn't barf when a frozen string is passed thanks and high fives to kinsteronline | ||||
* | rename test case to better describe use case | David Chelimsky | 2011-04-25 | 1 | -6/+6 |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Don't reuse a closed flash when using now | Florent Piteau | 2011-04-20 | 1 | -0/+8 |
| | |||||
* | Do not stream on HTTP/1.0. | José Valim | 2011-04-19 | 1 | -0/+8 |
| | |||||
* | Output a redirect to the 500 page if something happens when streaming. | José Valim | 2011-04-19 | 1 | -1/+23 |
| | | | | | | Currently, we output: "><script type="text/javascript">window.location = "/500.html"</script></html> | ||||
* | Be sure to not store the closed flash in the session. | José Valim | 2011-04-19 | 1 | -1/+8 |
| | |||||
* | Test explicit skip. | José Valim | 2011-04-18 | 1 | -1/+10 |
| | |||||
* | Just define the controller if fibers are defined. | José Valim | 2011-04-18 | 1 | -2/+2 |
| | |||||
* | Body... wanna *stream* my body? Body... such a thrill my body! | José Valim | 2011-04-18 | 1 | -0/+62 |
| | | | | | Added stream as class level method to make it explicit when to stream. Render also accepts :stream as option. | ||||
* | switch to using comments to comment things | Aaron Patterson | 2011-04-15 | 1 | -2/+1 |
| | |||||
* | render :once, YAGNI. | José Valim | 2011-04-15 | 1 | -86/+0 |
| | |||||
* | ActionView::PathSet# accepts String or Array | David Chelimsky | 2011-04-13 | 1 | -0/+29 |
| | | | | | | - Closes #6692 Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Remove `#among?` from Active Support | Prem Sichanugrist | 2011-04-13 | 1 | -1/+1 |
| | | | | | | After a long list of discussion about the performance problem from using varargs and the reason that we can't find a great pair for it, it would be best to remove support for it for now. It will come back if we can find a good pair for it. For now, Bon Voyage, `#among?`. | ||||
* | removes the RJS template handler | Xavier Noria | 2011-04-13 | 5 | -66/+11 |
| | |||||
* | removes support for render :update | Xavier Noria | 2011-04-13 | 5 | -389/+0 |
| | |||||
* | removes assert_select_rjs | Xavier Noria | 2011-04-13 | 1 | -351/+0 |
| | |||||
* | Change Object#either? to Object#among? -- thanks to @jamesarosen for the ↵ | David Heinemeier Hansson | 2011-04-12 | 1 | -1/+1 |
| | | | | suggestion! | ||||
* | Using Object#in? and Object#either? in various places | Prem Sichanugrist | 2011-04-11 | 2 | -4/+6 |
| | | | | There're a lot of places in Rails source code which make a lot of sense to switching to Object#in? or Object#either? instead of using [].include?. | ||||
* | Make csrf_meta_tags use the tag helper | James Robinson | 2011-04-08 | 1 | -5/+3 |
| | | | | Improved formatting of csrf_helper and improved test coverage | ||||
* | many args does not make sense with the current implementation because of how ↵ | Aaron Patterson | 2011-04-06 | 1 | -10/+0 |
| | | | | `use` works | ||||
* | getting the flash hash under test | Aaron Patterson | 2011-04-06 | 1 | -0/+100 |
| | |||||
* | favor composition over inheritance, have FlashHash delegate to a Hash | Aaron Patterson | 2011-04-06 | 1 | -4/+4 |
| | |||||
* | Make process reuse the env var passed as argument | Santiago Pastorino | 2011-04-06 | 1 | -0/+8 |
| | |||||
* | raise if someone tries to modify the flash when it was already streamed back ↵ | Santiago Pastorino | 2011-04-05 | 1 | -0/+50 |
| | | | | to the client or converted to HTTP headers | ||||
* | Implicit actions named not_implemented can be rendered | Santiago Pastorino | 2011-04-02 | 1 | -2/+11 |
| | |||||
* | pass respond_with options to controller render when using a template for api ↵ | Josh Kalderimis | 2011-03-31 | 1 | -0/+19 |
| | | | | | | navigation Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | only try to display an api template in responders if the request is a get or ↵ | Josh Kalderimis | 2011-03-31 | 1 | -0/+21 |
| | | | | | | there are no errors Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | when using respond_with with an invalid resource and custom options, the ↵ | Josh Kalderimis | 2011-03-31 | 1 | -0/+17 |
| | | | | | | default response status and error messages should be returned Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Make action_method? public and change implicit rendering to override it instead. | José Valim | 2011-03-30 | 1 | -0/+5 |
| | |||||
* | Added Base.http_basic_authenticate_with to do simple http basic ↵ | David Heinemeier Hansson | 2011-03-28 | 1 | -0/+16 |
| | | | | authentication with a single class method call [DHH] | ||||
* | Add controller-specific `force_ssl` method to force web browser to use HTTPS ↵ | Prem Sichanugrist | 2011-03-28 | 1 | -0/+83 |
| | | | | | | | | protocol This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH. | ||||
* | Fix filter :only and :except with implicit actions | Andrew White | 2011-03-23 | 1 | -11/+16 |
| | | | | | | | The method_name argument is "default_render" for implicit actions so use the action_name attribute to determine which callbacks to run. [#5673 state:resolved] | ||||
* | Add a failing test case for an implicit action with a before filter. | Manfred Stienstra | 2011-03-23 | 1 | -0/+22 |
| | | | | Signed-off-by: Andrew White <andyw@pixeltrix.co.uk> | ||||
* | Filter params that return nil for to_param and allow through false values | Andrew White | 2011-03-09 | 1 | -0/+8 |
| | |||||
* | Action Pack typos. | R.T. Lechow | 2011-03-05 | 1 | -1/+1 |
| | |||||
* | Fix Action caching bug where an action that has a non-cacheable response ↵ | Cheah Chu Yeow | 2011-03-02 | 1 | -0/+5 |
| | | | | | | | | | | always renders a nil response body. It now correctly renders the response body. Note that only GET and HTTP 200 responses can be cached. [#6480 state:committed] Signed-off-by: Santiago Pastorino <santiago@wyeworks.com> | ||||
* | Change the CSRF whitelisting to only apply to get requests | Michael Koziarski | 2011-02-08 | 1 | -136/+75 |
| | | | | | | | | Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets. To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header: X-CSRF-Token: ... This fixes CVE-2011-0447 |