| Commit message (Expand) | Author | Age | Files | Lines |
* | Correct parameter access. | Philip Arndt | 2012-09-19 | 1 | -1/+1 |
* | Merge pull request #7251 from rails/integrate-strong_parameters | David Heinemeier Hansson | 2012-09-18 | 6 | -40/+251 |
|\ |
|
| * | Support fields_for attributes, which may have numeric symbols as hash keys | Guillermo Iguaran | 2012-09-16 | 1 | -0/+18 |
| * | Add config.action_controller.permit_all_attributes to bypass StrongParameters... | Guillermo Iguaran | 2012-09-16 | 1 | -0/+14 |
| * | Change tainted/untainted wording to permitted/forbidden | Guillermo Iguaran | 2012-09-16 | 3 | -26/+26 |
| * | Don't use assert_nothing_raised when assert_equal is used | Guillermo Iguaran | 2012-09-16 | 1 | -4/+2 |
| * | require abstract_unit in parameters tests | Guillermo Iguaran | 2012-09-16 | 3 | -0/+3 |
| * | Remove integration between attr_accessible/protected and AC::Metal::ParamsWra... | Guillermo Iguaran | 2012-09-16 | 1 | -40/+0 |
| * | Integrate ActionController::Parameters from StrongParameters gem | Guillermo Iguaran | 2012-09-16 | 5 | -0/+218 |
* | | log 404 status when ActiveRecord::RecordNotFound was raised (#7646) | Yves Senn | 2012-09-17 | 1 | -0/+15 |
|/ |
|
* | Merge pull request #7616 from lest/null-session-forgery-protection | Michael Koziarski | 2012-09-13 | 1 | -10/+6 |
|\ |
|
| * | Implement :null_session CSRF protection method | Sergey Nartimov | 2012-09-13 | 1 | -10/+6 |
* | | Define a SynchronousQueue for test in Action Pack. | Rafael Mendonça França | 2012-09-12 | 1 | -0/+10 |
|/ |
|
* | AS::Callbacks: deprecate monkey patch of object callbacks | Bogdan Gusiev | 2012-09-07 | 1 | -7/+7 |
* | Added controller-level etag additions that will be part of the action etag co... | David Heinemeier Hansson | 2012-08-29 | 1 | -0/+32 |
* | Add automatic template digests to all CacheHelper#cache calls (originally spi... | David Heinemeier Hansson | 2012-08-29 | 1 | -5/+16 |
* | Add Missing Keys from Journey on failed URL format | schneems | 2012-08-28 | 1 | -6/+6 |
* | Deprecate AV::RecordIdentifier in controllers | Piotr Sarnacki | 2012-08-28 | 1 | -0/+41 |
* | Use ActionView::Base.logger instead of AC::Base.logger | Piotr Sarnacki | 2012-08-28 | 1 | -1/+1 |
* | Move action_controller/vendor/html-scanner to action_view | Piotr Sarnacki | 2012-08-28 | 3 | -3/+3 |
* | Move ActionController::RecordIdentifier to ActionView | Piotr Sarnacki | 2012-08-28 | 1 | -40/+0 |
* | Access @rs only through attr_accessor | tomykaira | 2012-08-20 | 1 | -11/+11 |
* | Extract common controllers to abstract_unit | Rafael Mendonça França | 2012-08-13 | 1 | -29/+0 |
* | set the controller under test so we no longer need the reset! method | Aaron Patterson | 2012-08-09 | 1 | -38/+4 |
* | removes usage of Object#in? from the code base (the method remains defined by... | Xavier Noria | 2012-08-06 | 2 | -7/+8 |
* | make sure the body finishes rendering before checking response closure | Aaron Patterson | 2012-08-03 | 1 | -1/+2 |
* | Collapsed dual checks (one for content headers and one for content) into a si... | Armand du Plessis | 2012-08-02 | 2 | -4/+34 |
* | Merge pull request #7240 from steveklabnik/fix_2301 | Rafael Mendonça França | 2012-08-02 | 1 | -3/+4 |
|\ |
|
| * | Fix for digest authentication bug - issue #2301 in rails/rails | Arthur Smith | 2012-08-02 | 1 | -3/+4 |
* | | load active_support/core_ext/object/inclusion in active_support/rails | Xavier Noria | 2012-08-02 | 2 | -2/+0 |
|/ |
|
* | html_escape should escape single quotes | Santiago Pastorino | 2012-07-31 | 2 | -3/+3 |
* | close the response when the response body is set so that normal render calls ... | Aaron Patterson | 2012-07-29 | 1 | -0/+9 |
* | header hash is duped before being sent up the rack stack | Aaron Patterson | 2012-07-29 | 1 | -0/+13 |
* | make sure set_response! sets the correct response object | Aaron Patterson | 2012-07-29 | 1 | -0/+6 |
* | Controller actions are processed in a separate thread for live | Aaron Patterson | 2012-07-29 | 1 | -3/+69 |
* | added live responses which can be written and read in separate threads | Aaron Patterson | 2012-07-29 | 1 | -0/+26 |
* | flushing output should write to the stream rather than mutating the response ... | Aaron Patterson | 2012-07-29 | 1 | -3/+3 |
* | remove dead test | Aaron Patterson | 2012-07-29 | 1 | -4/+0 |
* | adding a buffered stream to the response object | Aaron Patterson | 2012-07-29 | 1 | -0/+30 |
* | Remove warning renaming the test classes to use the test convention | Rafael Mendonça França | 2012-07-29 | 2 | -2/+2 |
* | this test is not a controller test, so switch to AS::TC | Aaron Patterson | 2012-07-28 | 1 | -1/+1 |
* | Clean up Sweeper controller accessor when an Error is raised | Brian John | 2012-07-20 | 1 | -0/+11 |
* | Fix indentation. | Piotr Sarnacki | 2012-07-11 | 1 | -4/+4 |
* | Don't raise an error if http auth token isn't well formatted | Piotr Sarnacki | 2012-07-11 | 1 | -0/+8 |
* | deprecate `describe` without a block. | Aaron Patterson | 2012-07-09 | 3 | -12/+0 |
* | Use "instance_accessor" for flash types class attribute | Carlos Antonio da Silva | 2012-07-07 | 1 | -1/+0 |
* | Added support add_flash_types | kennyj | 2012-07-07 | 1 | -0/+26 |
* | Remove unused code. | kennyj | 2012-07-07 | 1 | -4/+0 |
* | Prevent conflict between mime types and Object methods | Mircea Pricop | 2012-07-06 | 1 | -1/+3 |
* | Merge branch 'master' into testclean | Aaron Patterson | 2012-07-05 | 1 | -0/+5 |
|\ |
|