| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Merge pull request #20797 from byroot/prevent-url-for-ac-parameters | Rafael França | 2015-12-18 | 3 | -3/+10 |
| |\ |
|
| | * | Prevent ActionController::Parameters from being passed to url_for directly | Jean Boussier | 2015-12-15 | 3 | -3/+10 |
| * | | Only dup Ruby's Hash and Array. | Kasper Timm Hansen | 2015-12-17 | 1 | -0/+28 |
| * | | Deprecate `redirect_to :back` | Derek Prior | 2015-12-16 | 1 | -2/+15 |
| * | | Add `redirect_back` for safer referrer redirects | Derek Prior | 2015-12-16 | 1 | -0/+21 |
| * | | deletes code commented out in 72160d9f | Tony Ta | 2015-12-15 | 1 | -10/+0 |
| * | | Merge pull request #14212 from tylerhunt/fix-token-regex | Sean Griffin | 2015-12-15 | 1 | -0/+8 |
| |\ \ |
|
| | * | | Handle tab in token authentication header. | Tyler Hunt | 2014-02-26 | 1 | -0/+8 |
| * | | | Add fragment_cache_key macro for controller-wide fragment cache key prefixes | Sam Stephenson | 2015-12-14 | 1 | -0/+25 |
| * | | | Make Parameters#to_h and #to_unsafe_h return HWIA | Prem Sichanugrist | 2015-12-14 | 1 | -4/+4 |
| | |/
|/| |
|
| * | | Merge pull request #20831 from jmbejar/rails-api-json-error-response | Santiago Pastorino | 2015-12-09 | 1 | -4/+6 |
| |\ \ |
|
| | * | | Response when error should be formatted properly in Rails API if local request | Jorge Bejar | 2015-12-09 | 1 | -4/+6 |
| * | | | Fix `make_response!` when called by `serve` in `RouteSet` | eileencodes | 2015-12-09 | 1 | -0/+39 |
| |/ / |
|
| * | | Change the `protect_from_forgery` prepend default to `false` | eileencodes | 2015-12-07 | 1 | -2/+2 |
| * | | Push `before_sending` to super class | eileencodes | 2015-12-06 | 2 | -2/+2 |
| * | | Merge pull request #22263 from mastahyeti/csrf-origin-check | Rafael França | 2015-11-26 | 1 | -0/+45 |
| |\ \ |
|
| | * | | Add option to verify Origin header in CSRF checks | Ben Toews | 2015-11-25 | 1 | -0/+45 |
| * | | | Remove arity check for `RouteSet#draw` | yui-knk | 2015-11-21 | 1 | -6/+0 |
| |/ / |
|
| * | | Require only necessary concurrent-ruby classes. | Jerry D'Antonio | 2015-11-04 | 1 | -1/+1 |
| * | | tests, test should not care wether 9ms or 11ms have passed. | Yves Senn | 2015-11-04 | 1 | -1/+1 |
| * | | Deprecate exception#original_exception in favor of exception#cause | Yuki Nishijima | 2015-11-03 | 1 | -2/+10 |
| * | | switch to JSON.dump to avoid infinite recursion | Aaron Patterson | 2015-10-29 | 1 | -1/+1 |
| * | | Write the cookie jar it was not committed in TestCase | Rafael Mendonça França | 2015-10-28 | 1 | -1/+1 |
| * | | Remove skip on tests that have been fixed. | Guo Xiang Tan | 2015-10-24 | 1 | -4/+0 |
| * | | FIX: Randomly failing test when running without GIL. | Guo Xiang Tan | 2015-10-23 | 1 | -0/+6 |
| * | | Merge pull request #19327 from rousisk/master | Sean Griffin | 2015-10-22 | 1 | -2/+2 |
| |\ \ |
|
| | * | | Change Integer#year to return a Fixnum instead of a Float to improve consistency | Konstantinos Rousis | 2015-10-22 | 1 | -2/+2 |
| * | | | Suppress warnings (warnings about AD::IntegrationTest HTTP request) | yui-knk | 2015-10-22 | 1 | -1/+1 |
| |/ / |
|
| * | | Merge pull request #20715 from simsalabim/feature/parse-rss-atom-as-xml | Sean Griffin | 2015-10-20 | 1 | -13/+17 |
| * | | Delete needless `require 'active_support/deprecation'` | yui-knk | 2015-10-20 | 1 | -1/+0 |
| * | | Use `Mime[:foo]` instead of `Mime::Type[:FOO]` for back compat | Jeremy Daer | 2015-10-06 | 8 | -32/+32 |
| * | | move file sending to the response object | Aaron Patterson | 2015-10-05 | 1 | -1/+1 |
| * | | call `get` instead of controller.process | Aaron Patterson | 2015-09-23 | 1 | -12/+10 |
| * | | remove controller construction | Aaron Patterson | 2015-09-23 | 1 | -8/+4 |
| * | | stop directly referencing the request and response objects | Aaron Patterson | 2015-09-23 | 1 | -23/+21 |
| * | | test framework allocates the controller for us | Aaron Patterson | 2015-09-23 | 1 | -1/+0 |
| * | | type of response should not matter | Aaron Patterson | 2015-09-23 | 1 | -6/+0 |
| * | | don't touch the response object until after we call `get` | Aaron Patterson | 2015-09-23 | 1 | -5/+2 |
| * | | stop directly setting headers on the controller | Aaron Patterson | 2015-09-23 | 1 | -9/+1 |
| * | | test against controller responses | Aaron Patterson | 2015-09-23 | 1 | -52/+65 |
| * | | don't access the response object before a request was made | Aaron Patterson | 2015-09-23 | 1 | -1/+10 |
| * | | Merge pull request #21703 from ronakjangir47/redirect_error_messages | Jeremy Daer | 2015-09-21 | 1 | -2/+4 |
| |\ \ |
|
| | * | | Added assertion for error messages for redirection to nil and params | Ronak Jangir | 2015-09-21 | 1 | -2/+4 |
| * | | | stop calling deprecated methods | Aaron Patterson | 2015-09-21 | 7 | -31/+31 |
| |/ / |
|
| * | | Added test for `send_file_headers` called with nil content type | Ronak Jangir | 2015-09-19 | 1 | -1/+12 |
| * | | do not instantiate a param parser middleware | Aaron Patterson | 2015-09-18 | 1 | -8/+12 |
| * | | create a new renderer instance on calls to `for` | Aaron Patterson | 2015-09-14 | 1 | -16/+3 |
| * | | eagerly allocate the renderer object | Aaron Patterson | 2015-09-14 | 1 | -0/+4 |
| * | | Handle Content-Types that are not :json, :xml, or :url_encoded_form | eileencodes | 2015-09-09 | 1 | -0/+25 |
| * | | Merge pull request #21502 from bernerdschaefer/bs-polymorphic-url_for-dups-ar... | Rafael Mendonça França | 2015-09-08 | 1 | -0/+20 |
| |\ \ |
|
