| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove extra whitespace | Santiago Pastorino | 2012-11-15 | 1 | -1/+1 |
* | Merge pull request #8112 from rails/encrypted_cookies | Santiago Pastorino | 2012-11-15 | 2 | -4/+8 |
|\ |
|
| * | Move ensure_secret_secure to DummyKeyGenerator | Santiago Pastorino | 2012-11-03 | 1 | -1/+1 |
| * | Use derived keys everywhere, http_authentication was missing it | Santiago Pastorino | 2012-11-03 | 1 | -1/+3 |
| * | Sign cookies using key deriver | Santiago Pastorino | 2012-11-03 | 1 | -2/+4 |
* | | start using options object | Aaron Patterson | 2012-11-13 | 1 | -1/+1 |
* | | Revert "Merge pull request #8017 from jcoglan/objectless_sessions" | Jon Leighton | 2012-11-09 | 1 | -21/+0 |
* | | Merge pull request #8017 from jcoglan/objectless_sessions | Jon Leighton | 2012-11-08 | 1 | -0/+21 |
|\ \ |
|
| * | | Store FlashHashes in the session as plain hashes rather than custom objects w... | James Coglan | 2012-11-03 | 1 | -0/+21 |
| |/ |
|
* | | Test that permitted? is sticky on accessors, mutators, and merges | Benjamin Quorning | 2012-11-06 | 1 | -0/+24 |
* | | Test that not permitted is sticky on #except | Benjamin Quorning | 2012-11-06 | 1 | -0/+1 |
* | | Current tests are testing stickiness of non-permitted parameters | Benjamin Quorning | 2012-11-06 | 1 | -3/+3 |
* | | Fix buggy tests | Benjamin Quorning | 2012-11-06 | 1 | -4/+4 |
* | | Add ensure block to make sure the state is properly restored | Carlos Antonio da Silva | 2012-11-04 | 1 | -1/+1 |
|/ |
|
* | No need for the debugger | David Heinemeier Hansson | 2012-10-31 | 1 | -1/+0 |
* | Allow #permit to take its list of permitted parameters as an array | David Heinemeier Hansson | 2012-10-31 | 1 | -0/+5 |
* | cleanup, remove trailing whitespace within actionpack | Yves Senn | 2012-10-27 | 6 | -8/+8 |
* | Permit string and float values in the multiparameter attributes | Rafael Mendonça França | 2012-10-18 | 1 | -9/+14 |
* | Cleanup trailing whitespaces | dfens | 2012-10-12 | 1 | -1/+1 |
* | When executing permit with just a key that points to a hash, DO NOT allow all... | Santiago Pastorino | 2012-10-12 | 1 | -1/+5 |
* | can't pass :locals to #assert_template without a view test case. Closes #3415 | Yves Senn | 2012-10-06 | 1 | -0/+11 |
* | Allow parameter filters to match multi-parameter attributes | Rafael Mendonça França | 2012-10-05 | 1 | -0/+33 |
* | ActionController::Parameters#permit! is recursive | Brendan Loudermilk | 2012-10-04 | 1 | -0/+7 |
* | rename page_cache_extension option to default_static_extension | Francesco Rodriguez | 2012-10-03 | 1 | -0/+15 |
* | extract AP Page and Action caching to actionpack-deprecated_caching gem | Francesco Rodriguez | 2012-10-03 | 2 | -739/+16 |
* | Failsafe exception returns text/plain. | Steve Klabnik | 2012-10-01 | 1 | -0/+16 |
* | `assert_template` no more passing with what ever string that matches. | Hugo Roque | 2012-09-29 | 1 | -0/+22 |
* | move metal/caching_test into controller/caching_test | Francesco Rodriguez | 2012-09-27 | 1 | -5/+42 |
* | remove method redefinition warnings | Rafael Mendonça França | 2012-09-27 | 1 | -1/+1 |
* | Allow strings in the controller test describe blocks | Mike Moore | 2012-09-24 | 2 | -0/+129 |
* | Support controller tests using spec DSL - fixes #7743 | Mike Moore | 2012-09-24 | 1 | -0/+116 |
* | Correct parameter access. | Philip Arndt | 2012-09-19 | 1 | -1/+1 |
* | Merge pull request #7251 from rails/integrate-strong_parameters | David Heinemeier Hansson | 2012-09-18 | 6 | -40/+251 |
|\ |
|
| * | Support fields_for attributes, which may have numeric symbols as hash keys | Guillermo Iguaran | 2012-09-16 | 1 | -0/+18 |
| * | Add config.action_controller.permit_all_attributes to bypass StrongParameters... | Guillermo Iguaran | 2012-09-16 | 1 | -0/+14 |
| * | Change tainted/untainted wording to permitted/forbidden | Guillermo Iguaran | 2012-09-16 | 3 | -26/+26 |
| * | Don't use assert_nothing_raised when assert_equal is used | Guillermo Iguaran | 2012-09-16 | 1 | -4/+2 |
| * | require abstract_unit in parameters tests | Guillermo Iguaran | 2012-09-16 | 3 | -0/+3 |
| * | Remove integration between attr_accessible/protected and AC::Metal::ParamsWra... | Guillermo Iguaran | 2012-09-16 | 1 | -40/+0 |
| * | Integrate ActionController::Parameters from StrongParameters gem | Guillermo Iguaran | 2012-09-16 | 5 | -0/+218 |
* | | log 404 status when ActiveRecord::RecordNotFound was raised (#7646) | Yves Senn | 2012-09-17 | 1 | -0/+15 |
|/ |
|
* | Merge pull request #7616 from lest/null-session-forgery-protection | Michael Koziarski | 2012-09-13 | 1 | -10/+6 |
|\ |
|
| * | Implement :null_session CSRF protection method | Sergey Nartimov | 2012-09-13 | 1 | -10/+6 |
* | | Define a SynchronousQueue for test in Action Pack. | Rafael Mendonça França | 2012-09-12 | 1 | -0/+10 |
|/ |
|
* | AS::Callbacks: deprecate monkey patch of object callbacks | Bogdan Gusiev | 2012-09-07 | 1 | -7/+7 |
* | Added controller-level etag additions that will be part of the action etag co... | David Heinemeier Hansson | 2012-08-29 | 1 | -0/+32 |
* | Add automatic template digests to all CacheHelper#cache calls (originally spi... | David Heinemeier Hansson | 2012-08-29 | 1 | -5/+16 |
* | Add Missing Keys from Journey on failed URL format | schneems | 2012-08-28 | 1 | -6/+6 |
* | Deprecate AV::RecordIdentifier in controllers | Piotr Sarnacki | 2012-08-28 | 1 | -0/+41 |
* | Use ActionView::Base.logger instead of AC::Base.logger | Piotr Sarnacki | 2012-08-28 | 1 | -1/+1 |