aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/test/template/html-scanner/sanitizer_test.rb
Commit message (Expand)AuthorAgeFilesLines
* Move template tests from actionpack to actionviewPiotr Sarnacki2013-06-201-330/+0
* fix protocol checking in sanitization [CVE-2013-1857]Aaron Patterson2013-03-151-0/+10
* fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855]Charlie Somerville2013-03-151-0/+5
* Ruby 2 compat. CGI.escapeHTML has changed the way it escapes apostrophes a fe...Jeremy Kemper2012-10-061-1/+1
* Don't ignore non Enumerable values passed to sanitize (closes #5585)Piotr Sarnacki2012-03-271-0/+18
* Refactor button_to helper to use token_tag methodRafael Mendonça França2012-01-191-2/+0
* Handle leading spaces in protocol while sanitizingManu2012-01-121-1/+8
* Tags with invalid names should also be stripped in order to preventAaron Patterson2011-08-161-0/+7
* Test for stripping tags from a frozen string.Joshua Ballanco2011-04-141-0/+1
* ActionController::Base.helpers.sanitize ignores case in protocolTimothy N. Tsvetkov2010-12-301-0/+7
* Deletes trailing whitespaces (over text files only find * -type f -exec sed '...Santiago Pastorino2010-08-141-17/+17
* Strip_tags never ending attribute should not raise a TypeError [#4870 state:r...Bruno Michel2010-06-281-0/+4
* deOMGifying Railties, Active Support, and Action PackMikel Lindsaar2010-01-311-2/+2
* File extra test folders into controller, dispatch, or templateJoshua Peek2009-10-031-0/+273