| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | remove_method is private | Carlhuda | 2010-03-04 | 1 | -2/+2 |
| | | |||||
| * | Safely cleans up a test to avoid relying on a particular test order | wycats | 2010-03-04 | 1 | -10/+23 |
| | | |||||
| * | WIP: Remove the global router | Carlhuda | 2010-02-25 | 1 | -1/+1 |
| | | |||||
| * | For performance reasons, you can no longer call html_safe! on Strings. ↵ | Yehuda Katz | 2010-01-31 | 1 | -1/+1 |
| | | | | | | | | | | | | | Instead, all Strings are always not html_safe?. Instead, you can get a SafeBuffer from a String by calling #html_safe, which will SafeBuffer.new(self). * Additionally, instead of doing concat("</form>".html_safe), you can do safe_concat("</form>"), which will skip both the flag set, and the flag check. * For the first pass, I converted virtually all #html_safe!s to #html_safe, and the tests pass. A further optimization would be to try to use #safe_concat as much as possible, reducing the performance impact if we know up front that a String is safe. | ||||
| * | Use new routing dsl in tests | Joshua Peek | 2009-12-08 | 1 | -2/+2 |
| | | |||||
| * | Share ActionView::TestCase's output_buffer with view for concat support. | Chris Hapgood | 2009-11-07 | 1 | -0/+5 |
| | | | | | | | [#3467 state:resolved] Signed-off-by: Eloy Duran <eloy.de.enige@gmail.com> | ||||
| * | Make some assertions in the ActionView::TestCase tests actually do something. | Chris Hapgood | 2009-11-07 | 1 | -4/+4 |
| | | | | | | | [#3468 state:resolved] Signed-off-by: Eloy Duran <eloy.de.enige@gmail.com> | ||||
| * | Switch to on-by-default XSS escaping for rails. | Michael Koziarski | 2009-10-08 | 1 | -1/+1 |
| | | | | | | | | | | | | | This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration. | ||||
| * | File extra test folders into controller, dispatch, or template | Joshua Peek | 2009-10-03 | 1 | -0/+172 |
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Harald Eilertsen |
| aboutsummaryrefslogtreecommitdiffstats |