| Commit message (Expand) | Author | Age | Files | Lines |
* | Merge pull request #10971 from dtaniwaki/escape_link_to_unless | Rafael Mendonça França | 2013-06-24 | 1 | -0/+5 |
* | Compare host scheme using case-insensitive regexp | Rafael Mendonça França | 2013-06-16 | 1 | -10/+30 |
* | So not make Fixnum#/ private on Ruby verions less than 1.9.3 | Rafael Mendonça França | 2013-05-10 | 1 | -4/+3 |
* | Merging in fix from #8222 | Ben Tucker | 2013-05-06 | 1 | -0/+5 |
* | Fix explicit names on multiple file fields | Ryan McGeary | 2013-04-05 | 1 | -0/+10 |
* | Fix typo in view name | Carlos Antonio da Silva | 2013-04-03 | 2 | -1/+1 |
* | Use 1.8 hash style in test views | Carlos Antonio da Silva | 2013-04-03 | 2 | -2/+2 |
* | Common behavior with adding formats to lookup_context for TemplateRenderer an... | Dmitry Vorotilin | 2013-04-02 | 8 | -0/+17 |
* | Backport #5808 | Mack Earnhardt | 2013-03-24 | 2 | -0/+39 |
* | Fix test to Ruby 1.8 | Rafael Mendonça França | 2013-03-21 | 1 | -1/+1 |
* | Merge branch '3-2-stable' into fredwu-slow_view_loading_fix | Aaron Patterson | 2013-03-20 | 1 | -0/+12 |
|\ |
|
| * | Merge pull request #9802 from newsline/fix-broken-action-missing | Rafael Mendonça França | 2013-03-20 | 1 | -0/+12 |
* | | Fixed assets loading performance in 3.2.13 | Fred Wu | 2013-03-20 | 1 | -0/+9 |
|/ |
|
* | Backport #9347 to rails 3.2 | hoffm | 2013-03-19 | 1 | -0/+5 |
* | Merge branch '3-2-13' into 3-2-stable | Aaron Patterson | 2013-03-18 | 1 | -0/+15 |
|\ |
|
| * | fix protocol checking in sanitization [CVE-2013-1857] | Aaron Patterson | 2013-03-15 | 1 | -0/+10 |
| * | fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855] | Charlie Somerville | 2013-03-15 | 1 | -0/+5 |
| * | Merge pull request #9616 from exviva/multiple_select_name_double_square_brackets | Carlos Antonio da Silva | 2013-03-12 | 1 | -0/+8 |
* | | Extract hardcoded lists to Redo::RestaurantsList | Juan Barreneche | 2013-03-14 | 1 | -0/+9 |
* | | Merge pull request #9616 from exviva/multiple_select_name_double_square_brackets | Carlos Antonio da Silva | 2013-03-09 | 1 | -0/+8 |
* | | Backport fixes about #7774 to 3-2-stable | maximerety | 2013-03-05 | 1 | -0/+9 |
|/ |
|
* | Ruby 2 compat. CGI.escapeHTML has changed the way it escapes apostrophes a fe... | Jeremy Kemper | 2013-02-24 | 1 | -1/+1 |
* | Ruby 2.0.0 defaults source encoding to utf-8 so we need to specifically tag t... | Aaron Patterson | 2013-02-24 | 1 | -0/+1 |
* | Use 1.8 hash style | Carlos Antonio da Silva | 2013-02-22 | 1 | -1/+1 |
* | determine the match shorthand target early. | Yves Senn | 2013-02-22 | 1 | -0/+27 |
* | Duplicate possible frozen string from route | Andrew White | 2013-01-21 | 1 | -0/+7 |
* | Do not run this streaming test in Ruby 1.8, fix syntax error | Carlos Antonio da Silva | 2013-01-17 | 1 | -5/+8 |
* | Merge pull request #5288 from lest/patch-2 | José Valim | 2013-01-17 | 1 | -0/+13 |
* | fixes #8631 local inflections from interfereing with HTTP_METHOD_LOOKUP dispa... | Aditya Sanghi | 2013-01-16 | 1 | -0/+21 |
* | Merge pull request #8914 from nilbus/fix-header-bloat | Rafael Mendonça França | 2013-01-15 | 1 | -1/+2 |
* | Fix JSON params parsing regression for non-object JSON content. | Dylan Smith | 2013-01-11 | 1 | -0/+7 |
* | Merge pull request #8756 from causes/js_include_tag_fix | Guillermo Iguaran | 2013-01-10 | 1 | -0/+7 |
|\ |
|
| * | Fix javascript_include_tag when no js runtime is available | Noah Silas | 2013-01-07 | 1 | -0/+7 |
* | | Fixes issue where duplicate assets can be required with sprockets. | jejacks0n | 2013-01-10 | 3 | -0/+7 |
* | | Merge branch '3-2-sec' into 3-2-secmerge | Aaron Patterson | 2013-01-08 | 3 | -0/+45 |
|\ \ |
|
| * | | CVE-2013-0156: Safe XML params parsing. Doesn't allow symbols or yaml. | Jeremy Kemper | 2013-01-08 | 1 | -0/+13 |
| * | | * Strip nils from collections on JSON and XML posts. [CVE-2013-0155] * dealin... | Aaron Patterson | 2013-01-08 | 2 | -0/+32 |
* | | | Do not call fields_for from form_for, to avoid instantiating two builders | Carlos Antonio da Silva | 2013-01-06 | 1 | -1/+13 |
* | | | backport #4f0f1b5 into 3-2-stable. because 1.9.3-p362 warned unused variables. | SHIBATA Hiroshi | 2013-01-05 | 1 | -1/+2 |
| |/
|/| |
|
* | | Use Ruby 1.8 syntax | Rafael Mendonça França | 2013-01-02 | 1 | -2/+2 |
* | | Backport #8701, do not append a second slash with `trailing_slash: true` | Yves Senn | 2013-01-02 | 1 | -5/+15 |
* | | fix block.arity raise nil error when not given a block to "content_tag_for" | jasl | 2013-01-02 | 1 | -0/+8 |
* | | Don't use 1.9 hash syntax on 3-2-stable | Andrew White | 2012-12-14 | 1 | -8/+8 |
* | | Clear url helper methods when routes are reloaded | Andrew White | 2012-12-14 | 1 | -0/+86 |
* | | Merge pull request #8490 from mattv/fix_request_raw_post | Rafael Mendonça França | 2012-12-11 | 1 | -0/+7 |
* | | Make distance_of_time_in_words work with DateTime offsets | Andrew White | 2012-12-04 | 1 | -0/+10 |
* | | Make output of distance_of_time_in_words consistent | Andrew White | 2012-12-04 | 1 | -2/+19 |
* | | Use 1.8 hash style | Carlos Antonio da Silva | 2012-12-03 | 1 | -1/+1 |
* | | Override <%== to always behave as literal text rather than toggling based on ... | Jeremy Kemper | 2012-12-03 | 2 | -4/+10 |
* | | Merge pull request #8402 from senny/8376_descriptive_error_message_for_partia... | Rafael Mendonça França | 2012-12-02 | 1 | -1/+6 |