| Commit message (Expand) | Author | Age | Files | Lines |
* | Add test case for the `|` token in Journey scanner | vaidehijoshi | 2018-06-18 | 1 | -0/+6 |
* | Fix rubocop violations | bogdanvlviv | 2018-06-15 | 1 | -1/+1 |
* | Fix bug with eager_load in development environment | Dan Jensen | 2018-06-11 | 1 | -0/+9 |
* | Use Rack to generate query information under test | Aaron Patterson | 2018-06-08 | 1 | -2/+10 |
* | Include application/javascript when checking content_type | Gabriel Jaldon | 2018-05-27 | 1 | -0/+5 |
* | Fix `CustomCops/AssertNot` to allow it to have failure message | Ryuta Kamizono | 2018-05-13 | 5 | -7/+7 |
* | Add support for prefetch-src directive | yuuji.yaginuma | 2018-05-03 | 1 | -0/+6 |
* | Reset CONTENT_LENGTH between test requests | Eugene Kenny | 2018-05-01 | 1 | -0/+8 |
* | Break up Journey's scanner test | vaidehijoshi | 2018-04-24 | 1 | -47/+50 |
* | Reset RAW_POST_DATA between test requests | Eugene Kenny | 2018-04-20 | 1 | -0/+8 |
* | Merge pull request #29286 from vinistock/create_missing_exact_template_exception | Rafael Mendonça França | 2018-04-20 | 2 | -3/+3 |
|\ |
|
| * | Create MissingExactTemplate exception with separate template | Vinicius Stock | 2018-04-20 | 2 | -3/+3 |
* | | Merge pull request #23868 from gsamokovarov/debug-exceptions-interceptors | Rafael França | 2018-04-20 | 1 | -0/+24 |
|\ \ |
|
| * | | Introduce ActionDispatch::DebugExceptions interceptors | Genadi Samokovarov | 2018-04-20 | 1 | -0/+24 |
* | | | warning: ambiguous first argument; put parentheses or a space even after `/' ... | utilum | 2018-04-20 | 1 | -1/+1 |
|/ / |
|
* | | Merge pull request #32593 from sdhull/fix-strong-params-permit-bang | Rafael Mendonça França | 2018-04-19 | 1 | -1/+4 |
|\ \ |
|
| * | | Fixes StrongParameters permit! to work with nested arrays | Steve Hull | 2018-04-16 | 1 | -1/+4 |
* | | | Replace `assert !` with `assert_not` | Daniel Colson | 2018-04-19 | 14 | -26/+26 |
* | | | Pass nonce to CSP policy from outside | Andrew White | 2018-04-18 | 1 | -21/+72 |
* | | | Output only one nonce in CSP header per request | Andrey Novikov | 2018-04-17 | 1 | -5/+23 |
|/ / |
|
* | | Fix rendering a differently-formatted partial after caching | George Claghorn | 2018-04-13 | 3 | -0/+14 |
* | | Add WebSocket URI support to CSP DSL mappings | Stephen Solis | 2018-04-12 | 1 | -0/+6 |
* | | Add `TestCaseTest#test_request_format_kwarg_doesnt_mutate_params` to master | bogdanvlviv | 2018-04-10 | 1 | -0/+8 |
* | | Partially revert 0bfdd1d | yuuji.yaginuma | 2018-04-07 | 1 | -1/+5 |
* | | Fix broken `ServerTest` with Capybara 3.0.0 | yuuji.yaginuma | 2018-04-06 | 1 | -5/+1 |
* | | Merge pull request #32441 from composerinteralia/refute-not | Rafael França | 2018-04-04 | 3 | -8/+8 |
|\ \ |
|
| * | | Autocorrect `refute` RuboCop violations | Daniel Colson | 2018-04-03 | 3 | -8/+8 |
* | | | Add #dig to ActionDispatch::Request::Session | claudiob | 2018-04-04 | 1 | -0/+12 |
* | | | Merge pull request #32336 from vincedevendra/allow_mutating_dig_return_value | Aaron Patterson | 2018-04-02 | 1 | -0/+8 |
|\ \ \
| |/ /
|/| | |
|
| * | | Make mutating params#dig mutate underlying params | Vince DeVendra | 2018-03-24 | 1 | -0/+8 |
* | | | Merge pull request #32277 from derekprior/dp-deprecate-force-ssl | Guillermo Iguaran | 2018-03-30 | 2 | -15/+29 |
|\ \ \
| |/ /
|/| | |
|
| * | | Deprecate controller level force_ssl | Derek Prior | 2018-03-30 | 2 | -15/+29 |
* | | | Use ASCII-8BIT paths in ActionDispatch::Static | Andrew White | 2018-03-22 | 5 | -1/+12 |
|/ / |
|
* | | Check exclude before flagging cookies as secure in ActionDispatch::SSL (#32262) | Catherine Khuu | 2018-03-15 | 1 | -0/+8 |
* | | Fix routing inspector tests broken in https://github.com/rails/rails/commit/6... | Kasper Timm Hansen | 2018-03-13 | 1 | -14/+15 |
* | | Introduce `ActionDispatch::Routing::ConsoleFormatter::Base` | bogdanvlviv | 2018-03-13 | 1 | -11/+11 |
* | | Merge pull request #32160 from bogdanvlviv/improve-rails-routes-expanded | Kasper Timm Hansen | 2018-03-11 | 1 | -5/+10 |
|\ \ |
|
| * | | Draw line of a route name to the end of row console on `rails routes --expanded` | bogdanvlviv | 2018-03-05 | 1 | -5/+10 |
* | | | Always yield a CSP policy instance | Andrew White | 2018-03-08 | 1 | -12/+58 |
* | | | Add the ability to disable the global CSP in a controller | Andrew White | 2018-03-08 | 1 | -0/+14 |
|/ / |
|
* | | Ruby 2.4: take advantage of String#unpack1 | Jeremy Daer | 2018-03-01 | 1 | -1/+1 |
* | | Add --expanded option to "rails routes" | Benoit Tigeot | 2018-02-28 | 1 | -2/+66 |
* | | Uses the absolute path for system test screenshots | Zamith | 2018-02-27 | 1 | -5/+5 |
* | | Merge branch 'master' into update_default_hsts_max_age | Guillermo Iguaran | 2018-02-24 | 39 | -260/+289 |
|\ \ |
|
| * \ | Merge pull request #32018 from rails/add-nonce-support-to-csp | Andrew White | 2018-02-22 | 1 | -0/+16 |
| |\ \ |
|
| | * | | Add support for automatic nonce generation for Rails UJS | Andrew White | 2018-02-19 | 1 | -0/+16 |
| * | | | We should call methods with `.method_name` not `::method_name`. | utilum | 2018-02-22 | 2 | -5/+6 |
| |/ / |
|
| * | | Remove trailing semi-colon from CSP | Andrew White | 2018-02-19 | 1 | -32/+32 |
| * | | Revert "Merge pull request #32045 from eagletmt/skip-csp-header" | Andrew White | 2018-02-19 | 1 | -20/+2 |
| * | | Skip generating empty CSP header when no policy is configured | Kohei Suzuki | 2018-02-18 | 1 | -2/+20 |