| Commit message (Expand) | Author | Age | Files | Lines |
* | CVE-2013-0156: Safe XML params parsing. Doesn't allow symbols or yaml. | Jeremy Kemper | 2013-01-08 | 1 | -0/+13 |
* | * Strip nils from collections on JSON and XML posts. [CVE-2013-0155] * dealin... | Aaron Patterson | 2013-01-08 | 2 | -0/+32 |
* | Add test to avoid regression of 4a86362 | Rafael Mendonça França | 2012-11-02 | 1 | -0/+10 |
* | Revert "Merge pull request #7668 from Draiken/fix_issue_6497" | Rafael Mendonça França | 2012-11-02 | 1 | -7/+0 |
* | Revert "Merge pull request #7659 from HugoLnx/template_error_no_matches_rebased" | Rafael Mendonça França | 2012-10-31 | 2 | -23/+0 |
* | Merge pull request #7865 from teleological/link_to_remote_3_2 | Rafael Mendonça França | 2012-10-06 | 1 | -0/+7 |
|\ |
|
| * | Accept :remote as symbol in link_to options | Riley | 2012-10-06 | 1 | -0/+7 |
* | | Use the Ruby 1.8 hash syntax | Rafael Mendonça França | 2012-10-06 | 1 | -1/+1 |
|/ |
|
* | Merge pull request #7848 from senny/3415_assert_template_has_nil_variable | Rafael Mendonça França | 2012-10-06 | 1 | -0/+11 |
* | Merge pull request #7789 from senny/7777_resource_functions_modify_options | Rafael Mendonça França | 2012-10-01 | 1 | -0/+20 |
* | Since File instance doesn't respond to #open use a double to test the | Rafael Mendonça França | 2012-09-30 | 2 | -4/+3 |
* | Merge pull request #7659 from HugoLnx/template_error_no_matches_rebased | Rafael Mendonça França | 2012-09-30 | 2 | -0/+23 |
* | Don't paramify ActionDispatch::Http::UploadedFile in tests | Tim Vandecasteele | 2012-09-29 | 1 | -0/+7 |
* | Revert "Revert "Respect `config.digest = false` for `asset_path`"" | Rafael Mendonça França | 2012-09-20 | 1 | -0/+8 |
* | Revert "Respect `config.digest = false` for `asset_path`" | Rafael Mendonça França | 2012-09-20 | 1 | -8/+0 |
* | Merge pull request #7668 from Draiken/fix_issue_6497 | Rafael Mendonça França | 2012-09-19 | 1 | -0/+7 |
* | Respect `config.digest = false` for `asset_path` | Peter Wagenet | 2012-09-17 | 1 | -0/+8 |
* | log 404 status when ActiveRecord::RecordNotFound was raised (#7646) | Yves Senn | 2012-09-17 | 1 | -0/+15 |
* | Fix bug when Rails.application is defined but is nil. See #881 | Marc-Andre Lafortune | 2012-08-28 | 1 | -0/+7 |
* | correct handling of date selects when using both disabled and discard options | Vasiliy Ermolovich | 2012-08-25 | 1 | -0/+24 |
* | Merge pull request #7410 from sandeepravi/default_options_helper_value | Rafael Mendonça França | 2012-08-21 | 1 | -0/+12 |
* | Test actual content of permanent cookie | brainopia | 2012-08-10 | 1 | -1/+1 |
* | Dont stream back cookie value if it was set to the same value | brainopia | 2012-08-10 | 1 | -1/+13 |
* | Revert "Revert "Merge pull request #6084 from brainopia/support_for_magic_dom... | brainopia | 2012-08-10 | 1 | -0/+7 |
* | Merge branch '3-2-8' into 3-2-stable | Santiago Pastorino | 2012-08-09 | 2 | -2/+8 |
|\ |
|
| * | Do not mark strip_tags result as html_safe | Santiago Pastorino | 2012-08-09 | 1 | -2/+2 |
| * | escape select_tag :prompt values | Santiago Pastorino | 2012-08-09 | 1 | -0/+6 |
| * | html_escape should escape single quotes | Santiago Pastorino | 2012-08-02 | 9 | -31/+31 |
* | | Do not include application.js if it doesn't exists | Prem Sichanugrist | 2012-08-06 | 1 | -0/+9 |
* | | Revert "Merge pull request #6084 from brainopia/support_for_magic_domain_on_a... | Rafael Mendonça França | 2012-08-05 | 1 | -7/+0 |
* | | Merge pull request #6084 from brainopia/support_for_magic_domain_on_all_stores | José Valim | 2012-08-02 | 1 | -0/+7 |
* | | html_escape should escape single quotes | Santiago Pastorino | 2012-08-02 | 9 | -31/+31 |
|/ |
|
* | Revert "Deprecate link_to_function and button_to_function helpers" | Rafael Mendonça França | 2012-08-01 | 1 | -24/+12 |
* | Revert "Deprecate `:mouseover` options for `image_tag` helper." | Rafael Mendonça França | 2012-08-01 | 1 | -40/+8 |
* | Revert "Deprecate `:confirm` in favor of `:data => { :confirm => 'Text' }` op... | Rafael Mendonça França | 2012-08-01 | 3 | -149/+52 |
* | Add support for optional root segments containing slashes | Andrew White | 2012-07-17 | 1 | -0/+26 |
* | Fixed bug creating invalid HTML in select options | Rusty Geldmacher | 2012-07-10 | 1 | -0/+13 |
* | Show in log correct wrapped keys | Dmitry Vorotilin | 2012-07-05 | 1 | -0/+8 |
* | Merge pull request #6649 from route/logger_in_metal_3_2 | Carlos Antonio da Silva | 2012-06-18 | 1 | -0/+17 |
|\ |
|
| * | Added test for case when view doesn't have logger method when using ActionCon... | Dmitry Vorotilin | 2012-06-16 | 1 | -0/+17 |
* | | It should also include text/css => Build Fix | Arun Agrawal | 2012-06-16 | 1 | -1/+1 |
* | | Merge pull request #6752 from steveklabnik/fix_5680 | Rafael Mendonça França | 2012-06-16 | 2 | -3/+14 |
|/ |
|
* | adding a test for #6459 | Aaron Patterson | 2012-06-14 | 1 | -0/+10 |
* | ActionController::Caching depends on RackDelegation and AbstractController::C... | Santiago Pastorino | 2012-06-13 | 1 | -0/+32 |
* | Array parameters should not contain nil values. | Aaron Patterson | 2012-06-11 | 1 | -0/+4 |
* | Duplicate tests removed. | Arun Agrawal | 2012-06-09 | 1 | -16/+0 |
* | Fix asset tags for files with more than one dot | Piotr Sarnacki | 2012-06-07 | 3 | -0/+6 |
* | Add test to flash sweep after two redirects | Rafael Mendonça França | 2012-06-05 | 1 | -0/+20 |
* | Deprecate `:confirm` in favor of `:data => { :confirm => 'Text' }` option | Carlos Galdino | 2012-06-05 | 2 | -19/+110 |
* | Allow to use mounted helpers in ActionView::TestCase | Piotr Sarnacki | 2012-06-01 | 2 | -0/+20 |