| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| * | Move ActionController::Routing.optimise_named_routes to ActionController::Bas... | Rick Olson | 2007-10-03 | 6 | -17/+28 |
| * | Merge session fixation fixes from stable | Michael Koziarski | 2007-10-02 | 2 | -4/+16 |
| * | Ruby 1.9 compat, consistent load paths | Jeremy Kemper | 2007-10-02 | 33 | -170/+193 |
| * | Fixed that render template did not honor exempt_from_layout (closes #9698) [p... | David Heinemeier Hansson | 2007-09-30 | 4 | -3/+24 |
| * | Docfix (closes #9740) [chuyeow] | David Heinemeier Hansson | 2007-09-30 | 1 | -5/+4 |
| * | Fixed JSON encoding to use quoted keys according to the JSON standard (closes... | David Heinemeier Hansson | 2007-09-30 | 1 | -3/+3 |
| * | Updated | David Heinemeier Hansson | 2007-09-29 | 1 | -1/+600 |
| * | Fixed that a response has to be available for that exact mime type for it to ... | David Heinemeier Hansson | 2007-09-29 | 1 | -1/+1 |
| * | Fixed that strip_tags blows up with invalid html (closes #9730) [lifo] | David Heinemeier Hansson | 2007-09-29 | 2 | -4/+9 |
| * | Ensure request is present, as well as defined. [nzkoz] | Michael Koziarski | 2007-09-29 | 1 | -4/+4 |
| * | Re-enable Routing optimisation code for _url methods, add defined?(request) t... | Michael Koziarski | 2007-09-28 | 3 | -17/+23 |
| * | Better error messages if you leave out the :secret option for request forgery... | Rick Olson | 2007-09-28 | 3 | -46/+81 |
| * | Add missing require | Michael Koziarski | 2007-09-28 | 1 | -0/+1 |
| * | Allow ability to disable request forgery protection, disable it in test mode ... | Rick Olson | 2007-09-28 | 12 | -21/+75 |
| * | Fixed spelling errors (closes #9706) [tarmo/rmm5t] | David Heinemeier Hansson | 2007-09-28 | 18 | -30/+30 |
| * | Fixed the layout defaults (closes #9564) [lifo] | David Heinemeier Hansson | 2007-09-28 | 8 | -17/+96 |
| * | Avoid calling is_missing on LoadErrors. Closes #7460. | Nicholas Seckar | 2007-09-27 | 2 | -1/+3 |
| * | Reinstate the default AR.instantiate_observers to_prepare block. | Jeremy Kemper | 2007-09-26 | 1 | -0/+6 |
| * | Move Railties' Dispatcher to ActionController::Dispatcher, introduce before_ ... | Jeremy Kemper | 2007-09-26 | 4 | -1/+302 |
| * | Protect button_to behind protect_from_forgery (closes #9675) [lifo] | David Heinemeier Hansson | 2007-09-25 | 2 | -108/+45 |
| * | Please do remember | David Heinemeier Hansson | 2007-09-25 | 1 | -0/+1 |
| * | Added another failing test | David Heinemeier Hansson | 2007-09-25 | 1 | -0/+24 |
| * | Doh, forgot this file | David Heinemeier Hansson | 2007-09-25 | 1 | -0/+1 |
| * | Better failing tests | David Heinemeier Hansson | 2007-09-25 | 3 | -6/+6 |
| * | Added failing tests for iphone | David Heinemeier Hansson | 2007-09-25 | 3 | -6/+15 |
| * | Updated iphone_with_html_response_type to fail as it uses the new register_al... | David Heinemeier Hansson | 2007-09-24 | 1 | -2/+2 |
| * | Change from InvalidToken to InvalidAuthenticityToken to be more specific | David Heinemeier Hansson | 2007-09-24 | 3 | -28/+33 |
| * | Stop rdoc from whining | David Heinemeier Hansson | 2007-09-24 | 2 | -8/+8 |
| * | Move rescue_action_with_handler from rescue_action to perform_action so it is... | Jeremy Kemper | 2007-09-24 | 1 | -2/+2 |
| * | Include asset host in public path cache key. Clear cache between asset tag te... | Jeremy Kemper | 2007-09-24 | 3 | -9/+22 |
| * | port over some of the csrf_killer README docs | Rick Olson | 2007-09-24 | 1 | -0/+13 |
| * | Beefed up docs a bit | David Heinemeier Hansson | 2007-09-24 | 1 | -17/+27 |
| * | Cache computed public asset paths. | Jeremy Kemper | 2007-09-24 | 1 | -16/+20 |
| * | Cache more file existence checks. Flip-flop escaping. | Jeremy Kemper | 2007-09-24 | 1 | -9/+16 |
| * | Cache file existence checks and the list of all stylesheet sources. Manually ... | Jeremy Kemper | 2007-09-24 | 1 | -7/+10 |
| * | The tag helper may bypass escaping. | Jeremy Kemper | 2007-09-24 | 3 | -17/+32 |
| * | Cache asset ids. | Jeremy Kemper | 2007-09-24 | 2 | -3/+14 |
| * | escape_once uses negative lookahead to avoid double-escaping instead of a sec... | Jeremy Kemper | 2007-09-24 | 1 | -6/+1 |
| * | Optimized named routes respect AbstractRequest.relative_url_root. Closes #9612. | Jeremy Kemper | 2007-09-23 | 3 | -4/+13 |
| * | Dont need all of test/unit (closes #6673) [zenspider/josh] | David Heinemeier Hansson | 2007-09-23 | 1 | -1/+0 |
| * | Remove , and ; (comma and semicolon) from routing separators again. Reference... | Jeremy Kemper | 2007-09-23 | 2 | -3/+3 |
| * | Fixed cache_page to use the request url instead of the routing options when p... | David Heinemeier Hansson | 2007-09-23 | 2 | -8/+20 |
| * | Introduce ActionController::Base.rescue_from to declare exception-handling me... | Jeremy Kemper | 2007-09-23 | 3 | -12/+91 |
| * | Rename some RequestForgeryProtection methods. The class method is now #prote... | Rick Olson | 2007-09-23 | 8 | -44/+50 |
| * | move TextHelper#sanitize config options to the TextHelper module so it can be... | Rick Olson | 2007-09-23 | 2 | -130/+146 |
| * | Merge csrf_killer plugin into rails. Adds RequestForgeryProtection model tha... | Rick Olson | 2007-09-23 | 16 | -22/+368 |
| * | Secure #sanitize, #strip_tags, and #strip_links helpers against xss attacks. ... | Rick Olson | 2007-09-23 | 4 | -53/+423 |
| * | Test fix (closes #6911) | David Heinemeier Hansson | 2007-09-22 | 1 | -1/+1 |
| * | Improve tests (closes #7240) [josh] | David Heinemeier Hansson | 2007-09-22 | 1 | -0/+5 |
| * | Roll back #7578, tests failed | David Heinemeier Hansson | 2007-09-22 | 2 | -12/+3 |
