aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack
Commit message (Collapse)AuthorAgeFilesLines
...
* | Missing or unneeded require extract_optionsAkira Matsuda2013-02-0110-1/+10
| |
* | Use \A in RegexpsEgor Homakov2013-02-011-1/+1
| | | | | | | | | | So, if there is redirect_to params[:q] i can send ?q=javascript:asdf()%0A/localpath Or something more nasty, so please use \A
* | remove dead codeAaron Patterson2013-01-301-4/+1
| |
* | change parameter name for positional argsAaron Patterson2013-01-301-2/+1
| |
* | nodoc the helper classes, cache stuff for optimized helperAaron Patterson2013-01-301-13/+17
| |
* | cache path parts in the instanceAaron Patterson2013-01-301-2/+3
| |
* | stop evaling a string every timeAaron Patterson2013-01-301-4/+4
| |
* | moving helper classes outside the private blockAaron Patterson2013-01-301-90/+88
| |
* | pushing specialization down to the optimized classAaron Patterson2013-01-301-23/+25
| |
* | use polymorphism to remove conditionalAaron Patterson2013-01-301-35/+27
| |
* | move conditionals to instanceAaron Patterson2013-01-301-6/+16
| |
* | pull stuff out of the caller and hide in the instanceAaron Patterson2013-01-301-4/+3
| |
* | moving more stuff on to the instanceAaron Patterson2013-01-301-18/+18
| |
* | move optimize_helper? to the helper instanceAaron Patterson2013-01-301-9/+12
| |
* | moving more stuff to the instanceAaron Patterson2013-01-301-6/+6
| |
* | moving some stuff to the initializerAaron Patterson2013-01-301-14/+38
| |
* | moved more evald codeAaron Patterson2013-01-301-8/+7
| |
* | factored out some of the dynamic codeAaron Patterson2013-01-301-19/+31
| |
* | Fix `content_tag_for` with array html option.Semyon Perepelitsa2013-01-313-1/+25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It would embed array as string instead of joining it like `content_tag` does: content_tag(:td, class: ["foo", "bar"]){} #=> '<td class="foo bar"></td>' Before: content_tag_for(:td, item, class: ["foo", "bar"]){} #=> '<td class="item [&quot;foo&quot;, &quot;bar&quot;]" id="item_1"></td>' After: content_tag_for(:td, item, class: ["foo", "bar"]){} #=> '<td class="item foo bar" id="item_1"></td>'
* | Changelog about BestStandardsSupport removalGuillermo Iguaran2013-01-291-5/+6
| |
* | Add 'X-UA-Compatible' => 'chrome=1' to default headersGuillermo Iguaran2013-01-292-2/+5
| |
* | Remove BestStandardsSupport middlewareGuillermo Iguaran2013-01-294-67/+0
| |
* | Merge pull request #9104 from bemurphy/remove_bad_idea_parser_testCarlos Antonio da Silva2013-01-291-13/+0
|\ \ | | | | | | Remove yaml Proc param parser test
| * | Remove yaml Proc param parser testBrendon Murphy2013-01-281-13/+0
| | | | | | | | | | | | | | | | | | | | | | | | I don't believe this test is exercising any explicit params_parser behavior that the other two Proc tests aren't already doing. Given that we now know it's a bad idea to load user input via YAML.load, somebody reading this test might get a dangerous idea about building out a YAML params parser.
* | | s/ERb/ERB/Akira Matsuda2013-01-291-1/+1
|/ /
* | Merge pull request #9096 from tricknotes/fix-code-commentRafael Mendonça França2013-01-281-4/+4
|\ \ | | | | | | Fix code comment
| * | Fix JavaScript syntax in code comment [ci skip]Ryunosuke SATO2013-01-291-4/+4
| | |
* | | Move AS changelog entry to the top, improve AP changelog a bitCarlos Antonio da Silva2013-01-281-4/+4
| | | | | | | | | | | | [ci skip]
* | | Added a Changelog entry for fixing HEAD requests.Michiel Sikkes2013-01-281-0/+5
| | |
* | | Make current_url? work with a HEAD methodMichiel Sikkes2013-01-282-1/+7
| | | | | | | | | | | | | | | | | | ActionDispatch::Head was removed in favor of Rack::Head. But Rack::Head does not convert GET requests to HEAD requests so we need to do checking for HEAD requests ourselves.
* | | Remove caching_allowed? from ActionController::CachingMichiel Sikkes2013-01-281-4/+0
|/ / | | | | | | | | Where is this used? No other code references to this method and it isn't being tested anywhere. No tests fail when commented out.
* | Merge pull request #9032 from firmhouse/head-breaks-csrfSantiago Pastorino2013-01-282-2/+6
|\ \ | | | | | | Make HEAD work / convert to GET once more
| * | Added request.head? to forgery protection codeMichiel Sikkes2013-01-221-2/+2
| | |
| * | Added a test that shows that a HEAD request does not normally pass CSRF ↵Michiel Sikkes2013-01-221-0/+4
| | | | | | | | | | | | protection
* | | Use Encoding::UTF_8 constant :do_not_litter:Akira Matsuda2013-01-287-11/+11
| | |
* | | Use already defined Encoding constants rather than creating one-trip StringsAkira Matsuda2013-01-282-2/+2
| | |
* | | add fetch to CookieJarAaron Patterson2013-01-272-0/+34
| | |
* | | Merge remote-tracking branch 'docrails/master'Xavier Noria2013-01-266-4/+98
|\ \ \ | | | | | | | | | | | | | | | | | | | | Conflicts: actionpack/lib/action_view/helpers/form_options_helper.rb guides/code/getting_started/app/controllers/comments_controller.rb
| * | | generic pass before merging docrailsXavier Noria2013-01-264-422/+62
| | | |
| * | | :scissors: "raise" duplicationAkira Matsuda2013-01-261-2/+1
| | | |
| * | | Review #translate docs [ci skip]Carlos Antonio da Silva2013-01-201-8/+7
| | | |
| * | | Add documentation for abstract controller #translate and #localize method.Jens Bissinger2013-01-201-0/+10
| | | |
| * | | Add documentation to ActionDispatch::ResponseMatthew Stopa2013-01-201-0/+7
| | | |
| * | | fix broken examples format in image_tag helper [ci skip]Francesco Rodriguez2013-01-181-0/+2
| | | |
| * | | repeating documentation for option form helpersThiago Pinto2013-01-171-0/+286
| | | |
| * | | repeating documentation for date and time form helpersThiago Pinto2013-01-171-0/+148
| | | |
| * | | Fix typo introduced in 0004ca3aCarlos Antonio da Silva2013-01-161-1/+1
| | | | | | | | | | | | | | | | [ci skip]
| * | | More documentation for ActionDispatch::ResponseMatthew Stopa2013-01-161-1/+3
| | | | | | | | | | | | | | | | [ci skip]
| * | | Document ActionDispatch::Response#body methodMatthew Stopa2013-01-161-0/+1
| | | |
* | | | Add keys/values methods to TestSessionCarlos Antonio da Silva2013-01-252-5/+19
| | | | | | | | | | | | | | | | Bring back the same API we have with Request::Session.