aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | Add 'X-Frame-Options' => 'SAMEORIGIN' and 'X-XSS-Protection' => '1; ↵Santiago Pastorino2012-08-101-0/+6
| | | | | | | | | | | | | | | | mode=block' CHANGELOG entry
* | | | Test actual content of permanent cookiebrainopia2012-08-101-1/+1
| |/ / |/| |
* | | set the controller under test so we no longer need the reset! methodAaron Patterson2012-08-091-38/+4
| | |
* | | Do not mark strip_tags result as html_safeSantiago Pastorino2012-08-092-3/+3
| | | | | | | | | | | | | | | | | | Thanks to Marek Labos & Nethemba CVE-2012-3465
* | | push drawing once to it's own moduleAaron Patterson2012-08-091-32/+20
| | |
* | | refactor the before_setup hooks to a moduleAaron Patterson2012-08-091-13/+12
| | |
* | | switch callbacks to minitest hooksAaron Patterson2012-08-091-3/+6
| | |
* | | Merge pull request #7302 from homakov/default_headersAaron Patterson2012-08-093-0/+33
|\ \ \ | | | | | | | | Introduce default_headers. closes #6311 #6515
| * | | some testsEgor Homakov2012-08-091-0/+27
| | | |
| * | | introduce default_headers configEgor Homakov2012-08-092-0/+6
| |/ /
* | | initialize instance variablesAaron Patterson2012-08-093-0/+22
| | |
* | | use a sized buffer to prevent the queue being too largeAaron Patterson2012-08-081-10/+10
|/ /
* | Allow data attributes to be set as a first-level option for form_for, so you ↵David Heinemeier Hansson2012-08-083-0/+27
| | | | | | | | can write `form_for @record, data: { behavior: 'autosave' }` instead of `form_for @record, html: { data: { behavior: 'autosave' } }` *DHH*
* | Modernize the documentation for view caching somewhatDavid Heinemeier Hansson2012-08-082-53/+23
| |
* | Deprecate `button_to_function` and `link_to_function` helpers.Rafael Mendonça França2012-08-073-2/+104
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We recommend the use of Unobtrusive JavaScript instead. For example: link_to "Greeting", "#", :class => "nav_link" $(function() { $('.nav_link').click(function() { // Some complex code return false; }); }); or link_to "Greeting", '#', onclick: "alert('Hello world!'); return false", class: "nav_link" for simple cases. This reverts commit 3acdd652e9fe99481c879c84c5807a84eb9ad724.
* | Remove antiquated example codeDavid Heinemeier Hansson2012-08-079-219/+0
| |
* | Remove outdated examples and feature highlightsDavid Heinemeier Hansson2012-08-071-285/+0
| |
* | Revert "Merge pull request #7033 from kron4eg/master". Not a a fan at all of ↵David Heinemeier Hansson2012-08-073-76/+4
| | | | | | | | | | | | | | what this makes ERB files look like. This reverts commit 46b8bceedd3e47169c50a04c93161424909c75fb, reversing changes made to 2f58795e783150f2e1b1f6c64e305703f0061129.
* | Restoring the '%' trim mode for ERb templates, allowing for a leading ↵Artiom Di2012-08-073-4/+76
| | | | | | | | percent sign on a line to indicate non-inserted Ruby code.
* | Rearrange example output of javascript_include_tagPrem Sichanugrist2012-08-061-2/+2
| |
* | Do not include application.js if it doesn't existsPrem Sichanugrist2012-08-063-4/+18
| | | | | | | | | | | | Rails were including 'application.js' to the pack when using `javascript_include_tag :all` even there's no application.js in the public directory.
* | Don't use `html_escape` to test the escapingRafael Mendonça França2012-08-054-4/+4
| |
* | Add CHANGELOG entry for 3c731a4ad62430100ba0b65bc966aa6dc6280c5fRafael Mendonça França2012-08-051-0/+4
| |
* | removes usage of Object#in? from the code base (the method remains defined ↵Xavier Noria2012-08-069-15/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | by Active Support) Selecting which key extensions to include in active_support/rails made apparent the systematic usage of Object#in? in the code base. After some discussion in https://github.com/rails/rails/commit/5ea6b0df9a36d033f21b52049426257a4637028d we decided to remove it and use plain Ruby, which seems enough for this particular idiom. In this commit the refactor has been made case by case. Sometimes include? is the natural alternative, others a simple || is the way you actually spell the condition in your head, others a case statement seems more appropriate. I have chosen the one I liked the most in each case.
* | Revert "polymorphic_url with an array generates a query string"Andrew White2012-08-042-18/+1
| | | | | | | | | | Passing options as the last value in an array doesn't work with form_for. This reverts commit 61c8a4d926343903593a27080216af7e4ed81268.
* | Revert "Refactor passing url options via array for polymorphic_url"Andrew White2012-08-043-11/+2
| | | | | | | | | | Passing options as the last value in an array doesn't work with form_for. This reverts commit 6be564c7a087773cb0b51c54396cc190e4f5c983.
* | RouteSet: cleanup some unneeded compexityBogdan Gusiev2012-08-041-16/+7
| |
* | Renamed _path_segments to _recallBogdan Gusiev2012-08-044-5/+5
| |
* | Simplify logical statementBogdan Gusiev2012-08-041-4/+2
| |
* | Merge branch 'polymorphic_url_builds_query_string_with_array'Andrew White2012-08-043-1/+27
|\ \ | |/ |/|
| * Refactor passing url options via array for polymorphic_urlAndrew White2012-08-043-2/+11
| | | | | | | | | | | | | | | | Rather than keep the url options in record_or_hash_or_array, extract it and reverse merge with options as it may contain important private keys like `:routing_type`. Closes #7259
| * polymorphic_url with an array generates a query stringRomain Tribes2012-08-042-1/+18
| | | | | | | | | | Generating an URL with an array of records is now able to build a query string if the last item of the array is a hash.
* | Merge branch 'master' of github.com:lifo/docrailsVijay Dev2012-08-042-1/+9
|\ \ | |/ |/| | | | | | | Conflicts: activemodel/lib/active_model/secure_password.rb activerecord/lib/active_record/associations/collection_proxy.rb
| * copy edits [ci skip]Vijay Dev2012-08-041-2/+2
| |
| * fix punctuation in #resources and #match documentation [ci skip]Francesco Rodriguez2012-07-311-4/+4
| |
| * Update #match documentation [ci skip]Robert Pankowecki2012-07-311-0/+4
| |
| * Update #resources documentation [ci skip]Robert Pankowecki2012-07-311-0/+4
| |
| * use 'HTTP_AUTHORIZATION' instead of :authorization as key when dealing with ↵Francesco Rodriguez2012-07-271-1/+1
| | | | | | | | HTTP Token authentication in integration tests
* | Add test select_tag escapes promptSantiago Pastorino2012-08-031-0/+6
| |
* | Use content_tag here instead of manually building HTMLSantiago Pastorino2012-08-031-2/+6
| |
* | make sure the body finishes rendering before checking response closureAaron Patterson2012-08-031-1/+2
| |
* | Collapsed dual checks (one for content headers and one for content) into a ↵Armand du Plessis2012-08-023-8/+38
| | | | | | | | | | | | | | | | | | | | | | | | single check. Rails includes a single character body to a head(:no_content) response to work around an old Safari bug where headers were ignored if no body sent. This patch brings the behavior slightly closer to spec if :no_content/204 is explicity requested via a head only response. Status comparison done on symbolic and numeric values Not returning any content when responding with head and limited to a status code that explicitly states no content will be returned - 100..199, 204, 205, 304.
* | Merge pull request #7240 from steveklabnik/fix_2301Rafael Mendonça França2012-08-023-4/+7
|\ \ | | | | | | Fix for digest authentication bug - issue #2301 in rails/rails
| * | Changelog entry for Digest Auth fix (#2301)Steve Klabnik2012-08-021-0/+2
| | |
| * | Fix for digest authentication bug - issue #2301 in rails/railsArthur Smith2012-08-022-4/+5
| | |
* | | load active_support/deprecation in active_support/railsXavier Noria2012-08-021-1/+0
| | |
* | | load active_support/core_ext/module/delegation in active_support/railsXavier Noria2012-08-026-6/+0
| | |
* | | load active_support/core_ext/class/attribute in active_support/railsXavier Noria2012-08-0214-14/+0
| | |
* | | load active_support/concern in active_support/railsXavier Noria2012-08-024-4/+0
| | |
* | | load active_support/dependencies/autoload in active_support/railsXavier Noria2012-08-022-2/+0
| | |