aboutsummaryrefslogtreecommitdiffstats
path: root/actionview/actionview.gemspec
Commit message (Collapse)AuthorAgeFilesLines
* use rails-html-sanitizer >= 1.0.3Toshi MARUYAMA2017-01-271-1/+1
| | | | CVE-2015-7579 says rails-html-sanitizer 1.0.2 has XSS vulnerability.
* Change ActionView ERB Handler from Erubis to ErubiJeremy Evans2017-01-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Erubi offers the following advantages for Rails: * Works with ruby's --enable-frozen-string-literal option * Has 88% smaller memory footprint * Does no freedom patching (Erubis adds a method to Kernel) * Has simpler internals (1 file, <150 lines of code) * Has an open development model (Erubis doesn't have a public source control repository or bug tracker) * Is not dead (Erubis hasn't been updated since 2011) Erubi is a simplified fork of Erubis that contains just the parts that are generally needed (which includes the parts that Rails uses). The only intentional difference in behavior is that it does not include support for <%=== tags for debug output. That could be added to the ActionView ERB handler if it is desired. The Erubis template handler remains in a deprecated state so that code that accesses it directly does not break. It can be removed after Rails 5.1.
* applies new string literal convention in the gemspecsXavier Noria2016-08-061-18/+18
| | | | | The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default.
* Update rails-dom-testing gem to 2.0Connor Shea2016-05-091-1/+1
| | | | Resolves #24924.
* revises whitespace in the gemspec of AV [ci skip]Xavier Noria2016-03-101-4/+4
|
* revises the homepage URL in the gemspecs [ci skip]Xavier Noria2016-03-101-1/+1
| | | | References https://github.com/rails/homepage/issues/46.
* Upgrade to Ruby 2.2.2Jon Atack2015-04-141-1/+1
| | | | and fix the grammar in the ruby_version_check.rb user message.
* Merge pull request #19252 from kaspth/single-escaping-strip-tagsRafael Mendonça França2015-03-101-1/+1
|\ | | | | Let strip_tags leave HTML escaping to Rails.
| * Let strip_tags leave HTML escaping to Rails.Kasper Timm Hansen2015-03-101-1/+1
| | | | | | | | Prevents double escaping errors, such as "&amp;" becoming "&amp;amp;".
* | Target Ruby 2.2.1 in gemspecsPeter Suschlik2015-03-091-1/+1
|/ | | | This is a follow-up to #19257
* Require Ruby 2.2 for Rails 5.0claudiob2014-12-261-1/+1
| | | | | Stems from [this comment](https://github.com/rails/rails/pull/18203#issuecomment-68138096) by @robin850 and by the blog post http://weblog.rubyonrails.org/2014/12/19/Rails-4-2-final
* Bump required Ruby version to 2.1.0claudiob2014-11-281-1/+1
| | | | | | | | | [This article](http://weblog.rubyonrails.org/2014/8/20/Rails-4-2-beta1/#maintenance-consequences-and-rails-5-0) states that: > Rails 5.0 is in most likelihood going to target Ruby 2.2. Before the exact minimum version is fully decided, @arthurnn [suggests](https://github.com/rails/rails/pull/17830#issuecomment-64940383) that **at least** version 2.1.0 **must** be required by the `gemspec` files.
* Use released rails-dom-testingRafael Mendonça França2014-11-251-1/+1
|
* Use released rails-dom-testingRafael Mendonça França2014-10-161-1/+1
|
* Use released rails-html-sanitizer and rails-deprecated_sanitizerGodfrey Chan2014-09-261-1/+1
|
* Use released rails-dom-testingRafael Mendonça França2014-09-251-1/+1
|
* Ship with rails-html-sanitizer instead.Kasper Timm Hansen2014-09-031-1/+1
|
* Use released rails-deprecated_sanitizerRafael Mendonça França2014-08-191-1/+1
|
* Fix the rails-dom-testing dependecyRafael Mendonça França2014-08-191-0/+1
|
* Prepare for partial release.Kasper Timm Hansen2014-08-171-2/+1
| | | | | | | - Default to Rails::DeprecatedSanitizer in ActionView::Helpers::SanitizeHelper. - Add upgrade notes. - Add sanitizer to new applications Gemfiles. - Remove 'rails-dom-testing' as a dependency.
* Defining the right dependenciesRafael Mendonça França2014-07-151-1/+2
|
* Added Loofah as a dependency in actionview.gemspec.Timm2014-06-111-0/+1
| | | | | | Implemented ActionView: FullSanitizer, LinkSanitizer and WhiteListSanitizer in sanitizers.rb. Deprecated protocol_separator and bad_tags. Added new tests in sanitizers_test.rb and reimplemented assert_dom_equal with Loofah.
* More liberal builder dependencyŁukasz Strzałkowski2013-12-121-1/+1
| | | | Allowing us to get 3.2.x versions if needed.
* activemodel isn't a runtime dependency for actionviewGuillermo Iguaran2013-12-021-2/+2
|
* Back AV description in gemspecArun Agrawal2013-09-091-1/+1
|
* Revert "Merge branch 'master' of github.com:rails/docrails"Vijay Dev2013-08-171-1/+1
| | | | | | | This reverts commit 70d6e16fbad75b89dd1798ed697e7732b8606fa3, reversing changes made to ea4db3bc078fb3093ecdddffdf4f2f4ff3e1e8f9. Seems to be a code merge done by mistake.
* Added some description to generate actionview gem [ci skip]Arun Agrawal2013-07-171-1/+1
|
* Add actionpack as actionview's development dependencyPiotr Sarnacki2013-06-201-0/+2
| | | | ActionView still relies on ActionPack in some of the tests.
* Add bare actionview gem to the root directoryPiotr Sarnacki2013-06-201-0/+27
This commit creates structure for Action View gem and is first of a series of commits extracting Action View from Action Pack.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-01 22:39:32 +0000