index
:
rails.git
3-2-stable-for-hmno
master
Mirror of official rails repo with custom fixes.
Harald Eilertsen
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
actionview
/
lib
/
action_view
/
helpers
Commit message (
Expand
)
Author
Age
Files
Lines
...
*
|
|
Merge pull request #11218 from kaspth/loofah-integration
Rafael Mendonça França
2014-07-10
1
-106
/
+59
|
\
\
\
|
|
/
/
|
/
|
|
|
*
|
Don't splat arguments to allowed tags or attributes.
Timm
2014-06-16
1
-2
/
+2
|
*
|
Change sanitizer_vendor to just be a method and reword documentation.
Timm
2014-06-16
1
-4
/
+5
|
*
|
Revert some stuff to use the new sanitizers.
Timm
2014-06-16
1
-6
/
+6
|
*
|
Add a layer of indirection making sanitizers pluggable.
Timm
2014-06-16
1
-3
/
+8
|
*
|
Delegate allowed tags and attributes setting to HTML::WhiteListSanitizer.
Timm
2014-06-16
1
-4
/
+4
|
*
|
Changed configuration documentation to no longer state it replaces a Set.
Timm
2014-06-16
1
-2
/
+2
|
*
|
Deprecate configurations and use allowed_tags and allowed_attributes on White...
Timm
2014-06-16
1
-99
/
+22
|
*
|
Made deprecation messages in sanitize_helper more clear.
Timm
2014-06-16
1
-3
/
+3
|
*
|
Completed integration of rails-html-sanitizer in SanitizeHelper. Deprecated p...
Timm
2014-06-16
3
-294
/
+19
|
*
|
Changed PermitScrubber's direction to bottom up to align better with Loofah's...
Timm
2014-06-16
1
-0
/
+1
|
*
|
Now only requiring Loofah in the places where it is needed.
Timm
2014-06-16
1
-0
/
+2
|
*
|
Minor rewording in TargetScrubber documentation.
Timm
2014-06-16
1
-3
/
+3
|
*
|
Now returning html if html is blank? in FullSanitizer and WhiteListSanitizer....
Timm
2014-06-16
1
-1
/
+3
|
*
|
Stylistic improvements. Some light documentation for remove_xpaths.
Timm
2014-06-16
1
-6
/
+8
|
*
|
Simplified the removal of xpaths in remove_xpaths. Added more tests for remov...
Timm
2014-06-16
1
-1
/
+1
|
*
|
Fixed: added apostrophe to possessive noun.
Timm
2014-06-16
1
-1
/
+1
|
*
|
Changed: remove_xpaths called with String returns String, while called with L...
Timm
2014-06-16
1
-2
/
+2
|
*
|
Removed :nodoc: from PermitScrubber.
Timm
2014-06-16
1
-1
/
+0
|
*
|
Reworked documentation for PermitScrubber and TargetScrubber.
Timm
2014-06-16
1
-2
/
+33
|
*
|
Fixed: spelling error.
Timm
2014-06-16
1
-1
/
+1
|
*
|
Initialized tags and attributes to nil.
Timm
2014-06-16
1
-0
/
+4
|
*
|
Refactored scrub to keep_node? instead of scrub_node calling it. Also added a...
Timm
2014-06-16
1
-6
/
+5
|
*
|
Changed PermitScrubber to be even more extensible. Updated TargetScrubber to ...
Timm
2014-06-16
1
-39
/
+40
|
*
|
Changed PermitScrubbers documentation to list override points for subclasses....
Timm
2014-06-16
1
-12
/
+15
|
*
|
Already killed off LinkScrubber. Changed it instead to be TargetScrubber, whi...
Timm
2014-06-16
2
-9
/
+20
|
*
|
Added LinkScrubber to remove duplication in LinkSanitizer. As such made Permi...
Timm
2014-06-16
2
-11
/
+22
|
*
|
Changed FullSanitizer sanitize to use tap method instead of temporary variable.
Timm
2014-06-16
1
-3
/
+3
|
*
|
Extracted the common xpaths to remove into XPATHS_TO_REMOVE.
Timm
2014-06-16
1
-2
/
+4
|
*
|
Refactored remove_xpaths to use duck typing and read better.
Timm
2014-06-16
1
-4
/
+5
|
*
|
Changed explanation for no duck typing of custom scrubbers.
Timm
2014-06-16
1
-1
/
+2
|
*
|
Updated documentation to tell that a custom scrubber takes precedence.
Timm
2014-06-15
1
-0
/
+1
|
*
|
Updated the documentation to reflect the scrubber option.
Timm
2014-06-15
1
-1
/
+22
|
*
|
Marked the private API as not needing code documentation.
Timm
2014-06-15
2
-0
/
+2
|
*
|
Added ability to pass a custom scrubber to sanitize. Includes test coverage.
Timm
2014-06-15
1
-1
/
+3
|
*
|
Moved requiring of Loofah from sanitizers.rb to action_view.rb.
Timm
2014-06-15
1
-1
/
+0
|
*
|
Added ActionView::Sanitizer and moved remove_xpaths to there.
Timm
2014-06-15
1
-7
/
+0
|
*
|
Added comment removal. Changed definitation of remove_xpaths to not use a spl...
Timm
2014-06-15
1
-11
/
+24
|
*
|
Extracted the xpath removals into some new API that allows users to remove xp...
Timm
2014-06-15
1
-2
/
+8
|
*
|
Added removal of script tags to WhiteListSanitizer.
Timm
2014-06-15
1
-0
/
+1
|
*
|
Added guard clauses to FullSanitizer.
Timm
2014-06-15
1
-1
/
+6
|
*
|
bad_tags include form since we remove it. Also to prevent a should_allow_form...
Timm
2014-06-15
1
-1
/
+1
|
*
|
Removed the contains_bad_protocols? method as well as the tests for it. Loofa...
Timm
2014-06-15
1
-8
/
+2
|
*
|
Reordered form removal with stripping.
Timm
2014-06-15
1
-4
/
+7
|
*
|
Added PermitScrubber which allows you to permit elements for sanitization.
Timm
2014-06-15
2
-13
/
+85
|
*
|
Removed duplication in the deprecated methods.
Timm
2014-06-15
1
-5
/
+5
|
*
|
Added Loofah as a dependency in actionview.gemspec.
Timm
2014-06-11
2
-23
/
+140
*
|
|
Include missing module in tag_helper
Carlos Antonio da Silva
2014-07-09
1
-0
/
+1
*
|
|
[ci skip] /javascript/ -> JavaScript - cover whole app
Akshay Vishnoi
2014-07-04
1
-2
/
+2
*
|
|
Use if/else
Rafael Mendonça França
2014-06-30
1
-2
/
+5
[prev]
[next]