| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | | | Merge pull request #11218 from kaspth/loofah-integration | Rafael Mendonça França | 2014-07-10 | 1 | -106/+59 | |
| |\ \ \ | |/ / |/| | | | | | | | | | | | | | | | | | Loofah-integration Conflicts: actionpack/CHANGELOG.md actionview/CHANGELOG.md | |||||
| | * | | Don't splat arguments to allowed tags or attributes. | Timm | 2014-06-16 | 1 | -2/+2 | |
| | | | | ||||||
| | * | | Change sanitizer_vendor to just be a method and reword documentation. | Timm | 2014-06-16 | 1 | -4/+5 | |
| | | | | ||||||
| | * | | Revert some stuff to use the new sanitizers. | Timm | 2014-06-16 | 1 | -6/+6 | |
| | | | | ||||||
| | * | | Add a layer of indirection making sanitizers pluggable. | Timm | 2014-06-16 | 1 | -3/+8 | |
| | | | | ||||||
| | * | | Delegate allowed tags and attributes setting to HTML::WhiteListSanitizer. | Timm | 2014-06-16 | 1 | -4/+4 | |
| | | | | ||||||
| | * | | Changed configuration documentation to no longer state it replaces a Set. | Timm | 2014-06-16 | 1 | -2/+2 | |
| | | | | ||||||
| | * | | Deprecate configurations and use allowed_tags and allowed_attributes on ↵ | Timm | 2014-06-16 | 1 | -99/+22 | |
| | | | | | | | | | | | | | WhiteListSanitizer. | |||||
| | * | | Made deprecation messages in sanitize_helper more clear. | Timm | 2014-06-16 | 1 | -3/+3 | |
| | | | | ||||||
| | * | | Completed integration of rails-html-sanitizer in SanitizeHelper. Deprecated ↵ | Timm | 2014-06-16 | 3 | -294/+19 | |
| | | | | | | | | | | | | | protocol_separator accessors and bad_tags=. | |||||
| | * | | Changed PermitScrubber's direction to bottom up to align better with ↵ | Timm | 2014-06-16 | 1 | -0/+1 | |
| | | | | | | | | | | | | | Loofah's strip scrubber. | |||||
| | * | | Now only requiring Loofah in the places where it is needed. | Timm | 2014-06-16 | 1 | -0/+2 | |
| | | | | ||||||
| | * | | Minor rewording in TargetScrubber documentation. | Timm | 2014-06-16 | 1 | -3/+3 | |
| | | | | ||||||
| | * | | Now returning html if html is blank? in FullSanitizer and ↵ | Timm | 2014-06-16 | 1 | -1/+3 | |
| | | | | | | | | | | | | | WhiteListSanitizer. This means it'll return false if called with false, however that is not a valid use case. | |||||
| | * | | Stylistic improvements. Some light documentation for remove_xpaths. | Timm | 2014-06-16 | 1 | -6/+8 | |
| | | | | ||||||
| | * | | Simplified the removal of xpaths in remove_xpaths. Added more tests for ↵ | Timm | 2014-06-16 | 1 | -1/+1 | |
| | | | | | | | | | | | | | remove_xpaths. | |||||
| | * | | Fixed: added apostrophe to possessive noun. | Timm | 2014-06-16 | 1 | -1/+1 | |
| | | | | ||||||
| | * | | Changed: remove_xpaths called with String returns String, while called with ↵ | Timm | 2014-06-16 | 1 | -2/+2 | |
| | | | | | | | | | | | | | Loofah fragment returns Loofah fragment. Added tests for this. | |||||
| | * | | Removed :nodoc: from PermitScrubber. | Timm | 2014-06-16 | 1 | -1/+0 | |
| | | | | ||||||
| | * | | Reworked documentation for PermitScrubber and TargetScrubber. | Timm | 2014-06-16 | 1 | -2/+33 | |
| | | | | ||||||
| | * | | Fixed: spelling error. | Timm | 2014-06-16 | 1 | -1/+1 | |
| | | | | ||||||
| | * | | Initialized tags and attributes to nil. | Timm | 2014-06-16 | 1 | -0/+4 | |
| | | | | ||||||
| | * | | Refactored scrub to keep_node? instead of scrub_node calling it. Also added ↵ | Timm | 2014-06-16 | 1 | -6/+5 | |
| | | | | | | | | | | | | | ability to stop traversing by returning STOP from scrub_node. | |||||
| | * | | Changed PermitScrubber to be even more extensible. Updated TargetScrubber to ↵ | Timm | 2014-06-16 | 1 | -39/+40 | |
| | | | | | | | | | | | | | be compliant. Updated documentation for PermitScrubber and TargetScrubber for clarity. | |||||
| | * | | Changed PermitScrubbers documentation to list override points for ↵ | Timm | 2014-06-16 | 1 | -12/+15 | |
| | | | | | | | | | | | | | subclasses. Renamed should_remove_attributes? to should_scrub_attributes?. | |||||
| | * | | Already killed off LinkScrubber. Changed it instead to be TargetScrubber, ↵ | Timm | 2014-06-16 | 2 | -9/+20 | |
| | | | | | | | | | | | | | which is more general, while still allowing maximum code reuse. | |||||
| | * | | Added LinkScrubber to remove duplication in LinkSanitizer. As such made ↵ | Timm | 2014-06-16 | 2 | -11/+22 | |
| | | | | | | | | | | | | | PermitScrubber easier to subclass. | |||||
| | * | | Changed FullSanitizer sanitize to use tap method instead of temporary variable. | Timm | 2014-06-16 | 1 | -3/+3 | |
| | | | | ||||||
| | * | | Extracted the common xpaths to remove into XPATHS_TO_REMOVE. | Timm | 2014-06-16 | 1 | -2/+4 | |
| | | | | ||||||
| | * | | Refactored remove_xpaths to use duck typing and read better. | Timm | 2014-06-16 | 1 | -4/+5 | |
| | | | | ||||||
| | * | | Changed explanation for no duck typing of custom scrubbers. | Timm | 2014-06-16 | 1 | -1/+2 | |
| | | | | ||||||
| | * | | Updated documentation to tell that a custom scrubber takes precedence. | Timm | 2014-06-15 | 1 | -0/+1 | |
| | | | | ||||||
| | * | | Updated the documentation to reflect the scrubber option. | Timm | 2014-06-15 | 1 | -1/+22 | |
| | | | | ||||||
| | * | | Marked the private API as not needing code documentation. | Timm | 2014-06-15 | 2 | -0/+2 | |
| | | | | ||||||
| | * | | Added ability to pass a custom scrubber to sanitize. Includes test coverage. | Timm | 2014-06-15 | 1 | -1/+3 | |
| | | | | ||||||
| | * | | Moved requiring of Loofah from sanitizers.rb to action_view.rb. | Timm | 2014-06-15 | 1 | -1/+0 | |
| | | | | ||||||
| | * | | Added ActionView::Sanitizer and moved remove_xpaths to there. | Timm | 2014-06-15 | 1 | -7/+0 | |
| | | | | ||||||
| | * | | Added comment removal. Changed definitation of remove_xpaths to not use a ↵ | Timm | 2014-06-15 | 1 | -11/+24 | |
| | | | | | | | | | | | | | splat operator. | |||||
| | * | | Extracted the xpath removals into some new API that allows users to remove ↵ | Timm | 2014-06-15 | 1 | -2/+8 | |
| | | | | | | | | | | | | | xpath subtrees. | |||||
| | * | | Added removal of script tags to WhiteListSanitizer. | Timm | 2014-06-15 | 1 | -0/+1 | |
| | | | | ||||||
| | * | | Added guard clauses to FullSanitizer. | Timm | 2014-06-15 | 1 | -1/+6 | |
| | | | | ||||||
| | * | | bad_tags include form since we remove it. Also to prevent a ↵ | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | | | | | | | | | | | | should_allow_form_tag test creation. | |||||
| | * | | Removed the contains_bad_protocols? method as well as the tests for it. ↵ | Timm | 2014-06-15 | 1 | -8/+2 | |
| | | | | | | | | | | | | | Loofah already deals with this. | |||||
| | * | | Reordered form removal with stripping. | Timm | 2014-06-15 | 1 | -4/+7 | |
| | | | | ||||||
| | * | | Added PermitScrubber which allows you to permit elements for sanitization. | Timm | 2014-06-15 | 2 | -13/+85 | |
| | | | | ||||||
| | * | | Removed duplication in the deprecated methods. | Timm | 2014-06-15 | 1 | -5/+5 | |
| | | | | ||||||
| | * | | Added Loofah as a dependency in actionview.gemspec. | Timm | 2014-06-11 | 2 | -23/+140 | |
| | | | | | | | | | | | | | | | | | | | Implemented ActionView: FullSanitizer, LinkSanitizer and WhiteListSanitizer in sanitizers.rb. Deprecated protocol_separator and bad_tags. Added new tests in sanitizers_test.rb and reimplemented assert_dom_equal with Loofah. | |||||
| * | | | Include missing module in tag_helper | Carlos Antonio da Silva | 2014-07-09 | 1 | -0/+1 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since 6857415187810f1289068a448268264d0cf0844f we are using #safe_join to join the content when an Array is given, so we must include the dependent module here to make sure it's available when this module is used alone. This was making Simple Form tests to fail with current master due to the missing dependency. | |||||
| * | | | [ci skip] /javascript/ -> JavaScript - cover whole app | Akshay Vishnoi | 2014-07-04 | 1 | -2/+2 | |
| | | | | ||||||
| * | | | Use if/else | Rafael Mendonça França | 2014-06-30 | 1 | -2/+5 | |
| | | | | | | | | | | | | | | | | Since we are using both branches of the code is preferable to use if/else over the early return. | |||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Eilertsens Kodeknekkeri |
| aboutsummaryrefslogtreecommitdiffstats |