aboutsummaryrefslogtreecommitdiffstats
path: root/actionview/lib/action_view/helpers
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | be more specific about csrf token and ajax - not whitelisted outside of ↵Tim Ruffles2013-08-061-2/+5
| | | | | | | | | | | | | | | | jquery-rails [ci skip]
* | | | Adding an documentation example and a test to button_to with pathAttila Domokos2014-02-021-0/+5
| | | | | | | | | | | | I did not see in the docs that `button_to` supports not only URLs but paths as well. I documented this functionality with a unit tests and added an example to the docs as well.
* | | | Rails config for raise on missing translationsKassio Borges2014-01-271-4/+4
| | | | | | | | | | | | | | | | | | | | Add a config to setup whether raise exception for missing translation or not.
* | | | Fix typo in image_tag documentationAdrien2014-01-071-1/+1
| | | | | | | | | | | | image_tag only supports :alt and :size as additional keys, not three.
* | | | Switched to use `display:none` in extra_tags_for_form method.Gaelian Ditchburn2014-01-052-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The use of `display:inline` with the content_tag call in the extra_tags_for_form method potentially causes display issues with some browsers, namely Internet Explorer. IE's behaviour of not collapsing the line height on divs with ostensibly no content means that the automatically added div containing the hidden authenticity_token, utf8 and _method form input tags may interfere with other visible form elements in certain circumstances. The use of `display:none` rather than `display:inline` fixes this problem. Fixes #6403
* | | | provide correct example of `datetime_select` helper [ci skip]Kuldeep Aggarwal2014-01-041-1/+1
| | | |
* | | | Fixed documentation. [ci skip]Konstantin Wlasow2014-01-041-0/+3
| | | |
* | | | Change all "can not"s to the correct "cannot".T.J. Schuck2014-01-031-2/+2
| | | |
* | | | No need to use fixed size font [ci skip]Rafael Mendonça França2014-01-031-2/+2
| | | |
* | | | Fix documentation for end_year option of date_helper [ci skip]Prathamesh Sonpatki2014-01-031-2/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - While editing an existing record, end_year is equal to current selected year plus 5 by default. - While editing an existing record, start_year is equal to current selected year value minus 5 by default. - Fixes #13552 Acked-by: Prathamesh Sonpatki <csonpatki@gmail.com> Acked-by: Prathamesh Sonpatki <csonpatki@gmail.com>
* | | | provide correct information [ci skip]Kuldeep Aggarwal2014-01-021-2/+2
| | | |
* | | | duplication removed(DRY)abhishek2013-12-181-16/+10
| | | |
* | | | allow video_tag to accept `size` as `Number` for square shaped videosKuldeep Aggarwal2013-12-181-4/+10
| |/ / |/| |
* | | Fix typo in docs, missing colon in Symbol literal [ci skip]Semyon Perepelitsa2013-12-111-1/+1
| | |
* | | Merge pull request #13059 from imkmf/cycle-accepts-arrayRafael Mendonça França2013-12-061-1/+1
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Cycle object should accept an array Conflicts: actionview/CHANGELOG.md
| * | | A Cycle object should accept an array and cycle through it as it wouldKristian Freeman2013-12-061-1/+1
| | | | | | | | | | | | | | | | with a set of comma-separated objects.
* | | | Label only accepts `:index` and `:namespace` attributes from the inputAndriel Nuernberg2013-12-052-2/+1
| | | |
* | | | Escalate missing error when :raise is trueShota Fukumori (sora_h)2013-12-051-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Before ec16ba75a5493b9da972eea08bae630eba35b62f, ActionView::Helpers::TranslationHelper#translate has raised errors with specifying options[:raise] to true. This should work by this fix: begin t(:"translations.missing", raise: true) rescue I18n::MissingTranslationData p :hello! end
* | | | Fix issue where TextHelper#simple_format was calling missing 'raw' methodMario Visic2013-12-051-0/+2
| | | |
* | | | Fix documentation of number_to_currency helperRafael Mendonça França2013-12-041-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now users have to explicit mark the unit as safe if they trust it. Closes #13161 Conflicts: actionpack/lib/action_view/helpers/number_helper.rb actionpack/test/template/number_helper_i18n_test.rb
* | | | Remove the escaping skipRafael Mendonça França2013-12-031-1/+1
| | | | | | | | | | | | | | | | | | | | We are generating safe strings in the paragraph, so we can escape the tags
* | | | Stop using i18n's built in HTML error handling.Michael Koziarski2013-12-021-13/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | i18n doesn't depend on active support which means it can't use our html_safe code to do its escaping when generating the spans. Rather than try to sanitize the output from i18n, just revert to our old behaviour of rescuing the error and constructing the tag ourselves. Fixes: CVE-2013-4491
* | | | Ensure simple_format escapes its html attributesMichael Koziarski2013-12-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The previous behavior equated the sanitize option for simple_format with the escape option of content_tag, however these are two distinct concepts. This fixes CVE-2013-6416 Conflicts: actionview/lib/action_view/helpers/text_helper.rb
* | | | Escape the unit value provided to number_to_currencyMichael Koziarski2013-12-021-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | Previously the unit values were trusted leading to potential XSS vulnerabilities. Fixes: CVE-2013-6415
* | | | Merge pull request #13138 from gsamokovarov/remove-cattr-requiresGuillermo Iguaran2013-12-022-2/+2
|\ \ \ \ | | | | | | | | | | Remove deprecated cattr_* requires
| * | | | Remove deprecated cattr_* requiresGenadi Samokovarov2013-12-032-2/+2
| | | | |
* | | | | Make ActionView::Tags loading tread safeRafael Mendonça França2013-12-022-32/+33
|/ / / /
* | | | Typo and grammatical fixes [ci skip]Akshay Vishnoi2013-12-022-2/+2
| | | |
* | | | unnecessary checking of `size` with `second regex` if matched with first oneKuldeep Aggarwal2013-11-271-2/+5
|/ / /
* | | Minor typo fixesAkira Matsuda2013-11-271-1/+1
| | |
* | | Revert "Merge pull request #13027 from akshay-vishnoi/f-refactor"Carlos Antonio da Silva2013-11-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This reverts commit f4a5a9ea4d183f4102796215d4502c46dbe3e52b, reversing changes made to 7ccb482181ee6c47c765406009018a15172812de. Reason: The logic is different, the first call to #option_value_selected? is for the :selected option (the argument is the "selected" variable), the second call is for the :disabled option (the argument is the "disabled" variable).
* | | avoiding calling of #option_value_selected? two timesAkshay Vishnoi2013-11-251-1/+1
| | |
* | | Allocate one less object using html_safe during content_tag constructionJosh Jordan2013-11-141-1/+1
| | |
* | | Revert "Used Yield instead of block.call" -- this causes all of ↵David Heinemeier Hansson2013-11-141-2/+2
| | | | | | | | | | | | | | | | | | atom_feed_helper_test.rb to fail with "SystemStackError: stack level too deep". This reverts commit d3a1ce1cdc60d593de1682c5f4e3230c8db9a0fd.
* | | Merge pull request #12889 from kuldeepaggarwal/speed_upsRafael Mendonça França2013-11-141-2/+2
|\ \ \ | | | | | | | | Used Yield instead of block.call
| * | | Used Yield instead of block.callKuldeep Aggarwal2013-11-151-2/+2
| | | |
* | | | Fix syntax error in atom_feed example [ci skip]Saulius Grigaliunas2013-11-131-1/+1
|/ / / | | | | | | | | | Builder's #tag! takes either String or Symbol as the first parameter
* | | Make the method name the first argumentRafael Mendonça França2013-11-091-7/+7
| | | | | | | | | | | | | | | This is the only argument that changes over the method calls so it is better to it be the first one
* | | Merge pull request #12760 from pseidemann/masterYves Senn2013-11-091-1/+1
|\ \ \ | | | | | | | | fix simple_format escapes own output when sanitize is set to true
| * | | fix simple_format escapes own output when sanitize is set to truepseidemann2013-11-081-1/+1
| | | |
* | | | Extract common code from number helpers to new delegator method.Vipul A M2013-11-091-30/+13
| | | |
* | | | Merge pull request #12788 from kylefritz/patch-1Rafael Mendonça França2013-11-061-2/+2
|/ / / | | | | | | | | | | | | | | | rdoc: favicon source shouldn't begin with a slash to reference asset pipeline resource [ci skip] Conflicts: actionview/lib/action_view/helpers/asset_tag_helper.rb
* | | Line up the comments for aestheticsDavid Heinemeier Hansson2013-11-031-5/+5
| | |
* | | Convert CDATA input to string before gsub'ingCarsten Zimmermann2013-10-291-1/+1
| | | | | | | | | | | | | | | Rails 3.2 API allowed arbitrary input for cdata_section; this change re-introduces the old behaviour.
* | | Remove warning of shadowing outer local variableRafael Mendonça França2013-10-271-2/+2
| |/ |/|
* | Merge pull request #10471 from andyw8/button_to_paramsRafael Mendonça França2013-10-241-0/+7
|\ \ | | | | | | | | | | | | | | | | | | Add params option for button_to Conflicts: actionpack/CHANGELOG.md
| * | Add params option for button_toAndy Waite2013-09-181-0/+7
| | | | | | | | | | | | | | | | | | The parameters are rendered as hidden form fields within the generated form. This is useful for when a record has multiple buttons associated with it, each of which target the same controller method, but which need to submit different attributes.
* | | Fix typo in form_helper.rbAdam Jahnke2013-10-161-1/+1
| | |
* | | Merge pull request #12491 from shamanime/patch-1Rafael Mendonça França2013-10-131-2/+2
|\ \ \ | | | | | | | | Fix wrong variable name used in the select_day method documentation
| * | | Fix wrong variable name used in the select_day method documentationJefferson Queiroz Venerando2013-10-101-2/+2
| | | | | | | | | | | | The variable name created in the example is `my_date`, the methods were using `my_time` instead.
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-06 17:24:22 +0000