rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Collapse)	Author	Age	Files	Lines
*	Use the reference for the mime type to get the format	Rafael Mendonça França	2014-02-18	1	-1/+1
\| \| \| \| \| \| \| \|	Before we were calling to_sym in the mime type, even when it is unknown what can cause denial of service since symbols are not removed by the garbage collector. Fixes: CVE-2014-0082
*	Introduce `render :html` for render HTML string	Prem Sichanugrist	2014-02-18	1	-0/+34
	This is an option for to HTML content with a content type of `text/html`. This rendering option calls `ERB::Util.html_escape` internally to escape unsafe HTML string, so you will have to mark your string as html safe if you have any HTML tag in it. Please see #12374 for more detail.