rails.git - Mirror of official rails repo with custom fixes.

	Commit message (Collapse)	Author	Age	Files	Lines
...
\| * \| \| \|	Already killed off LinkScrubber. Changed it instead to be TargetScrubber, ↵	Timm	2014-06-16	2	-9/+20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	which is more general, while still allowing maximum code reuse.
\| * \| \| \|	Added LinkScrubber to remove duplication in LinkSanitizer. As such made ↵	Timm	2014-06-16	2	-11/+22
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	PermitScrubber easier to subclass.
\| * \| \| \|	Changed FullSanitizer sanitize to use tap method instead of temporary variable.	Timm	2014-06-16	1	-3/+3
\| \| \| \| \|
\| * \| \| \|	Extracted the common xpaths to remove into XPATHS_TO_REMOVE.	Timm	2014-06-16	1	-2/+4
\| \| \| \| \|
\| * \| \| \|	Refactored remove_xpaths to use duck typing and read better.	Timm	2014-06-16	1	-4/+5
\| \| \| \| \|
\| * \| \| \|	Changed explanation for no duck typing of custom scrubbers.	Timm	2014-06-16	1	-1/+2
\| \| \| \| \|
\| * \| \| \|	Added correct requires in html-scanner tests. Sanitizers are not based on ↵	Timm	2014-06-16	7	-330/+6
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	html-scanner anymore, so sanitizer_test.rb is removed.
\| * \| \| \|	Marked test_feed_xhtml as pending. See description in the test.	Timm	2014-06-16	1	-0/+1
\| \| \| \| \|
\| * \| \| \|	Removed copyright notice since we aren't relying on html-scanner anymore.	Timm	2014-06-16	1	-5/+0
\| \| \| \| \|
\| * \| \| \|	Removed require for active_support/core_ext/object/inclusion since in? isn't ↵	Timm	2014-06-16	1	-2/+0
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	used anywhere.
\| * \| \| \|	Moved Dom and Selector assertions from ActionDispatch to ActionView.	Timm	2014-06-16	6	-1/+900
\| \| \| \| \|
\| * \| \| \|	Added test case for non-comment. Removed pending assertion that passed.	Timm	2014-06-16	1	-3/+3
\| \| \| \| \|
\| * \| \| \|	Fixed Nokogiri::CSS::SyntaxErrors.	Timm	2014-06-15	1	-32/+32
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Fixed a Nokogiri::CSS::SyntaxError by using its expected format for unicode characters.
\| * \| \| \|	Replaced html-scanner with Loofah.	Timm	2014-06-15	2	-2/+2
\| \| \| \| \|
\| * \| \| \|	Fixed Nokogiri::CSS::SyntaxErrors in test file.	Timm	2014-06-15	1	-3/+3
\| \| \| \| \|
\| * \| \| \|	Updated documentation to tell that a custom scrubber takes precedence.	Timm	2014-06-15	1	-0/+1
\| \| \| \| \|
\| * \| \| \|	Updated the documentation to reflect the scrubber option.	Timm	2014-06-15	1	-1/+22
\| \| \| \| \|
\| * \| \| \|	Marked the private API as not needing code documentation.	Timm	2014-06-15	2	-0/+2
\| \| \| \| \|
\| * \| \| \|	Added ability to pass a custom scrubber to sanitize. Includes test coverage.	Timm	2014-06-15	2	-1/+39
\| \| \| \| \|
\| * \| \| \|	Moved requiring of Loofah from sanitizers.rb to action_view.rb.	Timm	2014-06-15	2	-1/+1
\| \| \| \| \|
\| * \| \| \|	Marked tests in sanitize_helper_test.rb as pending.	Timm	2014-06-15	1	-8/+29
\| \| \| \| \|
\| * \| \| \|	Marked a test in form_helper_test.rb as pending because of unknown encoding ↵	Timm	2014-06-15	1	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	ASCII-8BIT output error.
\| * \| \| \|	Marked some tests as pending in date_helper_test.rb.	Timm	2014-06-15	1	-0/+4
\| \| \| \| \|
\| * \| \| \|	Added some tests for ActionView::Sanitizer.	Timm	2014-06-15	1	-0/+32
\| \| \| \| \|
\| * \| \| \|	Added ActionView::Sanitizer and moved remove_xpaths to there.	Timm	2014-06-15	1	-7/+0
\| \| \| \| \|
\| * \| \| \|	Changed the description of some pending tests. Changed the expected output ↵	Timm	2014-06-15	1	-3/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	of a script test.
\| * \| \| \|	Extracted one highlight test method and marked it as pending.	Timm	2014-06-15	1	-0/+3
\| \| \| \| \|
\| * \| \| \|	Added comment removal. Changed definitation of remove_xpaths to not use a ↵	Timm	2014-06-15	1	-11/+24
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	splat operator.
\| * \| \| \|	Extracted the xpath removals into some new API that allows users to remove ↵	Timm	2014-06-15	1	-2/+8
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	xpath subtrees.
\| * \| \| \|	Added removal of script tags to WhiteListSanitizer.	Timm	2014-06-15	1	-0/+1
\| \| \| \| \|
\| * \| \| \|	Renamed the SanitizerTest class to SanitersTest, to remove the conflict with ↵	Timm	2014-06-15	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	the old SanitizerTest for html-scanner.
\| * \| \| \|	Added video poster sanitization testing (from @vipulnsward).	Timm	2014-06-15	1	-0/+5
\| \| \| \| \|
\| * \| \| \|	Extracted failing tests in santiizers_test.rb into their own methods and ↵	Timm	2014-06-15	1	-7/+71
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	marked them as pending.
\| * \| \| \|	Added guard clauses to FullSanitizer.	Timm	2014-06-15	1	-1/+6
\| \| \| \| \|
\| * \| \| \|	bad_tags include form since we remove it. Also to prevent a ↵	Timm	2014-06-15	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	should_allow_form_tag test creation.
\| * \| \| \|	Changed expected value from '<b>' to empty string.	Timm	2014-06-15	1	-1/+1
\| \| \| \| \|
\| * \| \| \|	Removed the contains_bad_protocols? method as well as the tests for it. ↵	Timm	2014-06-15	2	-41/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Loofah already deals with this.
\| * \| \| \|	Reordered form removal with stripping.	Timm	2014-06-15	2	-5/+8
\| \| \| \| \|
\| * \| \| \|	Added PermitScrubber which allows you to permit elements for sanitization.	Timm	2014-06-15	2	-13/+85
\| \| \| \| \|
\| * \| \| \|	Removed duplication in the deprecated methods.	Timm	2014-06-15	1	-5/+5
\| \| \| \| \|
\| * \| \| \|	Added Loofah as a dependency in actionview.gemspec.	Timm	2014-06-11	4	-23/+471
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Implemented ActionView: FullSanitizer, LinkSanitizer and WhiteListSanitizer in sanitizers.rb. Deprecated protocol_separator and bad_tags. Added new tests in sanitizers_test.rb and reimplemented assert_dom_equal with Loofah.
* \| \| \| \|	Include missing module in tag_helper	Carlos Antonio da Silva	2014-07-09	1	-0/+1
\| \|_\|_\|/ \|/\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Since 6857415187810f1289068a448268264d0cf0844f we are using #safe_join to join the content when an Array is given, so we must include the dependent module here to make sure it's available when this module is used alone. This was making Simple Form tests to fail with current master due to the missing dependency.
* \| \| \|	Change back occurrences of SQLite(3) to sqlite3 when referring to the	Zachary Scott	2014-07-06	1	-1/+1
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	adapter, fixed from #16057 [ci skip]
* \| \| \|	[ci skip] /sqlite/i --> SQLite	Akshay Vishnoi	2014-07-06	2	-3/+3
\| \| \| \|
* \| \| \|	[ci skip] /javascript/ -> JavaScript - cover whole app	Akshay Vishnoi	2014-07-04	1	-2/+2
\| \| \| \|
* \| \| \|	Add CHANGELOG for c803b90	Godfrey Chan	2014-07-02	1	-0/+4
\| \| \| \|
* \| \| \|	Fix escape_once double-escaping hex-encoded entities	John F. Douthat	2014-07-02	2	-0/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	(This is a manual merge of #9102)
* \| \| \|	Add CHANGELOG entry for #15214	Rafael Mendonça França	2014-06-30	1	-0/+4
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Closes #15214
* \| \| \|	Use if/else	Rafael Mendonça França	2014-06-30	1	-2/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Since we are using both branches of the code is preferable to use if/else over the early return.
* \| \| \|	Add String support for min/max attributes on DatetimeField	Todd Bealmear	2014-06-30	3	-2/+119
\| \| \| \|