| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| | * | | | | Updated the documentation to reflect the scrubber option. | Timm | 2014-06-15 | 1 | -1/+22 | |
| | | | | | | ||||||
| | * | | | | Marked the private API as not needing code documentation. | Timm | 2014-06-15 | 2 | -0/+2 | |
| | | | | | | ||||||
| | * | | | | Added ability to pass a custom scrubber to sanitize. Includes test coverage. | Timm | 2014-06-15 | 2 | -1/+39 | |
| | | | | | | ||||||
| | * | | | | Moved requiring of Loofah from sanitizers.rb to action_view.rb. | Timm | 2014-06-15 | 2 | -1/+1 | |
| | | | | | | ||||||
| | * | | | | Marked tests in sanitize_helper_test.rb as pending. | Timm | 2014-06-15 | 1 | -8/+29 | |
| | | | | | | ||||||
| | * | | | | Marked a test in form_helper_test.rb as pending because of unknown encoding ↵ | Timm | 2014-06-15 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | | | | | | | | ASCII-8BIT output error. | |||||
| | * | | | | Marked some tests as pending in date_helper_test.rb. | Timm | 2014-06-15 | 1 | -0/+4 | |
| | | | | | | ||||||
| | * | | | | Added some tests for ActionView::Sanitizer. | Timm | 2014-06-15 | 1 | -0/+32 | |
| | | | | | | ||||||
| | * | | | | Added ActionView::Sanitizer and moved remove_xpaths to there. | Timm | 2014-06-15 | 1 | -7/+0 | |
| | | | | | | ||||||
| | * | | | | Changed the description of some pending tests. Changed the expected output ↵ | Timm | 2014-06-15 | 1 | -3/+4 | |
| | | | | | | | | | | | | | | | | | | | | | of a script test. | |||||
| | * | | | | Extracted one highlight test method and marked it as pending. | Timm | 2014-06-15 | 1 | -0/+3 | |
| | | | | | | ||||||
| | * | | | | Added comment removal. Changed definitation of remove_xpaths to not use a ↵ | Timm | 2014-06-15 | 1 | -11/+24 | |
| | | | | | | | | | | | | | | | | | | | | | splat operator. | |||||
| | * | | | | Extracted the xpath removals into some new API that allows users to remove ↵ | Timm | 2014-06-15 | 1 | -2/+8 | |
| | | | | | | | | | | | | | | | | | | | | | xpath subtrees. | |||||
| | * | | | | Added removal of script tags to WhiteListSanitizer. | Timm | 2014-06-15 | 1 | -0/+1 | |
| | | | | | | ||||||
| | * | | | | Renamed the SanitizerTest class to SanitersTest, to remove the conflict with ↵ | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | the old SanitizerTest for html-scanner. | |||||
| | * | | | | Added video poster sanitization testing (from @vipulnsward). | Timm | 2014-06-15 | 1 | -0/+5 | |
| | | | | | | ||||||
| | * | | | | Extracted failing tests in santiizers_test.rb into their own methods and ↵ | Timm | 2014-06-15 | 1 | -7/+71 | |
| | | | | | | | | | | | | | | | | | | | | | marked them as pending. | |||||
| | * | | | | Added guard clauses to FullSanitizer. | Timm | 2014-06-15 | 1 | -1/+6 | |
| | | | | | | ||||||
| | * | | | | bad_tags include form since we remove it. Also to prevent a ↵ | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | | | | | should_allow_form_tag test creation. | |||||
| | * | | | | Changed expected value from '<b>' to empty string. | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | | | | | ||||||
| | * | | | | Removed the contains_bad_protocols? method as well as the tests for it. ↵ | Timm | 2014-06-15 | 2 | -41/+2 | |
| | | | | | | | | | | | | | | | | | | | | | Loofah already deals with this. | |||||
| | * | | | | Reordered form removal with stripping. | Timm | 2014-06-15 | 2 | -5/+8 | |
| | | | | | | ||||||
| | * | | | | Added PermitScrubber which allows you to permit elements for sanitization. | Timm | 2014-06-15 | 2 | -13/+85 | |
| | | | | | | ||||||
| | * | | | | Removed duplication in the deprecated methods. | Timm | 2014-06-15 | 1 | -5/+5 | |
| | | | | | | ||||||
| | * | | | | Added Loofah as a dependency in actionview.gemspec. | Timm | 2014-06-11 | 4 | -23/+471 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implemented ActionView: FullSanitizer, LinkSanitizer and WhiteListSanitizer in sanitizers.rb. Deprecated protocol_separator and bad_tags. Added new tests in sanitizers_test.rb and reimplemented assert_dom_equal with Loofah. | |||||
| * | | | | | Include missing module in tag_helper | Carlos Antonio da Silva | 2014-07-09 | 1 | -0/+1 | |
| | |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since 6857415187810f1289068a448268264d0cf0844f we are using #safe_join to join the content when an Array is given, so we must include the dependent module here to make sure it's available when this module is used alone. This was making Simple Form tests to fail with current master due to the missing dependency. | |||||
| * | | | | Change back occurrences of SQLite(3) to sqlite3 when referring to the | Zachary Scott | 2014-07-06 | 1 | -1/+1 | |
| | | | | | | | | | | | | | | | | | adapter, fixed from #16057 [ci skip] | |||||
| * | | | | [ci skip] /sqlite/i --> SQLite | Akshay Vishnoi | 2014-07-06 | 2 | -3/+3 | |
| | | | | | ||||||
| * | | | | [ci skip] /javascript/ -> JavaScript - cover whole app | Akshay Vishnoi | 2014-07-04 | 1 | -2/+2 | |
| | | | | | ||||||
| * | | | | Add CHANGELOG for c803b90 | Godfrey Chan | 2014-07-02 | 1 | -0/+4 | |
| | | | | | ||||||
| * | | | | Fix escape_once double-escaping hex-encoded entities | John F. Douthat | 2014-07-02 | 2 | -0/+2 | |
| | | | | | | | | | | | | | | | | | (This is a manual merge of #9102) | |||||
| * | | | | Add CHANGELOG entry for #15214 | Rafael Mendonça França | 2014-06-30 | 1 | -0/+4 | |
| | | | | | | | | | | | | | | | | | Closes #15214 | |||||
| * | | | | Use if/else | Rafael Mendonça França | 2014-06-30 | 1 | -2/+5 | |
| | | | | | | | | | | | | | | | | | | | | | Since we are using both branches of the code is preferable to use if/else over the early return. | |||||
| * | | | | Add String support for min/max attributes on DatetimeField | Todd Bealmear | 2014-06-30 | 3 | -2/+119 | |
| | | | | | ||||||
| * | | | | Tiny documentation fixes [ci skip] | Robin Dupret | 2014-06-29 | 1 | -1/+1 | |
| | | | | | ||||||
| * | | | | Rename options param of #time_ago_in_words to match API change | Max Kramer | 2014-06-28 | 1 | -2/+2 | |
| | |_|/ |/| | | | | | Rename `include_seconds_or_options` to `options` to match 6b9356a (which removed the deprecation introduced by #6077). This has no functional impact because the parameter is passed directly through, but makes it clearer that the parameter no longer supports a boolean as input. | |||||
| * | | | Deal with regex match groups in excerpt | Gareth Rees | 2014-06-24 | 2 | -6/+6 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Original implementation has bugs if the regex contains a match group. Example: excerpt('This is a beautiful? morning', /\b(beau\w*)\b/i, :radius => 5) Expected: "...is a beautiful? mor..." Actual: "...is a beautifulbeaut..." The original phrase was being converted to a regex and returning the text either side of the phrase as expected: 'This is a beautiful? morning'.split(/beautiful/i, 2) # => ["This is a ", "? morning"] When we have a match with groups the match is returned in the array. Quoting the ruby docs: "If pattern is a Regexp, str is divided where the pattern matches. [...] If pattern contains groups, the respective matches will be returned in the array as well." 'This is a beautiful? morning'.split(/\b(beau\w*)\b/iu, 2) # => ["This is a ", "beautiful", "? morning"] If we assume we want to split on the first match – this fix makes that assumption – we can pass the already assigned `phrase` variable as the place to split (because we already know that a match exists from line 168). Originally spotted by Louise Crow (@crowbot) at https://github.com/mysociety/alaveteli/pull/1557 | |||||
| * | | | Merge pull request #15732 from kuldeepaggarwal/correct-assets-ouput | Rafael Mendonça França | 2014-06-23 | 2 | -15/+15 | |
| |\ \ \ | | | | | | | | | [ci skip] correct output for asset_helper methods | |||||
| | * | | | [ci skip] correct output for asset_helper methods | Kuldeep Aggarwal | 2014-06-16 | 2 | -15/+15 | |
| | | | | | | | | | | | | | | | | | see cc255d3 | |||||
| * | | | | Merge pull request #15450 from aditya-kapoor/remove-nbsp-debug | Rafael Mendonça França | 2014-06-19 | 2 | -7/+7 | |
| |\ \ \ \ | | | | | | | | | | | remove unnecessary gsub for space in ActionView::Helpers#debug | |||||
| | * | | | | remove unnecessary substitution for space in ActionView::Helpers#debug | Aditya Kapoor | 2014-06-14 | 2 | -7/+7 | |
| | | | | | | ||||||
| * | | | | | 'TextHelper#highlight' now accepts a block to highlight the matched words. | Lucas Mazza | 2014-06-19 | 3 | -3/+30 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The helper will yield each matched word, and you can use this instead of the ':highlighter' option for more complex replacing logic: highlight('My email is me@work.com', EMAIL_REGEXP) { |m| mail_to(m) } # => 'My email is <a href="mailto:me@work.com">me@work.com</a>' | |||||
| * | | | | | highlight() now accepts regular expressions as well. | Jan Szumiec | 2014-06-19 | 2 | -5/+15 | |
| | | | | | | ||||||
| * | | | | | excerpt() now accepts regular expression instances as phrases. | Jan Szumiec | 2014-06-19 | 2 | -3/+9 | |
| | | | | | | ||||||
| * | | | | | Merge pull request #15709 from zuhao/refactor_actionview_compiled_templates_test | Yves Senn | 2014-06-18 | 1 | -8/+1 | |
| |\ \ \ \ \ | | | | | | | | | | | | | Move cleanup into teardown, delete obsolete code. | |||||
| | * | | | | | Move cleanup into teardown, delete obsolete code. | Zuhao Wan | 2014-06-14 | 1 | -8/+1 | |
| | | | | | | | ||||||
| * | | | | | | [ci skip] /javascript/ ~> JavaScript | Aditya Kapoor | 2014-06-17 | 1 | -1/+1 | |
| | | | | | | | ||||||
| * | | | | | | reload I18n as we are defining `:ts` locale | Kuldeep Aggarwal | 2014-06-15 | 1 | -0/+2 | |
| | |_|/ / / |/| | | | | | | | | | | | | | | fix build- see https://travis-ci.org/rails/rails/jobs/27578159#L2913. | |||||
| * | | | | | Merge pull request #15715 from ↵ | Yves Senn | 2014-06-14 | 3 | -4/+11 | |
| |\ \ \ \ \ | |_|/ / / |/| | | | | | | | | | | | | | | | | | | | zuhao/refactor_actionview_cleanup_I18n_translations Clean up I18n stored translations after test. | |||||
| | * | | | | Clean up I18n stored translations after test. | Zuhao Wan | 2014-06-14 | 3 | -4/+12 | |
| | | | | | | ||||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Harald Eilertsen |
| aboutsummaryrefslogtreecommitdiffstats |
path: root/actionview