| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Changed explanation for no duck typing of custom scrubbers. | Timm | 2014-06-16 | 1 | -1/+2 | |
| | | ||||||
| * | Added correct requires in html-scanner tests. Sanitizers are not based on ↵ | Timm | 2014-06-16 | 7 | -330/+6 | |
| | | | | | html-scanner anymore, so sanitizer_test.rb is removed. | |||||
| * | Marked test_feed_xhtml as pending. See description in the test. | Timm | 2014-06-16 | 1 | -0/+1 | |
| | | ||||||
| * | Removed copyright notice since we aren't relying on html-scanner anymore. | Timm | 2014-06-16 | 1 | -5/+0 | |
| | | ||||||
| * | Removed require for active_support/core_ext/object/inclusion since in? isn't ↵ | Timm | 2014-06-16 | 1 | -2/+0 | |
| | | | | | used anywhere. | |||||
| * | Moved Dom and Selector assertions from ActionDispatch to ActionView. | Timm | 2014-06-16 | 6 | -1/+900 | |
| | | ||||||
| * | Added test case for non-comment. Removed pending assertion that passed. | Timm | 2014-06-16 | 1 | -3/+3 | |
| | | ||||||
| * | Fixed Nokogiri::CSS::SyntaxErrors. | Timm | 2014-06-15 | 1 | -32/+32 | |
| | | | | | Fixed a Nokogiri::CSS::SyntaxError by using its expected format for unicode characters. | |||||
| * | Replaced html-scanner with Loofah. | Timm | 2014-06-15 | 2 | -2/+2 | |
| | | ||||||
| * | Fixed Nokogiri::CSS::SyntaxErrors in test file. | Timm | 2014-06-15 | 1 | -3/+3 | |
| | | ||||||
| * | Updated documentation to tell that a custom scrubber takes precedence. | Timm | 2014-06-15 | 1 | -0/+1 | |
| | | ||||||
| * | Updated the documentation to reflect the scrubber option. | Timm | 2014-06-15 | 1 | -1/+22 | |
| | | ||||||
| * | Marked the private API as not needing code documentation. | Timm | 2014-06-15 | 2 | -0/+2 | |
| | | ||||||
| * | Added ability to pass a custom scrubber to sanitize. Includes test coverage. | Timm | 2014-06-15 | 2 | -1/+39 | |
| | | ||||||
| * | Moved requiring of Loofah from sanitizers.rb to action_view.rb. | Timm | 2014-06-15 | 2 | -1/+1 | |
| | | ||||||
| * | Marked tests in sanitize_helper_test.rb as pending. | Timm | 2014-06-15 | 1 | -8/+29 | |
| | | ||||||
| * | Marked a test in form_helper_test.rb as pending because of unknown encoding ↵ | Timm | 2014-06-15 | 1 | -0/+2 | |
| | | | | | ASCII-8BIT output error. | |||||
| * | Marked some tests as pending in date_helper_test.rb. | Timm | 2014-06-15 | 1 | -0/+4 | |
| | | ||||||
| * | Added some tests for ActionView::Sanitizer. | Timm | 2014-06-15 | 1 | -0/+32 | |
| | | ||||||
| * | Added ActionView::Sanitizer and moved remove_xpaths to there. | Timm | 2014-06-15 | 1 | -7/+0 | |
| | | ||||||
| * | Changed the description of some pending tests. Changed the expected output ↵ | Timm | 2014-06-15 | 1 | -3/+4 | |
| | | | | | of a script test. | |||||
| * | Extracted one highlight test method and marked it as pending. | Timm | 2014-06-15 | 1 | -0/+3 | |
| | | ||||||
| * | Added comment removal. Changed definitation of remove_xpaths to not use a ↵ | Timm | 2014-06-15 | 1 | -11/+24 | |
| | | | | | splat operator. | |||||
| * | Extracted the xpath removals into some new API that allows users to remove ↵ | Timm | 2014-06-15 | 1 | -2/+8 | |
| | | | | | xpath subtrees. | |||||
| * | Added removal of script tags to WhiteListSanitizer. | Timm | 2014-06-15 | 1 | -0/+1 | |
| | | ||||||
| * | Renamed the SanitizerTest class to SanitersTest, to remove the conflict with ↵ | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | | | | the old SanitizerTest for html-scanner. | |||||
| * | Added video poster sanitization testing (from @vipulnsward). | Timm | 2014-06-15 | 1 | -0/+5 | |
| | | ||||||
| * | Extracted failing tests in santiizers_test.rb into their own methods and ↵ | Timm | 2014-06-15 | 1 | -7/+71 | |
| | | | | | marked them as pending. | |||||
| * | Added guard clauses to FullSanitizer. | Timm | 2014-06-15 | 1 | -1/+6 | |
| | | ||||||
| * | bad_tags include form since we remove it. Also to prevent a ↵ | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | | | | should_allow_form_tag test creation. | |||||
| * | Changed expected value from '<b>' to empty string. | Timm | 2014-06-15 | 1 | -1/+1 | |
| | | ||||||
| * | Removed the contains_bad_protocols? method as well as the tests for it. ↵ | Timm | 2014-06-15 | 2 | -41/+2 | |
| | | | | | Loofah already deals with this. | |||||
| * | Reordered form removal with stripping. | Timm | 2014-06-15 | 2 | -5/+8 | |
| | | ||||||
| * | Added PermitScrubber which allows you to permit elements for sanitization. | Timm | 2014-06-15 | 2 | -13/+85 | |
| | | ||||||
| * | Removed duplication in the deprecated methods. | Timm | 2014-06-15 | 1 | -5/+5 | |
| | | ||||||
| * | Added Loofah as a dependency in actionview.gemspec. | Timm | 2014-06-11 | 4 | -23/+471 | |
| | | | | | | | Implemented ActionView: FullSanitizer, LinkSanitizer and WhiteListSanitizer in sanitizers.rb. Deprecated protocol_separator and bad_tags. Added new tests in sanitizers_test.rb and reimplemented assert_dom_equal with Loofah. | |||||
| * | [ci skip] Fix doc for javascript_helper | Aditya Kapoor | 2014-06-11 | 1 | -1/+7 | |
| | | ||||||
| * | [ci skip] Add Docs for strip_insignificant_zeros option in number helpers | Akshay Vishnoi | 2014-06-10 | 1 | -10/+8 | |
| | | ||||||
| * | [ci skip] Correct output and use valid options of number helpers | Akshay Vishnoi | 2014-06-10 | 1 | -2/+2 | |
| | | ||||||
| * | Fix cache_digest rake tasks | Jiri Pospisil | 2014-06-10 | 2 | -6/+14 | |
| | | | | | | Bring cache_digests:* rake tasks up-to-date with the API changes introduced in 637bb726cac60aaa1f7e482836458aa73e17fbb7 | |||||
| * | Merge pull request #15542 from Gaurav2728/gaurav-remove_shutdown_link | Arthur Nogueira Neves | 2014-06-06 | 1 | -2/+0 | |
| |\ | | | | | remove rubyforge.org that was shut down [ci skip] | |||||
| | * | remove rubyforge.org that was shut down [ci skip] | Gaurav Sharma | 2014-06-06 | 1 | -2/+0 | |
| | | | ||||||
| * | | Unwrap another html_escape | Matthew Draper | 2014-06-07 | 1 | -2/+2 | |
| | | | | | | | | | /cc @tenderlove | |||||
| * | | eliminate more wasteful allocations | Aaron Patterson | 2014-06-06 | 1 | -2/+2 | |
| |/ | ||||||
| * | Merge pull request #15513 from zenspider/remove_flush_output_buffer | Aaron Patterson | 2014-06-05 | 3 | -91/+0 | |
| |\ | | | | | Removed CaptureHelper#flush_output_buffer as it is only used in tests. | |||||
| | * | Removed CaptureHelper#flush_output_buffer as it is only used in tests. | Ryan Davis | 2014-06-04 | 3 | -91/+0 | |
| | | | | | | | | | reviewed: @tenderlove | |||||
| * | | document include_blank's usage with a string [ci skip] | Greg Molnar | 2014-06-05 | 1 | -1/+4 | |
| | | | ||||||
| * | | Revert "Correct Documentation for asset_tag_helpers" | Rafael Mendonça França | 2014-06-04 | 1 | -17/+16 | |
| |/ | | | | | | | | | | This reverts commit c22a253d1a72602331db1eba3e91bc945eff2346. Reason: Our documentation assumes the assets are in the proper place and we are using the default Rails stack. With the default Rails stack and the assets being in the correct place the assets helpers uses the `/assets` prefix. | |||||
| * | call `capture` fewer times from `form_for` | Aaron Patterson | 2014-06-02 | 2 | -4/+4 | |
| | | ||||||
| * | drastically reduce object allocations | Aaron Patterson | 2014-06-02 | 1 | -2/+2 | |
| | | | | | | | | | | | before this change, we were allocating AS::SafeBuffer objects that were being interpolated in to a string, so the safe buffer object was being thrown away. This change only allocates a string (vs a string *and* a safebuffer) and interpolates the string. On my test application, this reduced the AS::SafeBuffer objects from 1527k per request to about 500 per request. | |||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Harald Eilertsen |
| aboutsummaryrefslogtreecommitdiffstats |
path: root/actionview