aboutsummaryrefslogtreecommitdiffstats
path: root/activerecord/lib/active_record/sanitization.rb
Commit message (Expand)AuthorAgeFilesLines
* Merge pull request #27947 from mastahyeti/unsafe_raw_sqlMatthew Draper2017-11-141-1/+11
|\
| * push order arg checks down to allow for bindsBen Toews2017-11-091-1/+5
| * deal with Array arguments to #orderBen Toews2017-11-091-0/+6
* | Properly cast input in `update_all`Sean Griffin2017-11-131-1/+2
|/
* Remove deprecated method `#sanitize_conditions`Rafael Mendonça França2017-10-231-2/+0
* Remove deprecated support to `quoted_id` when typecasting an Active Record ob...Rafael Mendonça França2017-10-231-5/+0
* Use frozen-string-literal in ActiveRecordKir Shatrov2017-07-191-0/+2
* Revert "Merge pull request #29540 from kirs/rubocop-frozen-string"Matthew Draper2017-07-021-1/+0
* Enforce frozen string in RubocopKir Shatrov2017-07-011-0/+1
* Deprecate using `#quoted_id` in quotingRyuta Kamizono2017-02-241-2/+1
* `self.` is not needed when calling its own instance methodAkira Matsuda2017-01-051-1/+1
* Privatize unneededly protected methods in Active RecordAkira Matsuda2016-12-241-13/+13
* let Regexp#match? be globally availableXavier Noria2016-10-271-1/+0
* Fix broken comments indentation caused by rubocop auto-correct [ci skip]Ryuta Kamizono2016-09-141-80/+80
* Deprecate `sanitize_conditions`. Use `sanitize_sql` insteadRyuta Kamizono2016-08-181-2/+3
* Merge pull request #26000 from kamipo/remove_sanitizeRafael França2016-08-161-8/+1
|\
| * Remove internal `sanitize` methodRyuta Kamizono2016-07-311-8/+1
* | normalizes indentation and whitespace across the projectXavier Noria2016-08-061-90/+90
* | applies new string literal convention in activerecord/libXavier Noria2016-08-061-7/+7
|/
* adds missing requiresXavier Noria2016-07-241-0/+2
* systematic revision of =~ usage in ARXavier Noria2016-07-231-1/+1
* Fix grammar `a` to `an` [ci skip]Ryuta Kamizono2016-02-131-1/+1
* quoted_id is not public API.Rafael Mendonça França2016-01-011-1/+1
* Add test cases for `#sanitize_sql_array` with named_bind_variablesyui-knk2015-11-091-0/+9
* Define `sanitize_sql_for_order` for AR and use it inside `preprocess_order_args`yui-knk2015-11-021-0/+16
* applies new doc guidelines to Active Record.Yves Senn2015-10-141-3/+4
* [ci skip] Update docs of `AR::Sanitization`yui-knk2015-09-261-19/+56
* Remove not used argument `table_name` of `sanitize_sql_for_conditions`yui-knk2015-09-231-1/+1
* Use block variable instead of globalRoque Pinel2015-06-091-2/+2
* remove documentation for sanitize_sql_for_conditions with a HashMatthew Rudy Jacobs2015-05-121-2/+1
* Remove call to sanitize_sql_hash_for_conditionsMatthew Rudy Jacobs2015-05-121-1/+0
* `type_cast_for_database` -> `serialize`Sean Griffin2015-02-171-1/+1
* Stop passing a column to `quote` when finding by AR modelsSean Griffin2015-01-101-5/+2
* Remove deprecated `sanitize_sql_hash_for_conditions`Rafael Mendonça França2015-01-041-29/+0
* Stop using the column for type information in sanitizationSean Griffin2015-01-011-5/+4
* Remove `klass` and `arel_table` as a dependency of `PredicateBuilder`Sean Griffin2014-12-261-1/+1
* Refactor `PredicateBuilder` from singleton to instanceMelanie Gilman2014-12-021-3/+4
* Stop using `Arel::Table.engine`Sean Griffin2014-11-291-1/+1
* Revert deprecation of `sanitize_sql_hash_for_assignment`Sean Griffin2014-11-021-3/+0
* Deprecate `sanitize_sql_hash_` methods on ActiveRecordSean Griffin2014-11-021-0/+6
* Call gsub with a Regexp instead of a String for better performancePablo Herrero2014-11-011-1/+1
* [ci skip] Use `an` for SQLAkshay Vishnoi2014-06-141-1/+1
* Merge branch 'master' into adequaterecordAaron Patterson2014-04-201-0/+7
|\
| * `sanitize_sql_like` escapes `escape_character` not only backslash.Yves Senn2014-04-161-1/+2
| * SQL Like escaping helper method. [Rob Gilson & Yves Senn]Rob Gilson2014-04-161-0/+6
* | working against arel/collector branchAaron Patterson2014-04-091-1/+1
|/
* move alias method `sanitize_conditions` to a correct placeDmitry Polushkin2014-02-091-2/+1
* Tidy up fix for PG extensions quotingCarlos Antonio da Silva2013-12-231-4/+6
* Serialize postgres' hstore, json and array types correctly in AR update methods.Tadas Tamosauskas2013-12-231-4/+5
* Add nodoc to methodRafael Mendonça França2013-10-131-1/+1