aboutsummaryrefslogtreecommitdiffstats
path: root/activerecord/test/cases/forbidden_attributes_protection_test.rb
Commit message (Collapse)AuthorAgeFilesLines
* Fix more test failures caused by #21000Sean Griffin2015-11-231-1/+5
|
* Update and fix forbidden attributes testsThomas Walpole2015-11-031-2/+64
| | | | Add AC::Parameters tests for WhereChain#not
* Check attributes passed to create_with and whereRafael Mendonça França2014-08-181-0/+30
| | | | | | | | | | | If the request parameters are passed to create_with and where they can be used to do mass assignment when used in combination with Relation#create. Fixes CVE-2014-3514 Conflicts: activerecord/lib/active_record/relation/query_methods.rb
* Add regression test to #12343Rafael Mendonça França2013-09-241-0/+5
|
* Added STI support to init and building associationsJason Rush2012-11-291-0/+15
| | | | | | | | Allows you to do BaseClass.new(:type => "SubClass") as well as parent.children.build(:type => "SubClass") or parent.build_child to initialize an STI subclass. Ensures that the class name is a valid class and that it is in the ancestors of the super class that the association is expecting.
* Remove mass_assignment_options from ActiveRecordGuillermo Iguaran2012-09-161-10/+0
|
* Don't use assert_nothing_raised when assert_equal is usedGuillermo Iguaran2012-09-161-10/+6
|
* Rename ForbiddenAttributes exception to ForbiddenAttributesErrorGuillermo Iguaran2012-09-161-1/+1
|
* Add tests for ForbiddenAttributesProtection in ActiveRecordGuillermo Iguaran2012-09-161-0/+63