Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Check attributes passed to create_with and where | Rafael Mendonça França | 2014-08-18 | 1 | -0/+30 |
| | | | | | | | | | | | If the request parameters are passed to create_with and where they can be used to do mass assignment when used in combination with Relation#create. Fixes CVE-2014-3514 Conflicts: activerecord/lib/active_record/relation/query_methods.rb | ||||
* | Add regression test to #12343 | Rafael Mendonça França | 2013-09-24 | 1 | -0/+5 |
| | |||||
* | Added STI support to init and building associations | Jason Rush | 2012-11-29 | 1 | -0/+15 |
| | | | | | | | | Allows you to do BaseClass.new(:type => "SubClass") as well as parent.children.build(:type => "SubClass") or parent.build_child to initialize an STI subclass. Ensures that the class name is a valid class and that it is in the ancestors of the super class that the association is expecting. | ||||
* | Remove mass_assignment_options from ActiveRecord | Guillermo Iguaran | 2012-09-16 | 1 | -10/+0 |
| | |||||
* | Don't use assert_nothing_raised when assert_equal is used | Guillermo Iguaran | 2012-09-16 | 1 | -10/+6 |
| | |||||
* | Rename ForbiddenAttributes exception to ForbiddenAttributesError | Guillermo Iguaran | 2012-09-16 | 1 | -1/+1 |
| | |||||
* | Add tests for ForbiddenAttributesProtection in ActiveRecord | Guillermo Iguaran | 2012-09-16 | 1 | -0/+63 |