aboutsummaryrefslogtreecommitdiffstats
path: root/activestorage/app/controllers
Commit message (Collapse)AuthorAgeFilesLines
* Restore inadvertently-removed fallbackGeorge Claghorn2018-07-151-1/+2
|
* Support HTTP Range downloads from diskGeorge Claghorn2018-07-151-14/+15
| | | | Closes #32193.
* Permit configuring the default service URL expiryGeorge Claghorn2018-06-212-2/+2
|
* Stream blobs from diskGeorge Claghorn2018-05-021-2/+13
|
* Always exclude JSON root from direct_uploads#create responseJavan Makhmali2018-04-101-1/+1
| | | | | | The JavaScript component expects a bare response. Fixes #32365
* Use a current model to provide the host for service urlsAndrew White2018-04-061-0/+4
| | | | | | | Trying to pass the current request down to the service so that it can create full urls instead of paths makes the API messy so use a model based on ActiveSupport::CurrentAttributes to provide the current host to services that need it (primarily the disk service).
* Protect all active storage controllers agains CSRFRafael Mendonça França2018-04-065-5/+11
| | | | | Before it was possible to for example use the direct upload controller without using the site.
* Merge Previews/Variants controller into one Representations controller.Kasper Timm Hansen2018-03-032-13/+3
| | | | | | | | | Since ActiveStorage::Blob::Representable unifies the idea of previews and variants under one roof as representation, we may as well have the controllers follow suit. Thus ActiveStorage::RepresenationsController enters the fray. I've copied the old tests for both previews and variants and unified those as well.
* Exclude ActiveStorage::SetBlob from API docs [ci skip]George Claghorn2018-01-021-1/+1
|
* Handle invalid signed blob IDs gracefullyGeorge Claghorn2017-12-154-18/+28
|
* Fix loading ActiveStorage::DiskController when CSRF protection is disabled ↵George Claghorn2017-11-211-1/+1
| | | | by default
* Fix direct uploads to local serviceGeorge Claghorn2017-11-201-0/+2
| | | | | | | | Disable CSRF protection for ActiveStorage::DiskController#update. The local disk service is intended to imitate a third-party service like S3 or GCS, so we don't care where direct uploads originate: they’re authorized by signed tokens. Closes #30290. [Shinichi Maeshima & George Claghorn]
* Preview PDFs and videosGeorge Claghorn2017-09-284-33/+19
|
* DRYGeorge Claghorn2017-08-201-2/+2
|
* restores some double newlines deleted in ae87217Xavier Noria2017-08-151-0/+2
| | | | | | These were intentional, see https://github.com/rails/rails/pull/30061#issuecomment-320068368
* minor tweaks in Active Storage after a walkthroughXavier Noria2017-08-151-2/+0
|
* Use frozen string literal in Active StorageKoichi ITO2017-08-124-0/+8
|
* Enable browser caching for blobs and variants (#30196)Anton Khamets2017-08-112-0/+2
|
* Do not eager load ActiveRecord::BaseRafael Mendonça França2017-08-031-2/+0
| | | | Everything inside the app directory of a engine is autoload/eager loaded automatically so we don't need to require them.
* Add 'activestorage/' from commit '3f4a7218a4a4923a0e7ce1b2eb0d2888ce30da58'Rafael Mendonça França2017-07-314-0/+122
git-subtree-dir: activestorage git-subtree-mainline: 0d58e7e478e79c2d6b2a39a4444d2a17a903b2a6 git-subtree-split: 3f4a7218a4a4923a0e7ce1b2eb0d2888ce30da58