aboutsummaryrefslogtreecommitdiffstats
path: root/activestorage/app
Commit message (Collapse)AuthorAgeFilesLines
...
* Work around Firefox's refusal to dispatch events on disabled elements. Fixes ↵Javan Makhmali2018-01-081-1/+10
| | | | | | #31393 Brought to you by a 12 year old Firefox bug: https://bugzilla.mozilla.org/show_bug.cgi?id=329509
* Allow overriding filename in `Blob#service_url`Rosa Gutierrez2018-01-081-1/+1
| | | | | | | This is useful when we have several representations for the same underlying file, each one with a different name, and we need to provide a custom download URL based on that name and not that of the underlying file.
* Force content disposition to attachment for specific content typesRosa Gutierrez2018-01-051-2/+7
| | | | | | | | | | | | | | In this way we avoid HTML, XML, SVG and other files that can be rendered by the browser to be served inline by default. Depending on the origin from where these files are served, this might lead to XSS vulnerabilities, and in the best case, to more realistic phishing attacks and open redirects. We force it rather than falling back to it when other disposition is not provided. Otherwise it would be possible for someone to force inline just by passing `disposition=inline` in the URL. The list of content types to be served as attachments is configurable.
* Exclude ActiveStorage::SetBlob from API docs [ci skip]George Claghorn2018-01-021-1/+1
|
* Restore support for the -layers transformationGeorge Claghorn2018-01-021-14/+14
|
* prevent shadowing outer variablesDorian Marié2017-12-251-4/+4
|
* Active Storage: Fix direct uploads in IE 11Javan Makhmali2017-12-232-4/+18
| | | | | Fixes #31531 Closes #31540
* Add support for combined MiniMagick transformationsRobert Glaser2017-12-221-6/+16
|
* [ci skip] Remove needless from doc for ActiveStorage::VariantYoshiyuki Hirano2017-12-221-1/+1
|
* Delete MiniMagick tempfile when transformation failsGeorge Claghorn2017-12-181-1/+7
|
* Ensure MiniMagick tempfiles are properly unlinked after image transformationGeorge Claghorn2017-12-181-9/+18
|
* Convert non-web image (e.g. PSD) variants to PNGGeorge Claghorn2017-12-181-3/+34
|
* Update ActiveStorage::Blob#transformation docs [ci skip]George Claghorn2017-12-161-3/+3
|
* Handle invalid signed blob IDs gracefullyGeorge Claghorn2017-12-154-18/+28
|
* Restrict variants to variable image blobsGeorge Claghorn2017-12-151-4/+18
|
* Exclude ActiveStorage::Filename{#parameters,::Parameters} from API docs [ci ↵George Claghorn2017-12-132-2/+2
| | | | skip]
* Fix optimizing GIF variants using mogrify's -layers optionGeorge Claghorn2017-12-111-5/+7
|
* Revert "Invoke mogrify once when transforming an image"George Claghorn2017-12-111-8/+6
| | | | This reverts commit a80f81af055f02bf4625c90470aa90441cf6fc24.
* Invoke mogrify once when transforming an imageGeorge Claghorn2017-12-111-6/+8
| | | | Execute a single mogrify command with multiple options rather than one command per option. Permit the use of all mogrify options, not just the ones that fall through to MiniMagick::Image#method_missing.
* Purge variants with their blobsGeorge Claghorn2017-12-021-1/+2
|
* Fix loading ActiveStorage::DiskController when CSRF protection is disabled ↵George Claghorn2017-11-211-1/+1
| | | | by default
* Fix direct uploads to local serviceGeorge Claghorn2017-11-201-0/+2
| | | | | | | | Disable CSRF protection for ActiveStorage::DiskController#update. The local disk service is intended to imitate a third-party service like S3 or GCS, so we don't care where direct uploads originate: they’re authorized by signed tokens. Closes #30290. [Shinichi Maeshima & George Claghorn]
* Preserve existing metadata when analyzing a blobGeorge Claghorn2017-11-131-1/+1
| | | | Closes #31138.
* Permit configuring Active Storage's job queueGeorge Claghorn2017-11-033-2/+7
|
* Extract metadata from images and videosGeorge Claghorn2017-10-224-2/+72
|
* Clarify comment [ci skip]George Claghorn2017-10-131-1/+1
|
* Accept variation keys in #preview and #variantGeorge Claghorn2017-10-122-7/+12
|
* Introduce ActiveStorage::Blob#representationGeorge Claghorn2017-10-122-0/+30
|
* Replace variation key use with SHA256 of key to prevent long filenameskhall2017-10-051-1/+1
| | | | | | | If a variant has a large set of options associated with it, the generated filename will be too long, causing Errno::ENAMETOOLONG to be raised. This change replaces those potentially long filenames with a much more compact SHA256 hash. Fixes #30662.
* Fix third-party system libraries list in ActiveStorage::Preview [ci skip]Yoshiyuki Hirano2017-10-041-2/+2
|
* Associate blobs with their attachmentsGeorge Claghorn2017-10-031-0/+2
|
* Preview PDFs and videosGeorge Claghorn2017-09-288-44/+160
|
* Add missing word [ci skip]George Claghorn2017-09-201-1/+1
|
* Flesh out ActiveStorage::Filename docsGeorge Claghorn2017-09-201-6/+14
|
* Remove unused require in ActiveStorage::VariationYoshiyuki Hirano2017-09-181-2/+0
|
* Fix activestorage direct upload on firefox_N_I_X_O_N_2017-09-123-1/+3
| | | | | | | | Direct upload on firefox is not working because it can’t handle click events on “input[type=submit]”. After a successful upload we can see on console a xml parse error, it happens because AWS S3 success body response is empty, so changing the reponseType suppress this error.
* Have attachments touch their recordsGeorge Claghorn2017-08-311-1/+1
|
* Update Active Storage docs [ci skip]Yoshiyuki Hirano2017-08-302-7/+15
|
* Synchronously destroy attachmentsGeorge Claghorn2017-08-292-9/+7
|
* Enable links in Active Storage docs [ci skip]Yoshiyuki Hirano2017-08-262-2/+2
|
* Fix link in doc for active storage [ci skip]Yoshiyuki Hirano2017-08-251-1/+1
|
* Add frozen string literal pragmaGeorge Claghorn2017-08-211-0/+2
|
* Encode Content-Disposition filenames according to RFC 2231George Claghorn2017-08-213-1/+39
| | | | Closes #30134.
* DRYGeorge Claghorn2017-08-202-3/+3
|
* Rename ActiveStorage::Filename#extname to extension_with_delimiterGeorge Claghorn2017-08-201-9/+11
|
* restores some double newlines deleted in ae87217Xavier Noria2017-08-153-0/+6
| | | | | | These were intentional, see https://github.com/rails/rails/pull/30061#issuecomment-320068368
* minor tweaks in Active Storage after a walkthroughXavier Noria2017-08-156-32/+28
|
* Use frozen string literal in Active StorageKoichi ITO2017-08-1210-0/+20
|
* Enable browser caching for blobs and variants (#30196)Anton Khamets2017-08-112-0/+2
|
* Fix formatting of Active Storage docs [ci skip]Koichi ITO2017-08-115-31/+31
| | | | Follow up of #30188.