Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | fix typo in String#first | Francesco Rodriguez | 2012-05-11 | 1 | -1/+1 |
| | |||||
* | added docs to String#first | Francesco Rodriguez | 2012-05-11 | 1 | -0/+11 |
| | |||||
* | added docs to String#from | Francesco Rodriguez | 2012-05-11 | 1 | -0/+13 |
| | |||||
* | improve String#to docs | Francesco Rodriguez | 2012-05-11 | 1 | -2/+2 |
| | |||||
* | added docs to String#to | Francesco Rodriguez | 2012-05-11 | 1 | -0/+13 |
| | |||||
* | added docs to String#at | Francesco Rodriguez | 2012-05-11 | 1 | -0/+25 |
| | |||||
* | Tests for regexp separator in String#truncate | Alexey Gaziev | 2012-04-29 | 1 | -1/+4 |
| | | | | https://github.com/rails/rails/commit/5a7513593f64e0ff7e4de1ee37bac5eeddfae270 | ||||
* | String quotes and trailing spaces | Alexey Gaziev | 2012-04-29 | 4 | -58/+58 |
| | |||||
* | AS core_ext refactoring pt.2 | Alexey Gaziev | 2012-04-29 | 2 | -3/+5 |
| | |||||
* | AS core_ext refactoring | Alexey Gaziev | 2012-04-29 | 3 | -23/+44 |
| | |||||
* | Stop SafeBuffer#clone_empty from issuing warnings | Carlos Antonio da Silva | 2012-03-02 | 1 | -3/+1 |
| | | | | | | | | | | | | Logic in clone_empty method was dealing with old @dirty variable, which has changed by @html_safe in this commit: https://github.com/rails/rails/commit/139963c99a955520db6373343662e55f4d16dcd1 This was issuing a "not initialized variable" warning - related to: https://github.com/rails/rails/pull/5237 The logic applied by this method is already handled by the [] override, so there is no need to reset the variable here. | ||||
* | Ensure [] respects the status of the buffer. | José Valim | 2012-02-29 | 1 | -12/+18 |
| | |||||
* | delete vulnerable AS::SafeBuffer#[] | Akira Matsuda | 2012-02-20 | 1 | -6/+0 |
| | |||||
* | add AS::SafeBuffer#clone_empty | Akira Matsuda | 2012-02-20 | 1 | -0/+6 |
| | |||||
* | revise docs [ci skip] | Vijay Dev | 2012-02-01 | 1 | -1/+1 |
| | |||||
* | Move escaping regexps to constants | Carlos Antonio da Silva | 2012-02-01 | 1 | -2/+4 |
| | |||||
* | Move escape_once logic to ERB::Util, where it belongs to | Carlos Antonio da Silva | 2012-02-01 | 1 | -0/+15 |
| | | | | | | All the logic is based on the HTML_ESCAPE constant available in ERB::Util, so it seems more logic to have the entire method there and just delegate the helper to use it. | ||||
* | Change ActiveRecord::Errors to ActiveModel::Errors in guides | Carlos Antonio da Silva | 2012-01-25 | 1 | -2/+2 |
| | | | | | | | Use ActiveModel::Errors in inflection example docs as well. Also fixes wrong information and link to locale file related to Errors#full_messages in I18n guide. | ||||
* | refactor String#truncate not to use mb_chars | Sergey Nartimov | 2012-01-04 | 1 | -6/+5 |
| | |||||
* | No need to override the to_yaml method in ActiveSupporte::SafeBuffer | Rafael Mendonça França | 2012-01-04 | 1 | -5/+0 |
| | |||||
* | No need to check if YAML::ENGINE is defined since ruby 1.9 does that | Rafael Mendonça França | 2012-01-04 | 1 | -1/+1 |
| | |||||
* | remove checks for encodings availability | Sergey Nartimov | 2011-12-25 | 1 | -88/+24 |
| | |||||
* | deprecate String#encoding_aware? and remove its usage | Sergey Nartimov | 2011-12-24 | 1 | -1/+4 |
| | |||||
* | no more need to make Time#to_date and Time#to_datetime public | Sergey Nartimov | 2011-12-22 | 1 | -1/+0 |
| | | | | they are public in actual 1.9 ruby version (tested at least in 1.9.2-p180) | ||||
* | We don't need a special html_escape for 1.8 anymore | Guillermo Iguaran | 2011-12-21 | 1 | -27/+15 |
| | |||||
* | remove support for ruby 1.8 in AS String extensions | Sergey Nartimov | 2011-12-21 | 1 | -29/+0 |
| | |||||
* | Initial pass at removing dead 1.8.x code from Active Support. | José Valim | 2011-12-20 | 2 | -71/+49 |
| | | | | | | There are a bunch of other implicit branches that adds 1.8.x specific code that still needs to be removed. Pull requests for those cases are welcome. | ||||
* | Remove duplicate html_escape docs | Jeremy Kemper | 2011-12-11 | 1 | -10/+1 |
| | |||||
* | Use 1.9 native XML escaping to speed up html_escape and shush regexp warnings | Jeremy Kemper | 2011-12-11 | 1 | -15/+36 |
| | | | | | | | | | | | | length user system total real before 6 0.010000 0.000000 0.010000 ( 0.012378) after 6 0.010000 0.000000 0.010000 ( 0.012866) before 60 0.040000 0.000000 0.040000 ( 0.046273) after 60 0.040000 0.000000 0.040000 ( 0.036421) before 600 0.390000 0.000000 0.390000 ( 0.390670) after 600 0.210000 0.000000 0.210000 ( 0.209094) before 6000 3.750000 0.000000 3.750000 ( 3.751008) after 6000 1.860000 0.000000 1.860000 ( 1.857901) | ||||
* | fix nodocs | Vijay Dev | 2011-12-09 | 1 | -1/+1 |
| | |||||
* | Restore performance of ERB::Util.html_escape | Jon Jensen | 2011-12-03 | 1 | -1/+1 |
| | | | | | | | Revert html_escape to do a single gsub again, but add the "n" flag (no language, i.e. not multi-byte) to protect against XSS via invalid utf8 Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | fixes a typo (thanks to Alexey Vakhov) | Xavier Noria | 2011-10-30 | 1 | -1/+1 |
| | |||||
* | defines Module#qualified_const_(defined?|get|set) and String#deconstantize | Xavier Noria | 2011-10-29 | 1 | -0/+15 |
| | | | | | | | | | | This commit also implements a faster version of #demodulize I was unable to isolate with git add --patch. Not a big fan of the name #deconstantize. It complements #demodulize getting rid of the rightmost constant, hence the name, but it is unrelated to the well-known #constantize. So unsure. Could not come with anything better, please feel free to rename. | ||||
* | Merge pull request #3151 from zenprogrammer/pluralize_without_count | José Valim | 2011-10-17 | 1 | -3/+14 |
|\ | | | | | Added include_count parameter to pluralize. | ||||
| * | Modified String#pluralize to take an optional count parameter. | Ryan Oblak | 2011-09-28 | 1 | -3/+14 |
| | | |||||
* | | ruby193: String#prepend is also unsafe | Akira Matsuda | 2011-10-05 | 1 | -1/+1 |
| | | |||||
* | | override unsafe methods only if defined on String | Akira Matsuda | 2011-10-05 | 1 | -10/+12 |
|/ | |||||
* | remove superfluous to_s in ERB::Util.html_escape | Alexey Vakhov | 2011-09-24 | 1 | -1/+1 |
| | |||||
* | Minor doc fix to String#constantize | Ryan Oblak | 2011-09-23 | 1 | -3/+3 |
| | |||||
* | Added ActiveSupport::Inflector.safe_constantize and String#safe_constantize; ↵ | Ryan Oblak | 2011-09-23 | 1 | -3/+16 |
| | | | | refactored common constantize tests into ConstantizeTestCases | ||||
* | fix incorrect comment | Vijay Dev | 2011-09-22 | 1 | -1/+1 |
| | |||||
* | Proper lines numbers for stack trace info | Santiago Pastorino | 2011-09-16 | 1 | -1/+1 |
| | |||||
* | revert the changes from c60995f3 - related to marking sub,gsub as ↵ | Vijay Dev | 2011-09-09 | 1 | -20/+1 |
| | | | | unavailable to use with safe strings | ||||
* | Revert removing gsub and sub from safe buffer. | José Valim | 2011-09-08 | 1 | -3/+3 |
| | |||||
* | this should have gone with the previous commit | Xavier Noria | 2011-09-08 | 1 | -4/+4 |
| | |||||
* | copy-edits a couple of exception messages | Xavier Noria | 2011-09-08 | 1 | -4/+4 |
| | | | | | | | "Safe Buffer" should either be the constant with the class name, or go in lower case. I've chosen to follow the same terminology that is used in the AS core extensiong guide, "safe string", though "safe buffer" is also used elsewhere, we should pick one. | ||||
* | better method documentation on disable safe string methods | Damien Mathieu | 2011-09-08 | 1 | -6/+12 |
| | |||||
* | make gsub and sub unavailable in SafeBuffers - Closes #1555 | Damien Mathieu | 2011-09-08 | 1 | -3/+16 |
| | |||||
* | properly escape html to avoid invalid utf8 causing XSS attacks | Aaron Patterson | 2011-08-16 | 1 | -1/+1 |
| | |||||
* | Reset @dirty to false when slicing an instance of SafeBuffer | Brian Cardarella | 2011-07-29 | 1 | -0/+6 |
| |