| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Use `Base.strict_decode64` instead of `Base.decode64` just as we do in encoding; | Vipul A M | 2013-05-16 | 1 | -1/+5 |
| | | | | | Also reduce extra object allocation by creating string directly instead of join on Array | ||||
| * | Updated docs due to removal of serializer accessor | Albert Lash | 2013-03-24 | 1 | -3/+3 |
| | | |||||
| * | Replace comments' non-breaking spaces with spaces | claudiob | 2012-12-04 | 1 | -1/+1 |
| | | | | | | | | | | | Sometimes, on Mac OS X, programmers accidentally press Option+Space rather than just Space and don’t see the difference. The problem is that Option+Space writes a non-breaking space (0XA0) rather than a normal space (0x20). This commit removes all the non-breaking spaces inadvertently introduced in the comments of the code. | ||||
| * | update AS docs [ci skip] | Francesco Rodriguez | 2012-09-17 | 1 | -7/+7 |
| | | |||||
| * | remove ActiveSupport::Base64 in favor of ::Base64 | Sergey Nartimov | 2012-01-02 | 1 | -3/+3 |
| | | |||||
| * | deprecate Base64.encode64s from AS. Use Base64.strict_encode64 instead | Vasiliy Ermolovich | 2011-12-27 | 1 | -2/+2 |
| | | |||||
| * | Remove deprecations from Active Support. | José Valim | 2011-12-20 | 1 | -5/+0 |
| | | |||||
| * | Fix typo in deprecation notice | Claudio Poli | 2011-09-16 | 1 | -1/+1 |
| | | |||||
| * | Use an options hash to specify digest/cipher algorithm and a serializer for ↵ | Willem van Bergen | 2011-09-15 | 1 | -7/+10 |
| | | | | | MessageVerifier and MessageEncryptor. | ||||
| * | Add some documentation for the new serializer property of MessageVerifier ↵ | Willem van Bergen | 2011-09-15 | 1 | -0/+5 |
| | | | | | and MessageEncryptor. | ||||
| * | Implement API suggestions of pull request. | Willem van Bergen | 2011-09-15 | 1 | -6/+5 |
| | | |||||
| * | Custom serializers and deserializers in MessageVerifier and MessageEncryptor. | Willem van Bergen | 2011-09-15 | 1 | -2/+6 |
| | | | | | | By default, these classes use Marshal for serializing and deserializing messages. Unfortunately, the Marshal format is closely associated with Ruby internals and even changes between different interpreters. This makes the resulting message very hard to impossible to unserialize messages generated by these classes in other environments like node.js. This patch solves this by allowing you to set your own custom serializer and deserializer lambda functions. By default, it still uses Marshal to be backwards compatible. | ||||
| * | more style changes | suchasurge | 2011-03-06 | 1 | -1/+1 |
| | | |||||
| * | Deletes trailing whitespaces (over text files only find * -type f -exec sed ↵ | Santiago Pastorino | 2010-08-14 | 1 | -7/+7 |
| | | | | | 's/[ \t]*$//' -i {} \;) | ||||
| * | Revert "Improve performance of MessageVerifier while keeping it constant time" | wycats | 2010-07-13 | 1 | -4/+4 |
| | | | | | This reverts commit 8b05c5207dd5757d55d0c384740db289e6bd5415. | ||||
| * | Improve performance of MessageVerifier while keeping it constant time | wycats | 2010-06-04 | 1 | -4/+4 |
| | | |||||
| * | message_verifier.rb needs active_support/core_ext/object/blank | Xavier Noria | 2010-01-01 | 1 | -0/+1 |
| | | |||||
| * | message_verifier.rb needs active_support/base64 | Xavier Noria | 2010-01-01 | 1 | -0/+2 |
| | | |||||
| * | String#bytesize is not needed for Ruby >= 1.8.7 | Xavier Noria | 2009-11-09 | 1 | -2/+0 |
| | | |||||
| * | Ensure MessageVerifier raises appropriate exception on tampered data | Pratik Naik | 2009-10-09 | 1 | -1/+1 |
| | | |||||
| * | MessageVerifier#verify raises InvalidSignature if the signature is blank | Jeffrey Hardy | 2009-10-05 | 1 | -0/+2 |
| | | | | | Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
| * | Use OpenSSL::Digest.const(...).new instead of OpenSSL::Digest::Digest.new(...) | Jeremy Kemper | 2009-09-24 | 1 | -1/+1 |
| | | |||||
| * | Explicitly require String#bytesize extension | Jeremy Kemper | 2009-09-24 | 1 | -0/+2 |
| | | |||||
| * | Prefer not to shadow a local | Jeremy Kemper | 2009-09-13 | 1 | -1/+1 |
| | | |||||
| * | making secure_compare faster | Aaron Patterson | 2009-09-13 | 1 | -28/+8 |
| | | | | | | | [#3195 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
| * | Dup the arguments to string compare so we can use force_encoding. | Michael Koziarski | 2009-09-13 | 1 | -2/+2 |
| | | |||||
| * | Revert "ruby 1.9 friendly secure_compare" because it breaks CI and Sam ↵ | Yehuda Katz | 2009-09-12 | 1 | -6/+9 |
| | | | | | | | Ruby's suite This reverts commit 5de75398c495f109772b622291362a98bc6c21d1. | ||||
| * | ruby 1.9 friendly secure_compare | Jakub Kuźma | 2009-09-12 | 1 | -9/+6 |
| | | | | | Signed-off-by: Michael Koziarski <michael@koziarski.com> | ||||
| * | Ruby 1.9: fix MessageVerifier#secure_compare | Jeremy Kemper | 2009-09-08 | 1 | -9/+27 |
| | | |||||
| * | Fix timing attack vulnerability in ActiveSupport::MessageVerifier. | Coda Hale | 2009-09-04 | 1 | -3/+16 |
| | | | | | | | Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC. Signed-off-by: Michael Koziarski <michael@koziarski.com> | ||||
| * | Lazy-require OpenSSL | Jeremy Kemper | 2008-11-23 | 1 | -1/+2 |
| | | |||||
| * | Don't need _message as it's in the class name already | Michael Koziarski | 2008-11-23 | 1 | -4/+4 |
| | | |||||
| * | Add ActiveSupport::MessageVerifier to aid users who need to store ↵ | Michael Koziarski | 2008-11-23 | 1 | -0/+45 |
| tamper-proof messages in cookies etc. This is particularly useful for things like remember-me tokens in web applications and auto-unsubscribe links in emails. | |||||
 |
index : rails.git | |
| Mirror of official rails repo with custom fixes. | Harald Eilertsen |
| aboutsummaryrefslogtreecommitdiffstats |