Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Use "run_callbacks :foo" since it is the public api for callbacks [#3329 | Joshua Peek | 2009-10-12 | 1 | -15/+15 | |
| | | | | state:resolved] | |||||
* | Kill unused SafelyMemoizable [#3323 state:resolved] | Joshua Peek | 2009-10-12 | 1 | -13/+0 | |
| | ||||||
* | To unmarshal MissingSourceFile from child | Jeremy Kemper | 2009-10-09 | 1 | -1/+3 | |
| | ||||||
* | Mute log info coming from the local_cache strategy | Pratik Naik | 2009-10-09 | 3 | -5/+14 | |
| | ||||||
* | Ensure MessageVerifier raises appropriate exception on tampered data | Pratik Naik | 2009-10-09 | 1 | -1/+1 | |
| | ||||||
* | Switch to on-by-default XSS escaping for rails. | Michael Koziarski | 2009-10-08 | 2 | -1/+45 | |
| | | | | | | | | | | | | This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration. | |||||
* | MessageVerifier#verify raises InvalidSignature if the signature is blank | Jeffrey Hardy | 2009-10-05 | 1 | -0/+2 | |
| | | | | Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Fix the broken railties isolation tests | Carl Lerche | 2009-09-29 | 1 | -4/+9 | |
| | ||||||
* | Escaping symbol passed into Memoizable's flush_cache for query methods to ↵ | Jay Pignata | 2009-09-28 | 1 | -2/+2 | |
| | | | | | | | | allow them to be cleared Signed-off-by: Michael Koziarski <michael@koziarski.com> [#3138 state:committed] | |||||
* | Use OpenSSL::Digest.const(...).new instead of OpenSSL::Digest::Digest.new(...) | Jeremy Kemper | 2009-09-24 | 1 | -1/+1 | |
| | ||||||
* | Explicitly require String#bytesize extension | Jeremy Kemper | 2009-09-24 | 1 | -0/+2 | |
| | ||||||
* | Check if the lib is in the load path and requirable before attempting to ↵ | Joshua Peek | 2009-09-24 | 1 | -9/+12 | |
| | | | | activate the gem version | |||||
* | Skip addition to load path if an externally-provided lib is already in ↵ | Jeremy Kemper | 2009-09-24 | 1 | -2/+5 | |
| | | | | place. Just to keep the path shorter. | |||||
* | Restore split between require-time and runtime load path mungery. Simplifies ↵ | Jeremy Kemper | 2009-09-24 | 10 | -33/+15 | |
| | | | | vendor requires. | |||||
* | Convert the other vendored libs to avoid pulling in old gems. Works even if ↵ | Jeremy Kemper | 2009-09-24 | 5 | -31/+16 | |
| | | | | rubygems isn't loaded. | |||||
* | Avoid inadvertently loading an old tzinfo gem | Jeremy Kemper | 2009-09-24 | 2 | -9/+5 | |
| | ||||||
* | Fixes Sam Ruby tests suite. | José Valim | 2009-09-21 | 1 | -46/+109 | |
| | | | | Signed-off-by: Yehuda Katz <wycats@gmail.com> | |||||
* | Instrumenting cache stores. | José Valim | 2009-09-20 | 4 | -78/+84 | |
| | ||||||
* | Use NewCallbacks on ActionDispatch::Callbacks. | José Valim | 2009-09-20 | 1 | -2/+2 | |
| | ||||||
* | Added Orchestra. | José Valim | 2009-09-20 | 2 | -0/+104 | |
| | ||||||
* | making nokogiri to hash less clever, more fast O_o | Aaron Patterson | 2009-09-17 | 1 | -20/+12 | |
| | | | | | | [#2243 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Allow Nokogiri XmlMini backend to process cdata elements | Developer | 2009-09-17 | 1 | -1/+1 | |
| | | | | | | [#3219 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Remove premature active_support/mini | Jeremy Kemper | 2009-09-14 | 1 | -9/+0 | |
| | ||||||
* | Forgot to update load path dir for vendored memcache | Joshua Peek | 2009-09-14 | 2 | -2/+1 | |
| | ||||||
* | Bump vendored memcache to 1.7.5 | Joshua Peek | 2009-09-13 | 1 | -93/+292 | |
| | ||||||
* | Rollback AS bundler work and improve activation of vendored dependencies | Joshua Peek | 2009-09-13 | 10 | -28/+48 | |
| | ||||||
* | Callbacks need to require reporting | Joshua Peek | 2009-09-13 | 1 | -0/+1 | |
| | ||||||
* | Restore AS vendor file until we get things sorted out in railties | Joshua Peek | 2009-09-13 | 1 | -0/+27 | |
| | ||||||
* | Move AS vendor support into bundler. | Joshua Peek | 2009-09-13 | 150 | -30/+0 | |
| | | | Run `rake bundle` before running tests. | |||||
* | require reporting before attempting to "shush" | Joshua Peek | 2009-09-13 | 2 | -0/+3 | |
| | ||||||
* | Shush, new_callbacks | Jeremy Kemper | 2009-09-13 | 1 | -2/+4 | |
| | ||||||
* | Shush, rexml | Jeremy Kemper | 2009-09-13 | 2 | -3/+3 | |
| | ||||||
* | Prefer not to shadow a local | Jeremy Kemper | 2009-09-13 | 1 | -1/+1 | |
| | ||||||
* | Clean up spurious JSON decoding test failure | Jeremy Kemper | 2009-09-13 | 3 | -8/+5 | |
| | ||||||
* | Use Encoding.default_external, not _internal | Jeremy Kemper | 2009-09-13 | 1 | -2/+2 | |
| | ||||||
* | making secure_compare faster | Aaron Patterson | 2009-09-13 | 1 | -28/+8 | |
| | | | | | | [#3195 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Dup the arguments to string compare so we can use force_encoding. | Michael Koziarski | 2009-09-13 | 1 | -2/+2 | |
| | ||||||
* | Revert "ruby 1.9 friendly secure_compare" because it breaks CI and Sam ↵ | Yehuda Katz | 2009-09-12 | 1 | -6/+9 | |
| | | | | | | Ruby's suite This reverts commit 5de75398c495f109772b622291362a98bc6c21d1. | |||||
* | ruby 1.9 friendly secure_compare | Jakub Kuźma | 2009-09-12 | 1 | -9/+6 | |
| | | | | Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
* | Remove redundant checks for valid character regexp in ↵ | Beau Harrington | 2009-09-10 | 1 | -2/+2 | |
| | | | | | | | | ActiveSupport::Multibyte#clean and #verify. [#3181 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Refactor new callbacks and AR implementation. | José Valim | 2009-09-08 | 1 | -56/+58 | |
| | | | | Signed-off-by: Joshua Peek <josh@joshpeek.com> | |||||
* | Changed ActiveRecord to use new callbacks and speed up observers by only ↵ | José Valim | 2009-09-08 | 1 | -46/+53 | |
| | | | | | | notifying events that are actually being consumed. Signed-off-by: Joshua Peek <josh@joshpeek.com> | |||||
* | Ruby 1.9: fix MessageVerifier#secure_compare | Jeremy Kemper | 2009-09-08 | 1 | -9/+27 | |
| | ||||||
* | Fix a messed up merge commit | Michael Koziarski | 2009-09-04 | 1 | -4/+0 | |
| | ||||||
* | Add verify and clean methods to ActiveSupport::Multibyte. | Michael Koziarski | 2009-09-04 | 3 | -18/+98 | |
| | | | | | | | | | | | | When accepting character input from outside of your application you can't blindly trust that all strings are properly encoded. With these methods you can check incoming strings and clean them up if necessary. Signed-off-by: Michael Koziarski <michael@koziarski.com> Conflicts: activesupport/lib/active_support/multibyte.rb | |||||
* | Fix timing attack vulnerability in ActiveSupport::MessageVerifier. | Coda Hale | 2009-09-04 | 1 | -3/+16 | |
| | | | | | | Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC. Signed-off-by: Michael Koziarski <michael@koziarski.com> | |||||
* | Duplicating the options hash in Date#advance to prevent modification of the ↵ | Jay Pignata | 2009-08-31 | 1 | -0/+1 | |
| | | | | | | original [#1133 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> | |||||
* | Correct Regexp#un/optionalize assertions and fix uncovered failures | Jeffrey Hardy | 2009-08-26 | 1 | -0/+2 | |
| | | | | | | [#3102 state:incomplete] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | |||||
* | Ruby 1.9: fix Time#beginning_of_day inaccuracy due to subtracting a Float | Jeremy Kemper | 2009-08-22 | 1 | -1/+2 | |
| | ||||||
* | Allow superclass_delegating_accessor to take a block for initial set. | Yehuda Katz | 2009-08-11 | 1 | -3/+4 | |
| |