Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fix warning: possibly useless use of % in void context | kennyj | 2012-05-19 | 1 | -1/+1 |
| | |||||
* | doesn't modify params in SafeBuffer#% | Vasiliy Ermolovich | 2012-05-18 | 1 | -0/+7 |
| | |||||
* | fix safe string interpolation with SafeBuffer#%, closes #6352 | Vasiliy Ermolovich | 2012-05-16 | 1 | -0/+24 |
| | |||||
* | Tests for regexp separator in String#truncate | Alexey Gaziev | 2012-04-29 | 1 | -0/+6 |
| | | | | https://github.com/rails/rails/commit/5a7513593f64e0ff7e4de1ee37bac5eeddfae270 | ||||
* | use AS::TestCase as the base class | Aaron Patterson | 2012-01-05 | 1 | -2/+2 |
| | |||||
* | deprecate String#encoding_aware? and remove its usage | Sergey Nartimov | 2011-12-24 | 1 | -1/+3 |
| | |||||
* | Initial pass at removing dead 1.8.x code from Active Support. | José Valim | 2011-12-20 | 1 | -44/+6 |
| | | | | | | There are a bunch of other implicit branches that adds 1.8.x specific code that still needs to be removed. Pull requests for those cases are welcome. | ||||
* | Restore performance of ERB::Util.html_escape | Jon Jensen | 2011-12-03 | 1 | -6/+17 |
| | | | | | | | Revert html_escape to do a single gsub again, but add the "n" flag (no language, i.e. not multi-byte) to protect against XSS via invalid utf8 Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | defines Module#qualified_const_(defined?|get|set) and String#deconstantize | Xavier Noria | 2011-10-29 | 1 | -0/+4 |
| | | | | | | | | | | This commit also implements a faster version of #demodulize I was unable to isolate with git add --patch. Not a big fan of the name #deconstantize. It complements #demodulize getting rid of the rightmost constant, hence the name, but it is unrelated to the well-known #constantize. So unsure. Could not come with anything better, please feel free to rename. | ||||
* | Modified String#pluralize to take an optional count parameter. | Ryan Oblak | 2011-09-28 | 1 | -4/+8 |
| | |||||
* | Added ActiveSupport::Inflector.safe_constantize and String#safe_constantize; ↵ | Ryan Oblak | 2011-09-23 | 1 | -1/+22 |
| | | | | refactored common constantize tests into ConstantizeTestCases | ||||
* | properly escape html to avoid invalid utf8 causing XSS attacks | Aaron Patterson | 2011-08-16 | 1 | -0/+7 |
| | |||||
* | Removing extra requires from the test. Already loaded in abstract_unit. | Arun Agrawal | 2011-07-31 | 1 | -1/+0 |
| | |||||
* | Changed the year of a date used in a test which fails when using 1.8.7 on a ↵ | Josh Kalderimis | 2011-07-19 | 1 | -1/+1 |
| | | | | 32bit machine (ArgumentError: time out of range) | ||||
* | Merge pull request #1463 from psanford/master | Santiago Pastorino | 2011-07-06 | 1 | -0/+1 |
|\ | | | | | Fix timezone handling in String.to_time | ||||
| * | Make String.to_time respect timezones | Nate Mueller | 2011-06-02 | 1 | -0/+1 |
| | | |||||
* | | all numerics should be html_safe - Closes #1935 | Damien Mathieu | 2011-07-03 | 1 | -0/+4 |
| | | |||||
* | | Define ActiveSupport#to_param as to_str - closes #1663 | Andrew White | 2011-06-12 | 1 | -1/+7 |
|/ | |||||
* | Revert "Merge pull request #275 from pk-amooma/master" | José Valim | 2011-05-07 | 1 | -12/+0 |
| | | | | | | | Several AP tests fail after this change. This reverts commit aaf01cd53718c8aa5b69ac056b997e6dd9893777, reversing changes made to 9cc18c52faeebaad6a76bd62cdca1c6b9f96afed. | ||||
* | Merge pull request #275 from pk-amooma/master | José Valim | 2011-05-07 | 1 | -0/+12 |
|\ | | | | | properly escape "'" to "'" for XML | ||||
| * | test "Escapes special HTML/XML characters" do ... | Philipp Kempgen | 2011-04-26 | 1 | -0/+12 |
| | | |||||
* | | Merge remote branch 'rolftimmermans/desc_tracker' | José Valim | 2011-05-07 | 1 | -0/+1 |
|\ \ | |||||
| * | | Add missing dependency string inflection test. | Rolf Timmermans | 2011-03-13 | 1 | -0/+1 |
| |/ | |||||
* / | Add String#inquiry as a convenience method for turning a string into a ↵ | David Heinemeier Hansson | 2011-04-18 | 1 | -0/+5 |
|/ | | | | StringInquirer object [DHH] | ||||
* | removes orphan tests, custom String#% was removed from AS in 39d6f9e | Xavier Noria | 2010-11-19 | 1 | -69/+0 |
| | |||||
* | let String#strip_heredoc handle blank lines even if they are not indented | Xavier Noria | 2010-08-30 | 1 | -0/+9 |
| | |||||
* | implements String#strip_heredoc | Xavier Noria | 2010-08-29 | 1 | -0/+23 |
| | |||||
* | Deletes trailing whitespaces (over text files only find * -type f -exec sed ↵ | Santiago Pastorino | 2010-08-14 | 1 | -1/+1 |
| | | | | 's/[ \t]*$//' -i {} \;) | ||||
* | Added getbyte as a core_ext to Ruby < 1.9 | Santiago Pastorino | 2010-06-27 | 1 | -0/+8 |
| | | | | Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Extracted String#truncate from TextHelper#truncate [DHH] | David Heinemeier Hansson | 2010-06-01 | 1 | -0/+29 |
| | |||||
* | Use multibyte proxy class on 1.9, refactor Unicode. | Norman Clarke | 2010-05-21 | 1 | -5/+3 |
| | | | | | | | | | | Makes String#mb_chars on Ruby 1.9 return an instance of ActiveSupport::Multibyte::Chars to work around 1.9's lack of Unicode case folding. Refactors class methods from ActiveSupport::Multibyte::Chars into new Unicode module, adding other related functionality for consistency. [#4594 state:resolved] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
* | Final iteration of use better testing methods | Neeraj Singh | 2010-05-19 | 1 | -7/+7 |
| | | | | | | [#4652 state:resolved] Signed-off-by: José Valim <jose.valim@gmail.com> | ||||
* | Revert "Moved encoding work in progress to a feature branch." | wycats | 2010-05-17 | 1 | -0/+8 |
| | | | | This reverts commit ade756fe42423033bae8e5aea8f58782f7a6c517. | ||||
* | Moved encoding work in progress to a feature branch. | Jeremy Kemper | 2010-05-16 | 1 | -8/+0 |
| | | | | This reverts commits af0d1a88157942c6e6398dbf73891cff1e152405 and 64d109e3539ad600f58536d3ecabd2f87b67fd1c. | ||||
* | Initial work to improve the state of encodings for templates | wycats | 2010-05-16 | 1 | -0/+8 |
| | |||||
* | updates String#to_(date|date_time|time) to return nil for blank strings | Daniel Neighman | 2010-04-21 | 1 | -3/+6 |
| | |||||
* | removes code written for Ruby < 1.8.7 | Xavier Noria | 2010-04-17 | 1 | -12/+0 |
| | |||||
* | Fix some more warnings on 1.9 | wycats | 2010-03-17 | 1 | -1/+1 |
| | |||||
* | Be sure to pass through args to to_yaml | Jeremy Kemper | 2010-03-11 | 1 | -1/+1 |
| | |||||
* | OutputBuffer#to_yaml should return string yaml, not some custom class dump | Jeremy Kemper | 2010-03-11 | 1 | -0/+4 |
| | |||||
* | Fixed html_safe test cases which weren't testing correctly | Santiago Pastorino and José Ignacio Costa | 2010-02-05 | 1 | -17/+20 |
| | | | | | | [#3845 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> | ||||
* | For performance reasons, you can no longer call html_safe! on Strings. ↵ | Yehuda Katz | 2010-01-31 | 1 | -33/+34 |
| | | | | | | | | | | | | Instead, all Strings are always not html_safe?. Instead, you can get a SafeBuffer from a String by calling #html_safe, which will SafeBuffer.new(self). * Additionally, instead of doing concat("</form>".html_safe), you can do safe_concat("</form>"), which will skip both the flag set, and the flag check. * For the first pass, I converted virtually all #html_safe!s to #html_safe, and the tests pass. A further optimization would be to try to use #safe_concat as much as possible, reducing the performance impact if we know up front that a String is safe. | ||||
* | String#exclude? core extension: inverse of #include? | Jeremy Kemper | 2009-12-27 | 1 | -0/+7 |
| | |||||
* | String#<< should work for any object which responds to :to_str, so enable ↵ | José Valim | 2009-12-26 | 1 | -0/+24 |
| | | | | this without the performance hit and make Fixnum safe by default. | ||||
* | Consolidate date & time landscape: require 'active_support/time' | Jeremy Kemper | 2009-11-14 | 1 | -1/+1 |
| | |||||
* | Fix missing dependency | Jeremy Kemper | 2009-11-09 | 1 | -0/+1 |
| | |||||
* | String#each_char is not needed for Ruby >= 1.8.7 | Xavier Noria | 2009-11-09 | 1 | -11/+0 |
| | |||||
* | String#start_with? and String#end_with? are not needed for Ruby >= 1.8.7, ↵ | Xavier Noria | 2009-11-09 | 1 | -8/+0 |
| | | | | leaves their plural aliases though | ||||
* | String#bytesize is not needed for Ruby >= 1.8.7 | Xavier Noria | 2009-11-09 | 1 | -7/+0 |
| | |||||
* | Switch to on-by-default XSS escaping for rails. | Michael Koziarski | 2009-10-08 | 1 | -0/+86 |
| | | | | | | | | | | | | This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration. |