aboutsummaryrefslogtreecommitdiffstats
path: root/guides
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Include default rails protect_from_forgery with: :exceptionPaulL12014-04-171-4/+4
| | | | | | | | | | | | | | | | | | Extend previous changes, include the default line from the application controller that new rails applications are created with: protect_from_forgery with: :exception Minor wording changes to align.
* | | CSRF protection should rescue exception not extendPaulL12014-04-171-3/+2
| | | | | | | | | | | | | | | I think the changes to the default behaviour mean that rails will throw an exception when an invalid authenticity token is found. The previous proposed code of calling super then sign_out meant that sign_out was never reached - the exception handler never returned. I think the best approach now is to catch the exception, although I'm not 100% certain on that.
* | | [skip ci] Reorder i18n guideKyle Heironimus2014-04-161-54/+54
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, the section called "How to store your custom translations" has several subheadings that make no sense, such as "Translations for ActiveRecord models." These make more sense under the "Overview of the I18n API Features" section. I moved the "How to store..." section down to the more appropriate sub-headings "Using Different Backends" and "Using Different Exception Handlers" and removed the "Customize your i18n setup" header.
* | | Merge pull request #11836 from mcfiredrill/engines-testing-docArthur Nogueira Neves2014-04-161-0/+10
|\ \ \ | | | | | | | | additional note about routes in functional tests for engines [ci skip]
| * | | additional note about routes in functional tests for engines [ci skip]Tony Miller2013-08-101-0/+10
| | | |
* | | | [ci skip] Avoid suggesting dangerous code in i18n guideMike MacDonald2014-04-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Calling `to_sym` on user input opens apps up to Denial of Service attacks, via the symbol table being expanded to consume vast swathes of memory. It is a fairly common configuration to have DNS configured such that all subdomains route to your Rails app, in which case an attacker visits `www1.foo.com`, `www2.foo.com`, and so on until something gives. It is far less likely to have this problem with TLDs, so that change was only for consistency.
* | | | [ci skip] Add missing end in one of the examples in Migrations.md.Juanito Fatas2014-04-151-0/+1
| | | |
* | | | Merge pull request #14729 from akshay-vishnoi/doc_changesRichard Schneeman2014-04-141-3/+3
|\ \ \ \ | | | | | | | | | | [ci skip] Improve doc, fix grammatical issue
| * | | | [ci skip] Improve doc, fix grammatical issueAkshay Vishnoi2014-04-131-3/+3
| | | | |
* | | | | [ci skip] Added link to ruby-lang.org installation.ZENATI YASSINE2014-04-141-1/+1
| | | | |
* | | | | - Fix lingering reference to `:text` instead of the newer `:plain`Christopher Owen2014-04-141-2/+2
| |_|_|/ |/| | | | | | | | | | | - Section references `form_tag` instead of the `form_for` used in the example
* | | | Disable assest cache store in docs [ci skip]Nick Borromeo2014-04-131-0/+8
| | | |
* | | | [ci skip] Use plain underscore instead of "\_".Juanito Fatas2014-04-134-5/+5
| | | |
* | | | Update documentation to use Rails.application insteadMarcel Morgan2014-04-1315-22/+21
|/ / / | | | | | | | | | | | | | | | | | | References to ``AppName::Application` removed in favour of ``Rails.application`` as generated with a new rails 4.1 app. [ci skip]
* | | Missing 'are' in note - [ci skip]Afshin Mokhtari2014-04-121-1/+1
| | | | | | | | | This is in the note at the end of Section 2: Controller Naming Convention. [ci skip]
* | | Fix a few typos [ci skip]Robin Dupret2014-04-121-13/+13
| | | | | | | | | | | | This is a follow up to 545afc15.
* | | Change links to 37signals and svn blog to point to new destinations. [ci skip]Vipul A M2014-04-122-3/+3
| | |
* | | Merge pull request #14646 from deivid-rodriguez/provide_byebug_by_defaultRafael Mendonça França2014-04-111-257/+411
|\ \ \ | | | | | | | | Improve debugging support
| * | | Re-review the debugging guide.David Rodríguez de Dios2014-04-111-133/+218
| | | | | | | | | | | | | | | | Tested on a brand new app to exactly match current byebug's behaviour.
| * | | Minor fixes in the rails debugging guideDavid Rodríguez de Dios2014-04-111-2/+2
| | | |
| * | | Update debugging guide to use byebugDavid Rodríguez de Dios2014-04-081-177/+246
| | | |
* | | | Fix version indicator on guides and link to Rails 4.0 [ci skip]Rafael Mendonça França2014-04-111-1/+4
| | | |
* | | | Merge pull request #14689 from matthewd/asset_initializerRafael Mendonça França2014-04-111-4/+4
|\ \ \ \ | | | | | | | | | | Move assets precompile (and version) to an initializer
| * | | | Move assets precompile (and version) to an initializerMatthew Draper2014-04-111-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | sprockets-rails 2.1 needs the precompile list to be available in all environments.
* | | | | Merge pull request #14707 from minio-sk/fix-issue-14702Rafael Mendonça França2014-04-111-0/+2
|\ \ \ \ \ | | | | | | | | | | | | Be explicit about allowed constraint values, fixes #14702
| * | | | | Be explicit about allowed constraint values, fixes #14702Jano Suchal2014-04-111-0/+2
| | | | | |
* | | | | | Merge pull request #14705 from akshay-vishnoi/doc_changesRafael Mendonça França2014-04-111-0/+3
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Add more test case for #demodulize, Improve documentation
| * | | | | Add more test case for #demodulize, Improve documentationAkshay Vishnoi2014-04-111-0/+3
| | | | | |
* | | | | | Merge pull request #14694 from heironimus/callback_guideRafael Mendonça França2014-04-101-0/+3
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Add after_commit/after_rollback to callback list
| * | | | | Add after_commit/after_rollback to callback listKyle Heironimus2014-04-101-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adding after_commit/after_rollback to list of callbacks in order helps explain the callback order as well as making it consistent with the API docs at http://api.rubyonrails.org/classes/ActiveRecord/Callbacks.html
* | | | | | [ci skip] Remove false documentationAkshay Vishnoi2014-04-111-14/+1
|/ / / / /
* | | | | Merge pull request #14677 from JuanitoFatas/update-initialization-code-snippetsRafael Mendonça França2014-04-101-53/+102
|\ \ \ \ \ | |/ / / / |/| | | | [ci skip] Update code snippets to latest master (initialization.md).
| * | | | [ci skip] Update code snippets to latest master (initialization.md).Juanito Fatas2014-04-101-53/+102
| | | | | | | | | | | | | | | | | | | | Also update the `server.run` example (Replace Mongrel with Puma).
* | | | | Correct factual error for page not foundParth Bharadiya2014-04-101-1/+1
|/ / / /
* | | | depend_on_asset is not required anymore on sprockets-rails 2.1.2Rafael Mendonça França2014-04-091-19/+4
| | | |
* | | | Merge pull request #14654 from Alamoz/secret_keyRafael Mendonça França2014-04-091-4/+7
|\ \ \ \ | | | | | | | | | | Expand explanation of how to set secrets.yml.
| * | | | Expand explanation of how to set secrets.yml. [ci skip]Adrien Lamothe2014-04-081-4/+7
| | | | |
* | | | | upgrading section for 4.1 is no longer WIP. [ci skip]Yves Senn2014-04-091-2/+0
| | | | |
* | | | | Guides: minor typo fixed [ci skip]Vadim Golub2014-04-091-1/+1
|/ / / /
* | | | new CHANGELOGs entries are in the top [ci skip]Rafael Mendonça França2014-04-081-4/+4
| | | |
* | | | Updates the maintenance policy with new Rails versionsMatias Korhonen2014-04-082-3/+7
|/ / /
* | | Added OS X specific commands to installation guide [ci skip]Jarmo Isotalo2014-04-071-1/+14
| | | | | | | | | | | | Recommended using homebrew for installing MySQL and PostgreSQL
* | | W3C CSP document moved to gihub.io URL [ci skip]Andy Callaghan2014-04-051-1/+1
| | | | | | | | | The old link https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html is now being soft redirected to this new URL
* | | Improve error message for guides:generate:kindleŁukasz Adamczak2014-04-031-2/+2
| | | | | | | | | | | | | | | | | | | | | With `kindlegen` missing from the PATH, the task keeps suggesting to `gem install kindlerb`. This change provides a more meaningful error message for guides:generate:kindle.
* | | Merge pull request #14569 from matthewd/sqlite_relative_deprecatedRafael Mendonça França2014-04-031-2/+2
|\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | Revise 'sqlite3:' URL handling for smoother upgrades Conflicts: activerecord/CHANGELOG.md
| * | | Revise 'sqlite3:' URL handling for smoother upgradesMatthew Draper2014-04-031-2/+2
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Restore the 4.0 behaviour for 'sqlite3:///', but deprecate it. We'll change to the absolute-path interpretation in 4.2. The current "correct" spellings for in-memory, relative, and absolute URLs, respectively, are: sqlite3::memory: sqlite3:relative/path sqlite3:/full/path Substantially reverses/defers fbb79b517f3127ba620fedd01849f9628b78d6ce. Uncovered by @guilleiguaran while investigating #14495, though that sounds like a different issue.
* | | In Active Record Querying guide, currently `Merging of scopes` section uses ↵ariabov2014-04-022-30/+33
| | | | | | | | | | | | | | | | | | a concept of default scope in its example before it is introduced in the following section titled `Applying a default scope`. It makes more sense to switch the ordering to introduce default scopes (`Applying a default scope`) first and then go into `Merging of scopes` section where it is used.
* | | Merge pull request #14564 from killthekitten/patch-2Rafael Mendonça França2014-04-021-5/+4
|\ \ \ | | | | | | | | Fix default_url_options example in i18n guide
| * | | Fix default_url_options example in i18n guide [ci skip]Nikolay Shebanov2014-04-031-5/+4
| |/ /
* | | Fix cookie serializer docsCarlos Antonio da Silva2014-04-021-3/+3
| | | | | | | | | | | | The option actually needs to be set on action_dispatch. [ci skip]