| Commit message (Expand) | Author | Age | Files | Lines |
* | Subdomains of localhost are safe against DNS rebinding | Marc Schütz | 2019-01-23 | 1 | -1/+1 |
* | Remove deprecated `config.secret_token` | Rafael Mendonça França | 2019-01-17 | 1 | -2/+1 |
* | Change `SQLite3Adapter` to always represent boolean values as integers | Rafael Mendonça França | 2019-01-17 | 1 | -4/+0 |
* | Restructure credentials after environment overrides. | Kasper Timm Hansen | 2019-01-14 | 1 | -8/+8 |
* | Move MailDeliveryJob default to 6.0 defaults | Gannon McGibbon | 2019-01-07 | 1 | -0/+4 |
* | Send Active Storage jobs to dedicated queues by default | George Claghorn | 2019-01-04 | 1 | -0/+5 |
* | Introduce a guard against DNS rebinding attacks | Genadi Samokovarov | 2018-12-15 | 2 | -1/+5 |
* | Improve deprecation message for enqueue returning false | Rafael Mendonça França | 2018-12-05 | 1 | -0/+4 |
* | Do not need to mention the method that is being called in the exception | Rafael Mendonça França | 2018-10-23 | 1 | -1/+1 |
* | Support environment specific credentials file. (#33521) | Wojciech Wnętrzak | 2018-09-19 | 1 | -1/+25 |
* | Drop load_database_yaml and fix test | Eileen Uchitelle | 2018-08-29 | 1 | -12/+0 |
* | Purpose Metadata For Signed And Encrypted Cookies | Assain | 2018-08-12 | 1 | -0/+4 |
* | Turn on performance based cops | Dillon Welch | 2018-07-23 | 1 | -3/+1 |
* | Only execute route updater once on app boot | Jonathan Boler | 2018-06-19 | 2 | -6/+2 |
* | Eager load routes on rebuild | Jonathan Boler | 2018-06-04 | 1 | -14/+2 |
* | Merge pull request #32065 from sikachu/move-SourceAnnotationExtractor-under-r... | Kasper Timm Hansen | 2018-04-02 | 1 | -1/+1 |
|\ |
|
| * | Move SourceAnnotationExtractor under Rails module | Prem Sichanugrist | 2018-03-22 | 1 | -1/+1 |
* | | Refactor configs_for and friends | eileencodes | 2018-03-21 | 1 | -0/+12 |
|/ |
|
* | Don't enforce UTF-8 by default | Andrew White | 2018-02-27 | 1 | -0/+3 |
* | Revert "Merge pull request #32075 from eileencodes/delete-default-configuration" | eileencodes | 2018-02-22 | 1 | -1/+0 |
* | Revert "Reject empty database yamls" | eileencodes | 2018-02-22 | 1 | -1/+1 |
* | Merge pull request #32018 from rails/add-nonce-support-to-csp | Andrew White | 2018-02-22 | 1 | -37/+38 |
|\ |
|
| * | Add support for automatic nonce generation for Rails UJS | Andrew White | 2018-02-19 | 1 | -37/+38 |
* | | Reject empty database yamls | eileencodes | 2018-02-22 | 1 | -1/+1 |
* | | Merge pull request #32075 from eileencodes/delete-default-configuration | Eileen M. Uchitelle | 2018-02-21 | 1 | -0/+1 |
|\ \
| |/
|/| |
|
| * | Delete default configuration | eileencodes | 2018-02-21 | 1 | -0/+1 |
* | | Don't accidentally create an empty CSP | Andrew White | 2018-02-19 | 1 | -1/+5 |
* | | Multipart file uploads are very rare in API only apps so don't include Rack::... | Guillermo Iguaran | 2018-02-17 | 1 | -1/+2 |
|/ |
|
* | Do not update `load_defaults` version when running `app:update` (#31951) | Yuji Yaginuma | 2018-02-13 | 1 | -1/+4 |
* | Fix `RuntimeError: Unknown version "6.0"` | Yuji Yaginuma | 2018-01-31 | 1 | -0/+3 |
* | Add Rack::TempfileReaper to the default middleware stack | George Claghorn | 2018-01-30 | 1 | -0/+1 |
* | Use SHA-1 for non-sensitive digests by default | Eugene Kenny | 2018-01-08 | 1 | -0/+1 |
* | Clarify that config.eager_load controls eager loading [ci skip] | Eugene Kenny | 2017-12-30 | 1 | -1/+1 |
* | Raise an error only when `require_master_key` is specified | yuuji.yaginuma | 2017-12-18 | 1 | -1/+3 |
* | Make form_with_generates_ids default value to be false | Rafael Mendonça França | 2017-11-27 | 1 | -4/+0 |
* | Add DSL for configuring Content-Security-Policy header | Andrew White | 2017-11-27 | 2 | -33/+43 |
* | Remove duplicated `form_with_generates_remote_forms` setting | yuuji.yaginuma | 2017-11-26 | 1 | -1/+0 |
* | Make form_with_generates_ids default in Rails 5.2 | Rafael Mendonça França | 2017-11-25 | 1 | -2/+7 |
* | Change `form_with` to generates ids by default | npezza93 | 2017-11-25 | 1 | -0/+1 |
* | [Railties] require_relative => require | Akira Matsuda | 2017-10-21 | 2 | -3/+3 |
* | Use tt in doc for railties [skip ci] | Yoshiyuki Hirano | 2017-08-27 | 1 | -1/+1 |
* | Adding frozen_string_literal pragma to Railties. | Pat Allan | 2017-08-14 | 5 | -0/+10 |
* | Change sqlite3 boolean serialization to use 1 and 0 | Lisa Ugray | 2017-07-11 | 1 | -0/+4 |
* | Protect from forgery by default | Lisa Ugray | 2017-07-10 | 1 | -0/+4 |
* | [Railties] require => require_relative | Akira Matsuda | 2017-07-01 | 2 | -3/+3 |
* | Remove unnecessary `tap` call on `ActionDispatch::MiddlewareStack` instance | fatkodima | 2017-06-24 | 1 | -1/+1 |
* | set message_encryptor default cipher to aes-256-gcm | Assain | 2017-06-12 | 1 | -0/+4 |
* | AEAD encrypted cookies and sessions | Michael Coyne | 2017-05-22 | 1 | -0/+4 |
* | Use recyclable cache keys (#29092) | David Heinemeier Hansson | 2017-05-18 | 1 | -0/+8 |
* | Added a shared section to config/database.yml that will be loaded for all env... | Pierre Schambacher | 2017-04-26 | 1 | -1/+8 |