Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Remove default match without specified method | Jose and Yehuda | 2012-04-24 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | In the current router DSL, using the +match+ DSL method will match all verbs for the path to the specified endpoint. In the vast majority of cases, people are currently using +match+ when they actually mean +get+. This introduces security implications. This commit disallows calling +match+ without an HTTP verb constraint by default. To explicitly match all verbs, this commit also adds a :via => :all option to +match+. Closes #5964 | ||||
* | Freeze the middleware stack after it's built | Jeremy Kemper | 2012-04-20 | 1 | -17/+18 |
| | | | | | | So apps that accidentally add middlewares later aren't unwittingly dumping them in a black hole. Closes #5911 | ||||
* | convert railties to use AS::TestCase | Aaron Patterson | 2012-01-05 | 1 | -1/+1 |
| | |||||
* | don't encode an UTF-8 encoded template | Xu Pan | 2011-12-20 | 1 | -1/+2 |
| | |||||
* | Show detailed exceptions no longer returns true if the request is local in ↵ | José Valim | 2011-12-16 | 1 | -0/+1 |
| | | | | production. | ||||
* | Improve the specs on exceptions app. | José Valim | 2011-12-16 | 1 | -1/+1 |
| | |||||
* | Allow a custom exceptions app to set. | José Valim | 2011-12-16 | 1 | -0/+14 |
| | |||||
* | Fix diagnostics page for routing errors. | José Valim | 2011-12-15 | 1 | -2/+13 |
| | |||||
* | Split ShowExceptions responsibilities in two middlewares. | José Valim | 2011-12-01 | 1 | -0/+89 |