Michael Koziarski d5a4095ca5 Deep Munge the parameters for GET and POST ...

The previous implementation of this functionality could be accidentally
subverted by instantiating a raw Rack::Request before the first Rails::Request
was constructed.

Fixes CVE-2013-6417

Conflicts:
	actionpack/lib/action_dispatch/http/request.rb

2013-12-02 14:14:35 -08:00

..

abstract

Add a test case for layout nil.

2011-12-20 14:56:18 +01:00

activerecord

Revert "Revert "Merge pull request #6084 from brainopia/support_for_magic_domain_on_all_stores""

2012-08-10 09:59:37 +04:00

controller

Backport #5808

2013-03-24 08:16:26 -04:00

dispatch

Deep Munge the parameters for GET and POST

2013-12-02 14:14:35 -08:00

fixtures

fix issue #11605

2013-08-24 15:24:36 -03:00

lib

Fix override API response bug in respond_with

2012-02-03 14:26:34 -05:00

template

Stop using i18n's built in HTML error handling.

2013-12-02 14:02:15 -08:00

tmp

Use safe tmp dir

2009-08-13 21:03:25 -05:00

abstract_unit.rb

Allow to use mounted helpers in ActionView::TestCase

2012-06-01 20:58:19 +02:00

active_record_unit.rb

Autoload AR test case

2010-01-04 16:50:01 -06:00

ts_isolated.rb

Give useful test:isolated failures

2009-11-04 12:44:06 -08:00