295 Commits

Author SHA1 Message Date
Francis
82c288c91e Following recommendations from the OWASP
https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet

Should be tested with
http://ha.ckers.org/xss.html

Make sure your pages are utf8!
2011-05-07 22:47:35 -07:00
Corban Brook
9d5308b1ab Pass options to the coll.add call in Collection::create so that it can work silently. 2011-05-05 15:15:16 -04:00
Jeremy Ashkenas
82e0b34ada Merge pull request #267 from jasondavies/master.
Don't set content type header for GET requests
2011-05-01 06:48:17 -07:00
Damien Holzapfel
7afd43c0ef Reference calls variable in list variable definition in Backbone.Events.bind 2011-04-27 10:38:13 -07:00
Samuel Clay
ee215be027 Adding test for hashbang URLs. For pull request #312. 2011-04-22 12:16:17 -04:00
Samuel Clay
0cc8cb0890 Merge https://github.com/ptn/backbone 2011-04-22 11:52:38 -04:00
Samuel Clay
577758af89 Adding XHR object to Collection.create (which comes from Model.save). 2011-04-22 11:41:30 -04:00
Samuel Clay
399e7453f3 _ to status in Model.parse. No need to clobber Underscore.js just to ignore a parameter. 2011-04-22 11:32:57 -04:00
Samuel Clay
4881621a72 Adding XHR object to Model.parse and Collection.parse method signatures. jQuery and Zepto use the same callback signature: response, status, xhr. 2011-04-22 11:25:50 -04:00
Samuel Clay
1d4484d1e4 Removing Ender.js support for the time being, as it needs to fix its AJAX methods to corrospond with jQuery/Zepto success/error signatures. 2011-04-22 11:06:50 -04:00
Pablo A. Torres Navarrete
1598801f23 Pass the error and success callbacks when creating the model to add to a Collection 2011-04-21 11:29:55 -05:00
Jeremy Ashkenas
222d673dcc Issue #289. Enable the use of jQuery.Deferred by returning Deferred objects from save() and fetch() calls. 2011-04-18 17:08:34 -04:00
Jeremy Ashkenas
37ddad508d Issue #309, more sophisticated event handling, for unbinding events in the midst of them firing. 2011-04-18 16:39:26 -04:00
Jeremy Ashkenas
76b3ed1fb4 Merge branch 'fix_custom_events_on_models_inside_collections' of https://github.com/autohaus24/backbone 2011-04-18 10:42:52 -04:00
Jeremy Ashkenas
4070364e4d merging in Ender.js support 2011-04-18 09:34:51 -04:00
Vladimir Dronnikov
94edc63f20 ender.js support 2011-04-15 21:25:38 +04:00
Jacek Becela
1499d755b6 Check for model before accessing its properties, fixes #319 2011-04-15 09:34:18 +02:00
Brandon Leonardo
21fa0aa6a2 change hashStrip regex to strip bang as well, so hash-bang urls will work transparently 2011-04-11 01:49:19 -07:00
Samuel Clay
67d61fc355 Adding Backbone.noConflict() and keeping track of the original root.Backbone. 2011-03-23 14:08:37 -04:00
Jeremy Ashkenas
da52ae1c43 Merge branch 'fix-comment' of https://github.com/jimmydo/backbone 2011-03-21 11:00:14 -04:00
Jeremy Ashkenas
d149451fd4 Issue #278. Allow 'extend' to be overrideable+inheritable. 2011-03-21 10:28:22 -04:00
Jimmy Do
7ceab2ca63 Fix incorrect prototype.constructor comment
prototype.constructor does not affect instanceof
2011-03-17 14:14:18 -07:00
Jason Davies
ee2ec9213e Fix typo 2011-03-09 18:37:48 +00:00
Jason Davies
83250a5a62 Only set request content type for create/update 2011-03-09 18:35:26 +00:00
Dmitry Baranovskiy
0cdc525961 Fixed escapeHTML function
to skip not only &***;, but also &#***; and &x***;
2011-03-02 08:12:24 +11:00
Jeremy Ashkenas
7216d99350 merged gh-pages in. 2011-02-28 10:06:56 -05:00
Raimonds Simanovskis
5a89ed3272 destroy of non-persisted model should not call sync 2011-02-15 15:17:20 +02:00
Jeremy Ashkenas
ce059570c2 .get -> .escape in the docs 2011-02-14 15:43:07 -05:00
Jeremy Ashkenas
a5079aba1c merging #179 + refactor, view 'attributes' for this.el 2011-02-07 16:10:08 -05:00
Jeremy Ashkenas
512ff7e728 Merge branch 'master' of https://github.com/hippich/backbone 2011-02-07 16:02:14 -05:00
Johannes J. Schmidt
aab49ebded encodeURIComponent this.id
in Backbone.Model.prototype.url
2011-02-07 15:00:07 -05:00
Jeremy Ashkenas
c6d2c69d82 ditto 2011-02-07 14:49:56 -05:00
Jeremy Ashkenas
c5160fca23 fixing lingering idAttribute spot -- thanks, jdknezek 2011-02-07 14:37:07 -05:00
Jeremy Ashkenas
b86d3f6afc Issue #209 ... unsetting a missing attribute should not fire a change event. 2011-02-07 14:16:31 -05:00
Jeremy Ashkenas
1a9404cfe8 Initial support for models with non-default id attribute names (MongoDB, CouchDB). Various tickets. 2011-02-07 13:59:52 -05:00
Jeremy Ashkenas
164ad725c7 Upgrading Backbone.js (test) dependencies to latest jQuery, Zepto, and Underscore. 2011-02-07 11:50:22 -05:00
Jeremy Ashkenas
ac8c3dd9db Changing route order behavior. Issue #189. Declarative route maps are the same, procedural route() calls can now override previously-defined routes. 2011-02-07 11:10:56 -05:00
Jeremy Ashkenas
ec6842009c Merging in #167, unsetting 'id' 2011-02-07 10:34:42 -05:00
Jeremy Ashkenas
0383ef78c6 Merge branch 'unset_id' of https://github.com/reverie/backbone 2011-02-07 10:31:41 -05:00
Jeremy Ashkenas
7d4d527c8c No periods on errors. 2011-02-07 10:28:39 -05:00
Jeremy Ashkenas
f1e0f6b5c1 Throw an error if Backbone.history.start is called twice. 2011-02-07 10:28:13 -05:00
Jeremy Ashkenas
1944234c74 Merge branch 'master' of https://github.com/jed/backbone 2011-02-07 10:18:05 -05:00
Jeremy Ashkenas
4c41ea7c7d Merging issue #216 (+ others) validation on Collection#create. 2011-02-06 08:48:38 -05:00
Kris Jordan
7442f826f1 Forcing Collection.create to run through validation before saving. 2011-02-06 01:13:52 -05:00
Jed Schmidt
e398583d38 keep custom sync methods for a given model/collection scoped to this. 2011-02-03 20:25:12 -08:00
Joshua Peek
14000a8bb9 Improve multiple collection support
Preserve original model collection when adding/removing from another collection
Destroying a model removes it from all collections
2011-01-22 10:15:51 -06:00
Pavel Karoukin
ece686de1a Merge branch 'master' of https://github.com/documentcloud/backbone 2011-01-11 16:36:52 -06:00
Jeremy Ashkenas
39cabb8ac8 Merge branch 'master' of github.com:documentcloud/backbone 2011-01-11 12:58:23 -05:00
Jeremy Ashkenas
289d4e0066 Model::escape() now coerces non-string (non-falsy) values to strings before escaping them. 2011-01-11 12:58:15 -05:00
Pavel Karoukin
c3da552f3b Add attributes parameter to Backbone.View. All attributes are being applied to view's this.el during element creation. 2011-01-10 23:06:24 -06:00