Charlie Somerville
1a45ec57bf
CVE-2014-0130 protection
2014-05-09 23:55:20 +10:00
Charlie Somerville
76c5bf4f4b
instantiate the cached helper class instead of extending AV::B
2013-10-25 12:46:48 -04:00
Charlie Somerville
c8d7945ae4
delete render :update
2013-10-24 12:25:38 -04:00
Charlie Somerville
bf96f35248
we can used defined?() to check if a method is public or protected
2013-09-17 15:45:25 +10:00
Charlie Somerville
eefc42630f
restore 1.9.3 respond_to? behaviour when running on 1.9.3
2013-08-08 20:42:52 -07:00
Charlie Somerville
3aaacc67e8
fix actionpack test
2013-08-08 20:37:30 -07:00
Mikel Lindsaar
597fb1da94
Adding documentation to redirect_to and status code option references
2010-09-09 14:00:09 +10:00
Sam Ruby
cbc0201a3e
Add deprecation warning for overwrite_params and remove rdoc
...
[#4073 state:committed]
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-03-10 16:26:04 -08:00
David Heinemeier Hansson
e6cadd422b
Added :alert, :notice, and :flash as options to ActionController::Base#redirect_to that'll automatically set the proper flash before the redirection [DHH] Added ActionController::Base#notice/= and ActionController::Base#alert/= as a convenience accessors in both the controller and the view for flash[:notice]/= and flash[:alert]/= [DHH]
2009-12-17 11:34:47 -08:00
Nathaniel Talbott
ab9efe9e16
Fix filtering parameters when there are Fixnum or other un-dupable values.
...
[#3184 state:committed]
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2009-09-10 18:52:45 -07:00
Nick Quaranto and Josh Nichols
d39c45690e
Adding a deprecation warning for output.flush when rendering a proc or lambda
...
[#2893 state:committed]
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2009-08-08 17:23:40 -07:00
Sebastian Delmont
ead5d88bf1
Fix filter_parameter_logging of non-hash values within array params
...
Signed-off-by: Michael Koziarski <michael@koziarski.com >
[#2927 state:committed]
2009-07-23 09:33:29 +12:00
Michael Koziarski
9407f6e9a4
Make filter_parameters work correctly with array parameters.
...
Conflicts:
actionpack/lib/action_controller/base/filter_parameter_logging.rb
2009-06-27 13:11:01 +12:00
rick
d052e9fb58
Add pluggable JSON backends with support for the JSON gem.
...
Example: ActiveSupport::JSON.backend = "JSONGem"
All internal Rails JSON encoding is now handled by
ActiveSupport::JSON.encode(). Use of #to_json is not recommended, as it
may clash with other libraries that overwrite it. However, you can
recover Rails specific functionality
if you really want to use #to_json.
gem 'json'
ActiveSupport::JSON.backend = "JSONGem"
class ActiveRecord::Base
alias to_json rails_to_json
end
2009-05-17 18:40:38 -07:00
Jeremy Kemper
a5ed7eede6
Missed commit for 7c4b325e0a
2009-04-30 16:49:34 -07:00
Joshua Peek
ea8488caef
Fixed simplified render with nested models [ #2042 state:resolved]
2009-03-07 14:05:18 -06:00
Johan Sørensen
c071123b3e
Ensure expires_in without a :public key sets the Cache-Control header to private. [ #2095 state:resolved]
...
This fixes a regression introduced in f2a32bd0 , which wasn't exposed due to two
test methods having the same name.
Signed-off-by: Pratik Naik <pratiknaik@gmail.com >
2009-03-07 12:18:10 +00:00
thedarkone
3191535ff0
Fix layouts with absolute paths [ #2134 state:resolved]
...
Signed-off-by: Joshua Peek <josh@joshpeek.com >
2009-03-05 18:49:22 -06:00
David Heinemeier Hansson
b1c989f28d
Fixed that redirection would just log the options, not the final url (which lead to "Redirected to #<Post:0x23150b8>") [DHH]
2009-03-05 12:22:49 +01:00
Gregg Pollack
f2a32bd0de
Added ability to pass in :public => true to fresh_when, stale?, and expires_in to make the request proxy cachable [ #2095 state:committed]
...
Signed-off-by: David Heinemeier Hansson <david@loudthinking.com >
2009-02-28 10:33:42 +01:00
David Heinemeier Hansson
6de83562f9
Force all internal calls to Array#to_sentence to use English [ #2010 state:resolved]
2009-02-27 14:22:39 +01:00
Pratik Naik
53cd102b39
Merge with docrails
2009-02-24 12:29:25 +00:00
Sven Fuchs
0cb020b4d6
workaround for picking layouts based on wrong view_paths [ #1974 state:resolved]
...
Signed-off-by: Joshua Peek <josh@joshpeek.com >
2009-02-14 18:22:41 -06:00
Gregg Kellogg
306cc2b920
Implement HTTP Digest authentication. [ #1230 state:resolved] [Gregg Kellogg, Pratik Naik]
...
Signed-off-by: Pratik Naik <pratiknaik@gmail.com >
2009-01-29 16:01:59 +00:00
Joshua Peek
f17c87665e
Fixed deprecated methods on TestSession [ #1801 state:resolved]
2009-01-27 12:28:05 -06:00
Pratik Naik
9cefd5ea0c
Deprecate ActionController::Base#session_enabled?
2009-01-19 18:53:14 +00:00
Joshua Peek
ff0a2678c4
Build query string and POST params parser on top of Rack::Request. Also switch our multipart parser to use Racks. Moved XML, JSON, and YAML parsers into ActionController::ParamsParser middleware [ #1661 state:resolved]
2009-01-17 20:29:50 -06:00
Jeremy Kemper
8736dd3241
Fix failing flash test
2009-01-06 16:57:41 -08:00
Joshua Peek
f00e86d7e9
Memoize request accessors on the Rack env so other request objects have access to the same cache [ #1668 state:resolved]
2009-01-04 12:15:15 -06:00
Jeremy Kemper
2e1132fad8
Test that exceptions raised in filters are properly rescued
2008-12-30 18:06:56 -08:00
Joshua Peek
558ab327b7
Clean up view path cruft and split path implementations into Template::Path and Template::EagerPath
2008-12-29 19:27:19 -06:00
Joshua Peek
5d89605c11
Make router and controller classes better rack citizens
2008-12-28 15:31:03 -06:00
Pratik Naik
07298fd092
Don't recurse when ActionController#render is called without any arguments
2008-12-26 01:49:14 +00:00
Pratik Naik
80307c8b0a
Make ActionController#render(symbol) behave same as ActionController#render(string) [ #1435 ]
2008-12-26 01:12:11 +00:00
Pratik Naik
cd1d6e8768
Make ActionController#render(string) work as a shortcut for render :action => string. [ #1435 ]
...
Examples:
# Instead of render(:action => 'other_action')
render('other_action')
Note : Argument must not have any '/'
2008-12-25 23:05:34 +00:00
Pratik Naik
d67e03871e
Make ActionController#render(string) work as a shortcut for render :template => string. [ #1435 ]
...
Examples:
# Instead of render(:template => 'controller/action')
render('controller/action')
Note : Argument must not begin with a '/', but have at least one '/'
2008-12-25 22:26:03 +00:00
Pratik Naik
061952392a
Make ActionController#render(string) work as a shortcut for render :file => string. [ #1435 ]
...
Examples:
# Instead of render(:file => '/Users/lifo/home.html.erb')
render('/Users/lifo/home.html.erb')
Note : Filename must begin with a forward slash ('/')
2008-12-25 21:43:07 +00:00
Pratik Naik
dd0753458f
Move ActionController::Base#render arguments validation to a separate method
2008-12-25 20:49:31 +00:00
Joshua Peek
858a420ce1
Ensure the template format is always passed to the template finder. Now we can cleanup some nasty stuff.
2008-12-21 17:24:16 -06:00
Joshua Peek
3b317b7100
Switch to Rack::Response#set_cookie instead of using CGI::Cookie to build cookie headers
2008-12-20 21:25:47 -06:00
Joshua Peek
3da1b94d07
Use status response accessor instead of the 'Status' header
2008-12-19 15:05:51 -06:00
Joshua Peek
246b582ddf
Remove CGI::Session memory leak patch
2008-12-16 19:56:09 -06:00
Joshua Peek
ed70830713
Switch to Rack based session stores.
2008-12-15 16:33:31 -06:00
Frederick Cheung
5ede4ce188
Fixed session related memory leak [ #1558 state:resolved]
...
Signed-off-by: Joshua Peek <josh@joshpeek.com >
2008-12-11 10:20:33 -06:00
Darren Boyd
0a4a5f3129
Making the IP Spoofing check in AbstractRequest#remote_ip configurable.
...
Certain groups of web proxies do not set these values properly. Notably,
proxies for cell phones, which often do not set the remote IP information
correctly (not surprisingly, since the clients do not have an IP address).
Allowing this to be configurable makes it possible for developers to choose
to ignore this simple spoofing check, when a significant amount of their
traffic would result in false positives anyway.
Signed-off-by: Michael Koziarski <michael@koziarski.com >
[#1200 state:committed]
2008-12-01 20:40:18 +01:00
Joshua Peek
9fc23745f1
Reinstate "Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache." as it killed dev mode reloading."
2008-11-28 11:18:28 -06:00
David Heinemeier Hansson
5fa0457542
Revert "Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache." as it killed dev mode reloading.
...
This reverts commit 4d910b0333 .
2008-11-27 21:04:24 +01:00
Joshua Peek
4d910b0333
Super lazy load view paths in development mode (no indexing or caching at all). Switch layout finders to use view path api to take advantage of cache.
2008-11-26 20:54:47 -06:00
Joshua Peek
759183c822
Ensure ActionView will be available to ActionMailer if ActionController is not loaded
2008-11-25 10:38:20 -06:00
Jeremy Kemper
fb4bb93d43
Drop unneeded drb require
2008-11-23 18:29:38 -08:00