David Heinemeier Hansson
|
82c1fed89f
|
Protect button_to behind protect_from_forgery (closes #9675) [lifo]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7636 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-25 16:50:35 +00:00 |
|
David Heinemeier Hansson
|
e70bb8031f
|
Stop rdoc from whining
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7622 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 23:01:50 +00:00 |
|
Jeremy Kemper
|
40f9fd39f6
|
Include asset host in public path cache key. Clear cache between asset tag tests.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7617 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 19:47:45 +00:00 |
|
Jeremy Kemper
|
7f9a6c0d92
|
Cache computed public asset paths.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7611 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 09:18:30 +00:00 |
|
Jeremy Kemper
|
8db51ee3c0
|
Cache more file existence checks. Flip-flop escaping.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7610 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 08:26:04 +00:00 |
|
Jeremy Kemper
|
871b87a323
|
Cache file existence checks and the list of all stylesheet sources. Manually escape tag attributes.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7609 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 08:15:56 +00:00 |
|
Jeremy Kemper
|
4b33306c70
|
The tag helper may bypass escaping.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7608 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 08:13:55 +00:00 |
|
Jeremy Kemper
|
38454983b4
|
Cache asset ids.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7607 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 06:25:13 +00:00 |
|
Jeremy Kemper
|
e711d8fade
|
escape_once uses negative lookahead to avoid double-escaping instead of a second gsub
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7606 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-24 05:43:59 +00:00 |
|
Rick Olson
|
c619003854
|
Rename some RequestForgeryProtection methods. The class method is now #protect_from_forgery, and the default parameter is now 'authenticity_token'. [Rick]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7596 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-23 18:14:44 +00:00 |
|
Rick Olson
|
da0725aae3
|
move TextHelper#sanitize config options to the TextHelper module so it can be included and used with any class, not just ActionView::Base
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7595 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-23 18:09:46 +00:00 |
|
Rick Olson
|
4e3ed5bc44
|
Merge csrf_killer plugin into rails. Adds RequestForgeryProtection model that verifies session-specific _tokens for non-GET requests. [Rick]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7592 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-23 02:32:55 +00:00 |
|
Rick Olson
|
2d02199e15
|
Secure #sanitize, #strip_tags, and #strip_links helpers against xss attacks. Closes #8877. [Rick, lifofifo, Jacques Distler]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7589 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-23 00:11:08 +00:00 |
|
David Heinemeier Hansson
|
da5d8fa6ad
|
Fixed JavaScriptHelper#escape_javascript to also escape closing tags (closes #8023) [rubyruy]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7567 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-22 18:31:44 +00:00 |
|
David Heinemeier Hansson
|
9686dcdb5b
|
Fixed TextHelper#word_wrap for multiline strings with extra carrier returns (closes #8663) [seth]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7562 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-22 18:21:54 +00:00 |
|
David Heinemeier Hansson
|
2f8146bc5e
|
Use rel="stylesheet" in lowercase as prescribed by XHTML standards (closes #8910) [RSL]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7558 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-22 18:01:54 +00:00 |
|
David Heinemeier Hansson
|
ecceb87358
|
Doc fix (closes #9414) [Henrik N]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7548 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-22 17:38:48 +00:00 |
|
David Heinemeier Hansson
|
39de84d967
|
Fixed that setting the :host option in url_for would automatically turn off :only_path (since :host would otherwise not be shown) (closes #9586) [Bounga]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7542 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-22 17:19:26 +00:00 |
|
David Heinemeier Hansson
|
a7764d8fd4
|
Added FormHelper#label (closes #8641) [jcoglan]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7541 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-22 17:17:22 +00:00 |
|
David Heinemeier Hansson
|
8b2439e5e4
|
Added AtomFeedHelper (slightly improved from the atom_feed_helper plugin) [DHH]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7529 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-21 22:17:35 +00:00 |
|
David Heinemeier Hansson
|
4156497602
|
Fixed CaptureHelper#content_for to work with the optional content parameter instead of just the block #9434 [sandofsky/wildchild]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7522 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-21 03:40:25 +00:00 |
|
Jeremy Kemper
|
09e76e6aca
|
Autolink behaves well with emails embedded in URLs. Closes #7313.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7516 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-20 20:40:22 +00:00 |
|
Jeremy Kemper
|
835cb43745
|
Revert [7397]. Reopens #7313.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7515 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-20 08:27:45 +00:00 |
|
Jeremy Kemper
|
2f60bb3327
|
ERB::Util#html_escape creates fewer objects
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7513 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-18 11:56:04 +00:00 |
|
Jeremy Kemper
|
8fd263cd4e
|
tag_options creates fewer objects
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7512 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-18 10:55:15 +00:00 |
|
David Heinemeier Hansson
|
e71465bdaf
|
Avoid RDoc warning
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7495 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-15 23:56:06 +00:00 |
|
David Heinemeier Hansson
|
0b0931e150
|
Added block-acceptance to JavaScriptHelper#javascript_tag (closes #7527) [BobSilva/tarmo/rmm5t]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7485 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-15 21:34:25 +00:00 |
|
David Heinemeier Hansson
|
095f458b7a
|
Trips up the RDoc generation
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7470 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-13 19:12:36 +00:00 |
|
Michael Koziarski
|
8a7d73cf4d
|
Tidy up link to remote options. Closes #9505. [nik.wakelin]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7468 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-12 02:13:59 +00:00 |
|
Jeremy Kemper
|
9807b55c6b
|
Purge empty files
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7465 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-11 19:54:06 +00:00 |
|
David Heinemeier Hansson
|
bc290c083c
|
Moved ActionController::Macros::AutoComplete into the auto_complete plugin on the official Rails svn #9512 [lifofifo]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7450 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-11 02:57:19 +00:00 |
|
David Heinemeier Hansson
|
2807ccc69a
|
Moved ActionController::Macros::InPlaceEditing into the in_place_editor plugin on the official Rails svn (closes #9513) [lifofifo]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7442 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-10 00:53:13 +00:00 |
|
David Heinemeier Hansson
|
d66c9cba55
|
Removed the deprecated behavior of appending ".png" to image_tag/image_path calls without an existing extension [DHH]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7433 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-09 22:42:24 +00:00 |
|
David Heinemeier Hansson
|
c6c3fc42d8
|
Removed the deprecated behavior of appending ".png" to image_tag/image_path calls without an existing extension [DHH]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7432 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-09 22:41:45 +00:00 |
|
David Heinemeier Hansson
|
73c7083651
|
Rename fieldset_tag to field_set_tag to follow the conventions from text_area and text_field [DHH]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7423 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-09 15:58:12 +00:00 |
|
Michael Koziarski
|
0e6c8e5f6c
|
Add fieldset_tag for generating fieldsets, closes #9477. [djanowski]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7413 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-06 05:53:29 +00:00 |
|
Michael Koziarski
|
4917813439
|
Fix misleading documentation for truncate. [esad] Closes #9104
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7409 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-05 23:14:12 +00:00 |
|
Michael Koziarski
|
f81dae3fca
|
Remove deprecated functionality from actionpack. Closes #8958 [lifofifo]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7403 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-03 00:18:30 +00:00 |
|
Michael Koziarski
|
21837821a8
|
Add array support to remote_form_for for polymorphic urls. Closes #8654 [jade]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7400 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-02 23:53:31 +00:00 |
|
Michael Koziarski
|
a79ac12c4e
|
Make auto link behave well with URLs containing email addresses. Closes #7313 [jeremymcnally]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7397 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-02 23:52:01 +00:00 |
|
Michael Koziarski
|
bde8be41fb
|
Properly quote the arguments to visual_effect. Closes #7220 [jeremymcanally]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7396 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-09-02 23:51:27 +00:00 |
|
Michael Koziarski
|
b59e3d1897
|
Major improvement to the documentation for the options / select form helpers. Closes #9038 [kampers, jardeon, wesg]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7276 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-08-05 01:13:44 +00:00 |
|
Michael Koziarski
|
ab5e1f15a6
|
Fix number_to_human_size when using different precisions. Closes #7536. [RichardStrand, mpalmer]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7275 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-08-05 01:00:54 +00:00 |
|
David Heinemeier Hansson
|
bbbc45156b
|
Added partial layouts (see example in action_view/lib/partials.rb) [DHH]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7261 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-08-02 20:10:03 +00:00 |
|
David Heinemeier Hansson
|
edd68a587f
|
Refactored in use of extract_options! (closes #9079) [josh]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7220 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-07-24 16:48:57 +00:00 |
|
David Heinemeier Hansson
|
80150a0cfb
|
Its just ERb now
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7211 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-07-24 01:19:08 +00:00 |
|
Tobias Lütke
|
1241615692
|
Don't blow up when using nested fields_for and the source object is nil
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7168 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-07-09 16:19:40 +00:00 |
|
Rick Olson
|
a450e769f1
|
Allow you to render views with periods in the name. Closes #8076 [norbert]
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7158 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-07-01 00:04:03 +00:00 |
|
David Heinemeier Hansson
|
4d0780e9c7
|
Allow symbols as name
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7151 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-06-28 22:27:11 +00:00 |
|
Jeremy Kemper
|
dfc15e122a
|
Improve capture helper documentation. Closes #8796.
git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7148 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
|
2007-06-28 18:32:34 +00:00 |
|