Michael Koziarski
dbbf2fd19c
Revert "Makes form_helper use overriden model accessors backport"
...
This change introduced breakages and test failures.
This reverts commit 8141f0894e .
2010-09-27 12:20:54 +13:00
W. Andrew Loe III
17f2fb44c0
Only send secure cookies over SSL.
2010-09-14 11:52:40 -07:00
Andrew Kaspick
a159fd0b8c
Fix fixtures in integration test sessions
...
Signed-off-by: Michael Koziarski <michael@koziarski.com >
2010-09-10 10:45:23 +12:00
Santiago Pastorino
43e2bbe28e
Making time_zone_options_for_select return a html_safe string master backport
2010-08-15 10:07:38 -03:00
Santiago Pastorino
8141f0894e
Makes form_helper use overriden model accessors backport
...
[#3374 ]
2010-08-01 19:49:45 -03:00
Jon Yurek
fb615cd7fd
Fix for integration tests not serializing arrays in multipart forms correctly.
...
Signed-off-by: wycats <wycats@gmail.com >
2010-07-17 13:01:50 -05:00
Michael Lovitt
257a29d3cc
Sessions should not be created until written to and session data should be destroyed on reset. [ #4938 state:resolved]
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-07-14 08:04:37 +02:00
Aaron Patterson
67e18c523c
fisting Session::AbstractStore#clear to actually clear the session. [ #5030 state:resolved]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-07-01 14:47:28 -07:00
Jan Berkel
f8f4872fcc
Backported patch from [ #4762 ]
...
URL fragments should not have safe characters escaped. Ref: Appendix A,
http://tools.ietf.org/rfc/rfc3986.txt
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-06-30 13:27:28 +02:00
Prem Sichanugrist
f8f365346e
Make sure that Rails doesn't resent session_id cookie over and over again if it's already there [ #2485 state:resolved]
...
This apply to only Active Record store and Memcached store, as they both store only the session_id, which will be unchanged, in the cookie.
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-06-25 09:47:56 +02:00
Michael Koziarski
cbf36cf57c
Revert "make text_field and hidden_field omit the value attribute if the developer explicitly passes in :value => nil [ #4839 state:reopened]"
...
This reverts commit 52c922fad1
2010-06-23 16:54:05 +12:00
Michael Koziarski
52c922fad1
make text_field and hidden_field omit the value attribute if the developer explicitly passes in :value => nil [ #4839 state:resolved]
...
Signed-off-by: Michael Koziarski <michael@koziarski.com >
Conflicts:
actionpack/lib/action_view/helpers/form_helper.rb
2010-06-23 16:25:19 +12:00
Jesse Storimer
85b6d79d8a
CookieStore should preserve the Set-Cookie header Array [ #4743 state:resolved]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-06-22 11:25:32 -07:00
Prem Sichanugrist
0f44d37d04
Make sure that rails recognized the full notation of IPv6 loopback address, and recognize 127.0.0.0/8 in IPv4
...
[#3257 state:resolved]
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-06-08 19:47:18 +02:00
Michael Koziarski
5796a92433
Merge commit 'mislav/auto_link_2-3-stable' into 2-3-stable
2010-05-29 14:05:21 +12:00
Jeremy Kemper
f7e27bd078
i18n: t() handles single keys returning an Array, also
2010-05-24 20:41:28 -07:00
Jeremy Kemper
6a9e188c0c
HTML safety: fix textarea with nil content
2010-05-24 20:13:07 -07:00
Santiago Pastorino
a9032c885f
Error messages for asserts
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-05-24 16:05:39 -07:00
Jeremy Kemper
e8ba5265e0
Work around strange Ruby 1.9 autoload issue by using absolute load paths for tests (ditto for other components' tests)
2010-05-24 16:05:34 -07:00
José Valim
50f3754525
Ensure translations work with symbols.
2010-05-24 23:38:49 +02:00
Santiago Pastorino
4986d5ed04
translate helper method using an array is deprecated
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-05-24 23:38:48 +02:00
Jeremy Kemper
9d3bd87045
Work around strange Ruby 1.9 autoload issue by using absolute load paths for tests
2010-05-24 12:16:33 -07:00
Santiago Pastorino
6b0616d1b8
translation method of TranslationHelper module returns a SafeBuffer Array backport
...
[#4675 state:committed]
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-05-24 20:56:44 +02:00
Santiago Pastorino
d3da1a2c66
Revert "translation method of TranslationHelper module returns always SafeBuffer [ #4194 status:resolved]"
...
This reverts commit 2310aef29b .
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-05-24 20:56:44 +02:00
Jeremy Kemper
c66013e2c5
Fix that captured content (e.g. with form_for or div_for) would be HTML-escaped even without the rails_xss plugin installed. Rails 2.3.7, we barely knew ya...
2010-05-24 09:12:00 -07:00
Lance Ivy
9e08e196fa
Ensure auto_link does not ignore multiple trailing punctuations
...
[#2504 state:resolved]
2010-05-24 11:47:36 +02:00
Mislav Marohnić
17b4fd25e4
avoid auto_linking already linked emails; more robust detection of linked URLs
...
References #1523 [#1862 state:resolved] [#3591 state:resolved]
Add test that shows how link text can contain HTML if needed:
the trick is using block form in combination with `raw`.
Let link text be automatically HTML-escaped
[#2017 state:resolved]
2010-05-24 11:18:20 +02:00
Mislav Marohnić
bd9ca9aed0
auto_link: support arbitrary URI schemes like "ftp:" and "file:"
...
recognizes all URI scheme allowed characters, such as colon and period.
[#3494 state:resolved]
2010-05-24 11:18:20 +02:00
Jeremy Kemper
ca5f5d97b9
Fix test rendering unmarked but safe HTML
2010-05-23 15:28:40 -07:00
Jeff Kreeftmeijer
2de364636c
partial counters with :as [ #2804 state:resolved]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-05-15 10:32:45 -07:00
Santiago Pastorino
adcfb4e8bd
simple_format should return html_safe but not escape text, that's for rails_xss plugin [ #3767 state:committed]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-05-07 11:56:53 -07:00
Jeremy Kemper
9e262de3d8
Fix backport error: wrong exception name
2010-04-24 19:38:10 -07:00
Cezary Baginski
ec7716abcd
actionpack: added missing encoding comments [ #4466 state:resolved]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-04-24 17:30:59 -07:00
Jeremy Kemper
f6e71c674c
Expect an incompatible encoding exception when a template with a magic comment renders a partial without one and its source encoding doesn't match the default external encoding
2010-04-24 17:12:05 -07:00
Jeremy Kemper
fb545f4c60
Expect an incompatible encoding exception when a template doesn't have a magic comment and its source encoding doesn't match the default external encoding
2010-04-24 17:12:00 -07:00
Jeremy Kemper
70034d820f
Ensure ERB source begins with the encoding comment
2010-04-24 17:04:50 -07:00
Jeremy Kemper
81e06075b7
Ruby 1.9: ERB template encoding using a magic comment at the top of the file
2010-04-24 17:01:52 -07:00
Vicki Ball
dae247316d
made error_message_on work by passing in the object name if there is no object [ #3246 state:resolved]
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-04-10 14:02:34 +02:00
Jeremy Kemper
2cd29f4297
Only set response etag if body is not blank
2010-04-09 20:19:03 -07:00
Jeremy Kemper
d91d6fe15f
CI: show all headers for diagnosis
2010-04-09 20:06:35 -07:00
Jeremy Kemper
56c5290fce
CI: message for some outstanding failures
2010-04-09 19:32:47 -07:00
Santiago Pastorino
958b0e977a
fix stack trace lines on class_eval
...
Signed-off-by: José Valim <jose.valim@gmail.com >
2010-04-09 22:06:51 +02:00
José Valim
f87a518f81
Fix tests broken in 0653a6d30e
2010-04-09 09:23:09 +02:00
David Heinemeier Hansson
0653a6d30e
Fixed that default locale templates should be used if the current locale template is missing [DHH]
2010-04-08 17:15:11 -07:00
Santiago Pastorino
cfb31edb54
Generate routes for nested resources with nil object raise RoutingError [ #4262 state:committed]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-04-06 21:28:51 -07:00
Jeremy Kemper
aa48c79ae4
HTML safety: give a deprecation warning if an array of option tags is passed to select tag. Be sure to join the tag yourself and mark them .html_safe
2010-03-31 19:49:29 -07:00
Bruno Michel
26f2cce232
button_to should generate an html_safe string
...
Signed-off-by: Michael Koziarski <michael@koziarski.com >
2010-03-22 14:07:42 +13:00
Santiago Pastorino
9cfa87519d
scope_key_by_partial fix for Ruby 1.9 when there's virtual_path
...
[#4202 state:committed]
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-03-16 16:05:24 -07:00
Santiago Pastorino
2310aef29b
translation method of TranslationHelper module returns always SafeBuffer [ #4194 status:resolved]
...
Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net >
2010-03-16 13:49:59 -07:00
Jeremy Kemper
9b209e8cb8
read_ and write_fragment cache preserve html safety yet cache strings only
2010-03-14 18:55:13 -07:00