5 Commits

Author	SHA1	Message	Date
Chris Hapgood	d36f8a2bf2	Share ActionView::TestCase's output_buffer with view for concat support. ... [#3467 state:resolved] Signed-off-by: Eloy Duran <eloy.de.enige@gmail.com>	2009-11-07 00:15:11 +01:00
Chris Hapgood	df9a47e4b8	Make some assertions in the ActionView::TestCase tests actually do something. ... [#3468 state:resolved] Signed-off-by: Eloy Duran <eloy.de.enige@gmail.com>	2009-11-06 23:59:45 +01:00
Michael Koziarski	80da8eb43d	Merge the prerequisites for on-by-default XSS escaping into rails. ... This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) Note, this does *not* give you on-by-default XSS escaping in 2.3 applications. To get that you'll need to install a plugin: http://github.com/nzkoz/rails_xss	2009-10-08 13:59:21 +13:00
Eloy Duran	cddd4746f9	Rewrote ActionView::TestCase. ... The test case now mimicks the template environment more closely, so it's possible to use render, load helper dependencies. This also fixes assert_select, and similar assertions. Because view tests and helpers generally don't render full templates assert_select looks first in rendered and then in output_buffer to find the rendered output.	2009-09-25 15:51:27 +02:00
Dan Pickett	38412ecb5d	Fixed ActionView::TestCase current url context [#1561 state:resolved] ... Signed-off-by: Joshua Peek <josh@joshpeek.com>	2008-12-15 11:47:39 -06:00