Aaron Patterson eb69ad2155 * Do not convert digest auth strings to symbols. CVE-2012-3424

2012-07-26 13:31:12 -07:00

..

compatibility.rb

More updates to ivars list.

2011-05-06 14:57:25 +02:00

conditional_get.rb

Fix small typo in documentation

2010-10-12 22:55:19 +03:00

cookies.rb

Rename config.cookie_secret to config.secret_token and pass it as configuration in request.env. This is another step forward removing global configuration.

2010-04-05 12:00:24 +02:00

data_streaming.rb

status is a number in Rails 3

2011-10-14 22:29:44 +05:30

exceptions.rb

Remove fancy method not allowed resource exceptions since they are

2009-12-11 00:01:22 -06:00

flash.rb

Move Flash into middleware

2010-01-15 14:55:13 -06:00

force_ssl.rb

Add controller-specific force_ssl method to force web browser to use HTTPS protocol

2011-03-28 04:58:47 +08:00

head.rb

Add ActionController#head example

2011-10-14 22:29:44 +05:30

helpers.rb

Make ActionController::Base.modules_for_helpers and ActionController::Base.all_helpers_from_path public methods

2011-04-25 15:02:41 +02:00

hide_actions.rb

cleanup of ActionController::Metal inline documentation

2010-08-26 22:32:40 +02:00

http_authentication.rb

* Do not convert digest auth strings to symbols. CVE-2012-3424

2012-07-26 13:31:12 -07:00

implicit_render.rb

Revert to old semantics, use available_action? instead of action_method?.

2011-05-06 18:44:18 +02:00

instrumentation.rb

don't raise an exception if the format isn't recognized

2011-05-27 07:50:44 +02:00

mime_responds.rb

Add missing dependency.

2011-04-18 08:13:28 +02:00

params_wrapper.rb

doc fixes

2011-09-01 03:47:13 +05:30

rack_delegation.rb

Remove a relic of #request being in RackDelegation

2010-06-19 08:19:15 -07:00

redirecting.rb

Merge pull request #5456 from brianmario/redirect-sanitization

2012-03-15 14:58:49 -07:00

renderers.rb

Slightly reorganize rendering stack.

2011-04-18 08:12:51 +02:00

rendering.rb

Do not inherit from Rack::Response, remove a shit-ton of unused code.

2011-04-19 11:54:12 +02:00

request_forgery_protection.rb

Changed a few instances of of words in the API docs written in British English to

2011-07-24 21:10:51 +02:00

rescue.rb

Remove unused orig_handler and unneeded parentheses

2010-07-20 04:32:08 +08:00

responder.rb

search private / protected methods in trunk ruby

2012-02-20 11:04:27 -08:00

session_management.rb

Deprecated ActionController::Base.session_options= and ActionController::Base.session_store= in favor of a config.session_store method (which takes params) and a config.cookie_secret variable, which is used in various secret scenarios. The old AC::Base options will continue to work with deprecation warnings.

2010-03-04 16:05:52 -08:00

streaming.rb

Deprecate stream at the class level.

2011-07-06 20:33:01 -03:00

testing.rb

modified fix #1872 according to jose valim´s suggestions

2011-08-01 11:28:31 +02:00

url_for.rb

deletes spurious arrow

2011-08-27 15:35:15 -07:00