Santiago Pastorino d0c9759d3a html_escape should escape single quotes ...

https://www.owasp.org/index.php/XSS_%28Cross_Site_Scripting%29_Prevention_Cheat_Sheet#RULE_.231_-_HTML_Escape_Before_Inserting_Untrusted_Data_into_HTML_Element_Content
Closes #7215

2012-08-06 21:39:35 -03:00

..

controller_fixtures

New routes implementation. Simpler, faster, easier to understand. The published API for config/routes.rb is unchanged, but nearly everything else is different, so expect breakage in plugins and libs that try to fiddle with routes.

2006-06-01 15:42:08 +00:00

deprecation

Extract ActionController rescue templates into Rescue and ShowExceptions middleware.

2009-05-02 23:02:22 -05:00

new_base

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

request

cleaning up some warnings on 1.9.3

2011-02-07 16:44:27 -08:00

action_pack_assertions_test.rb

fix warning during test execution

2010-11-17 20:19:07 -02:00

addresses_render_test.rb

Fix isolated running of AddressesTest

2009-09-06 21:42:05 -05:00

assert_select_test.rb

fix assert_select_email to work on non-multipart emails as well as converting the Mail::Body to a string to prevent errors.

2011-09-07 17:15:58 -05:00

base_test.rb

Removed deprecated RouteSet API, still many tests fail

2010-09-05 13:44:36 +02:00

caching_test.rb

Ensure that the format isn't applied twice to the cache key, else it becomes impossible to target with expire_action.

2011-10-31 15:17:46 -04:00

capture_test.rb

Test correct method behaviour.

2010-09-29 12:42:51 -03:00

content_type_test.rb

removes the RJS template handler

2011-04-13 13:23:18 +02:00

default_url_options_with_filter_test.rb

modified fix #1872 according to jose valim´s suggestions

2011-08-01 11:28:31 +02:00

filters_test.rb

Tests only after filters in cache sweepers

2011-06-23 17:56:37 +02:00

flash_hash_test.rb

many args does not make sense with the current implementation because of how use works

2011-04-06 18:13:16 -07:00

flash_test.rb

Don't reuse a closed flash when using now

2011-04-20 04:32:26 +08:00

force_ssl_test.rb

Add controller-specific force_ssl method to force web browser to use HTTPS protocol

2011-03-28 04:58:47 +08:00

helper_test.rb

Cleanup deprecation warnings in Action Controller

2010-09-06 13:40:45 +02:00

http_basic_authentication_test.rb

Eliminate newlines in basic auth. fixes #2882

2011-09-06 17:25:30 -07:00

http_digest_authentication_test.rb

Fix http digest authentication with trailing '/' or '?' (fixes #4038 and #3228)

2012-01-10 04:55:00 +01:00

http_token_authentication_test.rb

Deletes trailing whitespaces (over text files only find * -type f -exec sed 's/[ \t]*$//' -i {} \;)

2010-08-14 04:12:33 -03:00

integration_test.rb

Refactor the handling of default_url_options in integration tests

2012-05-10 21:33:31 +01:00

layout_test.rb

Deprecate old template handler API. Remove old handlers.

2010-10-10 01:14:50 +02:00

localized_templates_test.rb

Fixed that default locale templates should be used if the current locale template is missing [DHH]

2010-04-08 18:11:26 -07:00

log_subscriber_test.rb

Ensure that status codes are logged properly

2011-07-18 15:32:57 -04:00

mime_responds_test.rb

Test fix failing in 1.8.7-p358

2012-03-07 18:27:58 +05:30

output_escaping_test.rb

code gardening: we have assert_(nil|blank|present), more concise, with better default failure messages - let's use them

2010-08-17 03:32:11 +02:00

params_wrapper_test.rb

Use lazy load hooks to set parameter wrapping configuration. This means that it doesn't force Action Controller / Active Record to load, but it doesn't fail if they have already loaded. Thanks @josevalim for the hint.

2011-08-16 19:14:35 +01:00

record_identifier_test.rb

moving fake model to the correct file

2010-10-03 14:40:06 -07:00

redirect_test.rb

Merge pull request #5457 from brianmario/typo-fix

2012-03-15 15:22:56 -07:00

render_js_test.rb

removes support for render :update

2011-04-13 13:23:17 +02:00

render_json_test.rb

render_to_string must ensure that response_body

2011-01-25 20:14:03 +01:00

render_other_test.rb

removes support for render :update

2011-04-13 13:23:17 +02:00

render_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

render_xml_test.rb

Removed deprecated RouteSet API, still many tests fail

2010-09-05 13:44:36 +02:00

request_forgery_protection_test.rb

Replace references to ActiveSupport::SecureRandom with just SecureRandom, and require 'securerandom' from the stdlib when active support is required.

2011-05-23 20:24:44 +01:00

rescue_test.rb

removing more duplicate code

2010-10-01 18:05:59 -07:00

resources_test.rb

There is no need to be destructive with the passed-in options.

2011-07-28 20:18:45 +02:00

routing_test.rb

adding a test for #6459

2012-06-14 10:55:30 -07:00

runner_test.rb

adding a test for the runner module [#6027 state:resolved]

2010-11-22 15:57:03 -08:00

selector_test.rb

Rename duplicated test name.

2010-09-27 11:19:24 -03:00

send_file_test.rb

Use assert_respond_to because it has better error messaging

2010-05-18 02:12:06 +02:00

test_test.rb

Don't convert params if the request isn't HTML - fixes #5341

2012-04-29 10:52:59 +01:00

url_for_test.rb

:subdomain can now be specified with a value of false in url_for,

2012-04-01 00:16:38 +05:30

url_rewriter_test.rb

Removed deprecated RouteSet API, still many tests fail

2010-09-05 13:44:36 +02:00

view_paths_test.rb

controller's prefixes are now added to LookupContext.

2011-05-03 23:41:38 +02:00

webservice_test.rb

use spec compliant YAML

2011-01-21 15:43:34 -08:00