Santiago Pastorino 63e67ea1a6 Do not mark strip_tags result as html_safe ...

Thanks to Marek Labos & Nethemba

CVE-2012-3465

2012-08-09 15:58:33 -03:00

..

erb

Revert "Remove deprecated form_for with strings or symbols"

2010-11-18 20:22:14 +01:00

html-scanner

fixed build for ruby187-p358

2012-02-25 17:50:47 +05:30

testing

add NullResolver

2010-05-02 22:45:54 +02:00

active_model_helper_test.rb

Start cleanup of deprecations in ActionView

2010-09-06 13:42:46 +02:00

asset_tag_helper_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

atom_feed_helper_test.rb

Example Usage updated for actionpack and actionmailer.

2011-05-19 09:17:49 +05:30

capture_helper_test.rb

Never return stored content from content_for when a block is given

2011-09-01 15:06:15 +01:00

compiled_templates_test.rb

Deletes trailing whitespaces (over text files only find * -type f -exec sed 's/[ \t]*$//' -i {} \;)

2010-08-14 04:12:33 -03:00

date_helper_i18n_test.rb

These tests shouldn't depend on local time to pass or fail, we can use utc here.

2010-09-24 15:51:29 +02:00

date_helper_test.rb

Merge pull request #343 from asanghi/ampm

2011-05-07 06:31:18 -07:00

erb_util_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

form_helper_test.rb

Fix impractical I18n lookup in nested fields_for

2011-11-17 21:55:04 +06:00

form_options_helper_i18n_test.rb

Use helpers.label instead of views.labels.

2010-01-07 15:31:50 +01:00

form_options_helper_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

form_tag_helper_test.rb

escape select_tag :prompt values

2012-08-09 15:49:08 -03:00

javascript_helper_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

log_subscriber_test.rb

Remove more dependencies from the view.

2011-05-01 13:40:12 +02:00

lookup_context_test.rb

Merge pull request #420 from burke/master

2011-05-08 03:35:14 -07:00

number_helper_i18n_test.rb

Added :negative_format option to number_to_currency function [#5894 state:resolved]

2010-11-02 23:00:23 +00:00

number_helper_test.rb

Ensure number helpers can handle HTML safe strings - closes #1597.

2011-06-10 11:21:16 +01:00

output_buffer_test.rb

All tests pass without memoizing view_context

2010-03-18 15:52:43 -07:00

output_safety_helper_test.rb

Removed Array#safe_join in AS core_ext and moved it to a view helper with the same same. This also changes how safe_join works, if items or the separator are not html_safe they are html_escape'd, a html_safe string is always returned.

2011-02-10 16:51:30 +01:00

record_tag_helper_test.rb

Warnings removed unused variables. Please don't add them

2011-09-10 13:03:46 +05:30

render_test.rb

Warnings removed unused variables. Please don't add them

2011-09-10 13:03:46 +05:30

resolver_patterns_test.rb

[action_view] added custom patterns to template resolver

2011-03-20 07:01:46 +08:00

sanitize_helper_test.rb

Do not mark strip_tags result as html_safe

2012-08-09 15:58:33 -03:00

sprockets_helper_test.rb

Pass extensions to javascript_path and stylesheet_path helpers. Closes #3417

2012-01-03 17:52:00 -02:00

sprockets_helper_with_routes_test.rb

Merge pull request #3428 from adrianpike/asset_path_conflicts

2011-12-06 11:19:06 -02:00

streaming_render_test.rb

log errors when an exception happens when streaming.

2011-05-01 13:40:14 +02:00

tag_helper_test.rb

HTML5 data attribute helpers [#5825 state:resolved].

2010-10-18 11:18:42 +13:00

template_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00

test_case_test.rb

config should always be an AS::InheritableOptions object. Closes #1992

2011-07-08 21:44:31 -03:00

test_test.rb

Make polymorphic_url calls go through application helpers again.

2011-07-25 15:43:36 +02:00

text_helper_test.rb

Warnings removed unused variables. Please don't add them

2011-09-10 13:03:46 +05:30

translation_helper_test.rb

Don't html-escape the :count option to translate if it's a Numeric. Fixes #3685.

2011-11-19 13:29:12 +00:00

url_helper_test.rb

html_escape should escape single quotes

2012-08-06 21:39:35 -03:00