Ernie Miller 8355abf153 Additional fix for CVE-2012-2661 ...

While the patched PredicateBuilder in 3.1.5 prevents a user
from specifying a table name using the `table.column` format,
it doesn't protect against the nesting of hashes changing the
table context in the next call to build_from_hash. This fix
covers this case as well.

2012-06-08 17:26:52 -05:00

..

batches.rb

We need to recorder here. Need to drop the order from default scope.

2011-09-04 23:45:50 +05:30

calculations.rb

Fixed failing query when performing calculation with having based on select.

2011-08-29 15:26:28 +01:00

finder_methods.rb

prepared statements can be disabled

2012-02-22 10:53:01 -08:00

predicate_builder.rb

Additional fix for CVE-2012-2661

2012-06-08 17:26:52 -05:00

query_methods.rb

fix activerecord query_method regression with offset into Fixnum

2012-03-13 08:53:37 +05:30

spawn_methods.rb

default create_with_value to a hash so we can eliminate conditionals, add test surrounding create_with(nil) behavior

2011-06-27 14:19:22 -07:00