Peter Jones 2a986200b9 Bug: Earlier Check for Session in Forgery Protection ...

The session is used by the form_authenticity_token method before it is
tested to be valid.  This patch moves a few lines around so that the
session is validated first.

Without this patch, if you try to use forgery protection with sessions
turned off, you get this exception message:

  undefined method `session_id' for {}:Hash

The patch includes a test that can be used to see this behavior before
the request_forgery_protection.rb file is patched to fix it.

2008-05-11 13:27:34 -05:00

..

controller_fixtures

New routes implementation. Simpler, faster, easier to understand. The published API for config/routes.rb is unchanged, but nearly everything else is different, so expect breakage in plugins and libs that try to fiddle with routes.

2006-06-01 15:42:08 +00:00

deprecation

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

html-scanner

Fixed HTML::Tokenizer (used in sanitize helper) didnt handle unclosed CDATA tags (closes #10071) [esad, packagethief]

2008-03-28 19:45:32 +00:00

session

Implement increment/decrement on cache storage engines, using read/write by default and using atomic command on memcache

2008-04-29 15:12:47 -04:00

action_pack_assertions_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

addresses_render_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

assert_select_test.rb

Ruby 1.9 compat: force assert_select text encoding to the encoding of the regexp it's matching against.

2008-04-28 10:52:23 -07:00

base_test.rb

regression test for bug introduced in [6a6b4392c1] [Ian White] [#22 state:resolved]

2008-05-05 23:42:52 -07:00

benchmark_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

caching_test.rb

Add conditional options to caches_page method [#25 state:resolved]

2008-04-19 16:21:34 -05:00

capture_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

cgi_test.rb

Don't split cookies on comma also. References r8505.

2008-02-02 02:55:44 +00:00

components_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

content_type_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

cookie_test.rb

Move missing template logic to ActionView

2008-04-19 18:59:13 +01:00

custom_handler_test.rb

Introduce ActionView::InlineTemplate class

2008-04-19 16:21:18 +01:00

dispatcher_test.rb

Refactor Dispatcher callbacks to remove unnecessary Dependencies checks in production environment.

2008-04-18 13:05:43 +01:00

fake_controllers.rb

Add timing test for large restful route recognition. References #10835 [oleganza]

2008-01-19 05:24:44 +00:00

fake_models.rb

Support render :partial => collection of heterogeneous elements. Closes #11491.

2008-04-01 00:50:09 +00:00

filter_params_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

filters_test.rb

Fix regression from filter refactoring where re-adding a skipped filter resulted in it being called twice. [rick]

2008-03-23 01:48:17 +00:00

flash_test.rb

Move missing template logic to ActionView

2008-04-19 18:59:13 +01:00

header_test.rb

Provide a nicer way to access headers. request.headers["Content-Type"] instead of request.headers["HTTP_CONTENT_TYPE"] [Koz]

2008-01-11 06:39:56 +00:00

helper_test.rb

Provide a helper proxy to access helper methods from outside views. Closes #10839 [Josh Peek]

2008-04-06 18:42:34 +00:00

http_authentication_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

integration_test.rb

use stubbing instead of monkeypatching to stop tests from interfering with one another. Closes #11163 [RubyRedRick]

2008-02-19 21:43:13 +00:00

integration_upload_test.rb

style & whitespace

2008-04-01 06:11:48 +00:00

layout_test.rb

Move missing template logic to ActionView

2008-04-19 18:59:13 +01:00

mime_responds_test.rb

Move missing template logic to ActionView

2008-04-19 18:59:13 +01:00

mime_type_test.rb

Accept header mime parser can now deal with empty fields

2008-05-01 17:45:14 -04:00

new_render_test.rb

Delegate action_name to controller inside views.

2008-05-06 12:02:24 +01:00

polymorphic_routes_test.rb

Fixed that formatted_polymorphic_route should be able to take the :format as part of a single hash or as the option hash (references #8741)

2008-04-11 12:34:44 -05:00

record_identifier_test.rb

Make render shorthands work with namespaced controllers

2008-05-10 11:28:19 +01:00

redirect_test.rb

Ensure RJS redirect_to doesn't html-escapes string argument. Closes #8546

2008-04-02 12:48:59 +00:00

render_test.rb

Fixed render :template for templates in top level of view path. [#54 state:resolved]

2008-05-01 10:21:46 +01:00

request_forgery_protection_test.rb

Bug: Earlier Check for Session in Forgery Protection

2008-05-11 13:27:34 -05:00

request_test.rb

Automatically parse posted JSON content for Mime::JSON requests. [rick]

2008-04-08 05:05:54 +00:00

rescue_test.rb

Move missing template logic to ActionView

2008-04-19 18:59:13 +01:00

resources_test.rb

Refactored and fixed Resources.map_member_actions to make use of custom ActionController::Base.resources_path_names when the option :path_names is not directly specified. Added a specific test for this functionality and fixed assert_restful_routes_for test helper to make use of ActionController::Base.resources_path_names instead of just "new" or "edit".

2008-05-06 21:48:07 +12:00

routing_test.rb

Escape globbed parameters in routes correctly.

2008-05-10 14:55:41 +12:00

selector_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

send_file_test.rb

Introduce send_file :x_sendfile => true to send an X-Sendfile response header.

2008-01-11 22:07:04 +00:00

session_fixation_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

session_management_test.rb

Added session(:on) to turn session management back on in a controller subclass if the superclass turned it off (Peter Jones) [#136 state:resolved]

2008-05-11 13:18:49 -05:00

test_test.rb

Fixed flash.now not being accessible in tests. Flash sweeping is now done before action processing instead after

2008-05-11 18:30:10 +12:00

url_rewriter_test.rb

Add :trailing_slash option to UrlWriter. Closes #9117 [juanjo.bazan]

2008-02-18 00:42:06 +00:00

verification_test.rb

require abstract_unit directly since test is in load path

2008-01-05 13:32:06 +00:00

view_paths_test.rb

Reapply the TemplateFinder first applied in [8669] then reverted in [8676]. Closes #10800 [lifofifo]

2008-01-21 20:45:04 +00:00

webservice_test.rb

Fix Hash#from_xml with Type records. Closes #9242 [Juanjo Bazan, Isaac Feliu]

2008-02-27 23:11:08 +00:00