Michael Koziarski c014c3e5c1 Whitelist the methods which are called by multiparameter attribute assignment. ...

This prevents users from causing NoMethodErrors and the like by editing the parameter names, and closes a potential exploit of CVE-2009-1904.

2009-06-10 12:12:21 +12:00

..

associations

Ensure HasManyThroughAssociation#destroy delete orphan records [#2251 state:resolved]

2009-05-18 22:30:43 +02:00

connection_adapters

PostgreSQL adapter should call thread safe quote_string function

2009-06-09 20:12:01 +12:00

locale

Merge docrails

2009-01-18 18:10:58 +00:00

locking

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

serializers

Fix AR json encoding

2009-06-08 19:37:51 -07:00

validations

Move validate_on_create and validate_on_update from ActiveModel to ActiveRecord

2009-03-21 01:11:38 +00:00

aggregations.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

association_preload.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

associations.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

attribute_methods.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

autosave_association.rb

Merge branch 'master' into active_model

2009-05-29 16:06:21 -05:00

base.rb

Whitelist the methods which are called by multiparameter attribute assignment.

2009-06-10 12:12:21 +12:00

batches.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

calculations.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

callbacks.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

dirty.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

dynamic_finder_match.rb

Dynamic finders should use the ActiveRecord::Base::find method instead of ::find_initial, :find_last, and ::find_all.

2008-10-03 21:28:11 +02:00

dynamic_scope_match.rb

Introduce dynamic scopes for ActiveRecord: you can now use class methods like scoped_by_user_name(user_name) and scoped_by_user_name_and_password(user_name, password) that will use the scoped method with attributes you supply. [#1648 state:committed]

2008-12-28 20:52:46 +01:00

fixtures.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

migration.rb

Cherry-pick core extensions

2009-05-13 12:00:15 -07:00

named_scope.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

nested_attributes.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

observer.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

query_cache.rb

ActiveRecord::QueryCache middleware

2008-12-22 11:31:18 -06:00

reflection.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

schema_dumper.rb

Schema dumper now records scale 0 decimal columns as decimal not integer.

2009-06-01 13:40:05 +12:00

schema.rb

Merge docrails.

2008-05-25 12:29:00 +01:00

serialization.rb

Fix AR json encoding

2009-06-08 19:37:51 -07:00

session_store.rb

Fix reset_session with ActiveRecord store [#2200 state:resolved]

2009-05-17 14:42:36 -05:00

test_case.rb

Show executed queries when assert_sql assertion fails [#2573 state:resolved]

2009-04-28 22:11:47 +01:00

timestamp.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

transactions.rb

Break up DependencyModule's dual function of providing a "depend_on" DSL and "included" block DSL into separate modules. But, unify both approaches under AS::Concern.

2009-05-28 11:35:36 -05:00

validations.rb

Update for Active Model yielding per error not per attribute

2009-06-08 19:37:50 -07:00

version.rb

Prepare for final 2.3 release

2009-03-15 22:06:50 -05:00