Michael Koziarski 5ef8a81b84 Don't append the forgery token to an ajax request if it's serializing a form, prevents duplicate tokens. Closes #10684 [macournoyer] ...

git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@8598 5ecf4fe2-1ee6-0310-87b1-e25e094e27de

2008-01-08 21:17:08 +00:00

..

action_controller

Ruby 1.9 compat: cookie store delete sets nil value instead of empty string

2008-01-07 08:12:03 +00:00

action_pack

Prepare for 2.0.2 release

2007-12-16 23:30:30 +00:00

action_view

Don't append the forgery token to an ajax request if it's serializing a form, prevents duplicate tokens. Closes #10684 [macournoyer]

2008-01-08 21:17:08 +00:00

action_controller.rb

Merge csrf_killer plugin into rails. Adds RequestForgeryProtection model that verifies session-specific _tokens for non-GET requests. [Rick]

2007-09-23 02:32:55 +00:00

action_pack.rb

Update copyright span

2007-09-09 17:57:16 +00:00

action_view.rb

Refactor Action View template handlers. Closes #10437.

2007-12-09 22:11:11 +00:00

actionpack.rb

Allow frameworks to be required by their gem name (closes #8845) [drnic]

2007-09-22 18:15:05 +00:00