Jeremy Kemper a61b63d420 Avoid remote_ip spoofing ...

git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@9124 5ecf4fe2-1ee6-0310-87b1-e25e094e27de

2008-03-28 21:38:01 +00:00

..

assertions

assert_response, don't cry if @exception isn't available in the template

2008-03-18 23:37:55 +00:00

caching

Fixed that sweepers defined by cache_sweeper will be added regardless of the perform_caching setting. Instead, control whether the sweeper should be run with the perform_caching setting. This makes testing easier when you want to turn perform_caching on/off [DHH]

2008-03-08 01:05:53 +00:00

cgi_ext

remove support for ampersand-delimited cookie values

2008-02-12 21:45:39 +00:00

routing

Added support for regexp flags like ignoring case in the :requirements part of routes declarations (closes #11421) [NeilW]

2008-03-28 20:01:21 +00:00

session

Ruby 1.9 compat: cookie store delete sets nil value instead of empty string

2008-01-07 08:12:03 +00:00

templates/rescues

Remove ERB trim variables from trace template in case ActionView::Base.erb_trim_mode is changed in the application. Closes #10098 [tpope, kampers]

2008-02-07 17:06:53 +00:00

vendor/html-scanner/html

Fixed HTML::Tokenizer (used in sanitize helper) didnt handle unclosed CDATA tags (closes #10071) [esad, packagethief]

2008-03-28 19:45:32 +00:00

assertions.rb

Fix typos (closes #10378)

2007-12-05 18:54:41 +00:00

base.rb

Inspect options hashes in RenderError message so it's actually readable. Closes #11435 [court3nay]

2008-03-28 21:23:28 +00:00

benchmarking.rb

Use realtime to reduce garbage. [adymo]

2008-02-29 23:17:52 +00:00

caching.rb

Fixed that cache fetch method would cause nil exception when called with no options (closes #11253) [remy]

2008-03-15 20:02:46 +00:00

cgi_ext.rb

Parse url-encoded and multipart requests ourselves instead of delegating to CGI.

2007-05-18 06:24:50 +00:00

cgi_process.rb

The asset_host block takes the controller request as an optional second argument. Example: use a single asset host for SSL requests. Closes #10549.

2008-01-06 20:53:23 +00:00

components.rb

Ruby 1.9 compat, consistent load paths

2007-10-02 05:32:14 +00:00

cookies.rb

Ruby 1.9 compat: account for new, non-flattening Array#to_s

2007-12-15 02:29:15 +00:00

dispatcher.rb

Refactor filters to use Active Support callbacks. Closes #11235.

2008-03-18 17:56:05 +00:00

filters.rb

Fix regression from filter refactoring where re-adding a skipped filter resulted in it being called twice. [rick]

2008-03-23 01:48:17 +00:00

flash.rb

Ruby 1.9 compat, consistent load paths

2007-10-02 05:32:14 +00:00

headers.rb

Provide a nicer way to access headers. request.headers["Content-Type"] instead of request.headers["HTTP_CONTENT_TYPE"] [Koz]

2008-01-11 06:39:56 +00:00

helpers.rb

Ruby 1.9 compat: helpers

2007-12-15 02:29:36 +00:00

http_authentication.rb

Ruby 1.9 compat: move from the deprecated Base64 module to ActiveSupport::Base64. Closes #10554.

2007-12-18 21:14:07 +00:00

integration.rb

Allow file uploads in Integration Tests. Closes #11091 [RubyRedRick]

2008-03-03 06:42:24 +00:00

layout.rb

Make sure render :update support the options hash. Closes #11088 [ernesto.jimenez]

2008-02-12 22:42:36 +00:00

mime_responds.rb

Make MimeResponds::Responder#any work without explicit types. Closes #11140 [jaw6]

2008-03-07 11:17:05 +00:00

mime_type.rb

Ensure mime types can be compared with symbols. Closes #10796 [bscofield]

2008-01-20 22:55:25 +00:00

mime_types.rb

Add multipart and url-encoded form mime types.

2007-05-15 23:57:16 +00:00

polymorphic_routes.rb

Fixed that polymorphic routes would modify the input array (closes #11363) [thomas.lee]

2008-03-17 23:45:42 +00:00

record_identifier.rb

Correct documentation for dom_id [jbarnette] Closes #10775

2008-01-26 05:11:09 +00:00

request_forgery_protection.rb

Correct inconsistencies in RequestForgeryProtection docs. #11032 [mislav]

2008-02-06 18:50:48 +00:00

request_profiler.rb

Add --measure option to script/performance/request to set ruby-prof measure mode: process_time, wall_time, cpu_time, allocations, memory.

2008-02-03 12:11:12 +00:00

request.rb

Avoid remote_ip spoofing

2008-03-28 21:38:01 +00:00

rescue.rb

Ruby 1.9 compat: File.exists\? -> File.exist\? en masse. References #1689 [Pratik Naik]

2007-12-10 05:54:46 +00:00

resources.rb

Improve documentation.

2008-03-26 12:27:52 +00:00

response.rb

Add :status to redirect_to allowing users to choose their own response code without manually setting headers. Closes #8297 [codahale, chasgrundy]

2007-10-09 23:07:36 +00:00

routing.rb

Added support for regexp flags like ignoring case in the :requirements part of routes declarations (closes #11421) [NeilW]

2008-03-28 20:01:21 +00:00

session_management.rb

Document that the cookie store is the default session store. Mention the memcached store. Closes #10241 [Josh Susser, Jeremy Kemper]

2007-11-22 05:48:45 +00:00

status_codes.rb

Nodoc the irrelevant (from 1.2)

2007-01-26 21:37:38 +00:00

streaming.rb

Introduce send_file :x_sendfile => true to send an X-Sendfile response header.

2008-01-11 22:07:04 +00:00

test_case.rb

Allow using named routes in ActionController::TestCase before any request has been made. Closes #11273 [alloy]

2008-03-08 12:56:41 +00:00

test_process.rb

TestSession supports indifferent access. Closes #7372.

2008-02-02 05:32:44 +00:00

url_rewriter.rb

Docfix (closes #11249) [juanjo.bazan]

2008-03-15 20:03:32 +00:00

verification.rb

Refactored ActionController::Verification and improved docs (closes #10681) [jamesh]

2008-01-03 15:49:59 +00:00