1. 04 3月, 2011 1 次提交
  2. 08 11月, 2010 2 次提交
  3. 10 10月, 2010 1 次提交
  4. 30 8月, 2010 1 次提交
  5. 03 6月, 2010 1 次提交
  6. 30 5月, 2010 1 次提交
  7. 17 5月, 2010 5 次提交
    • W
      Revert "Moved encoding work in progress to a feature branch." · 80b60671
      wycats 提交于
      This reverts commit ade756fe.
      80b60671
    • W
      Make sure encoding changes don't break 1.8 · 02c36cf5
      wycats 提交于
      02c36cf5
    • J
      Moved encoding work in progress to a feature branch. · ade756fe
      Jeremy Kemper 提交于
      This reverts commits af0d1a88 and 64d109e3.
      ade756fe
    • W
      Significantly improved internal encoding heuristics and support. · 64d109e3
      wycats 提交于
      * Default Encoding.default_internal to UTF-8
      * Eliminated the use of file-wide magic comments to coerce code evaluated inside the file
      * Read templates as BINARY, use default_external or template-wide magic comments
        inside the Template to set the initial encoding
        * This means that template handlers in Ruby 1.9 will receive Strings encoded
          in default_internal (UTF-8 by default)
      * Create a better Exception for encoding issues, and use it when the template
        source has bytes that are not compatible with the specified encoding
      * Allow template handlers to opt-into handling BINARY. If they do so, they
        need to do some of their own manual encoding work
      * Added a "Configuration Gotchas" section to the intro Rails Guide instructing
        users to use UTF-8 for everything
      * Use config.encoding= in Ruby 1.8, and raise if a value that is an invalid
        $KCODE value is used
      
      Also:
      * Fixed a few tests that were assert() rather than assert_equal() and
        were caught by Minitest requiring a String for the message
      * Fixed a test where an assert_select was misformed, also caught by
        Minitest being more restrictive
      * Fixed a test where a Rack response was returning a String rather
        than an Enumerable
      64d109e3
    • W
      af0d1a88
  8. 16 5月, 2010 1 次提交
  9. 16 3月, 2010 1 次提交
    • C
      Add deprecation notices for <% %>. · 9de83050
      Carlhuda 提交于
        * The approach is to compile <% %> into a method call that checks whether
          the value returned from a block is a String. If it is, it concats to the buffer and
          prints a deprecation warning.
        * <%= %> uses exactly the same logic to compile the template, which first checks
          to see whether it's compiling a block.
        * This should have no impact on other uses of block in templates. For instance, in
          <% [1,2,3].each do |i| %><%= i %><% end %>, the call to each returns an Array,
          not a String, so the result is not concatenated
        * In two cases (#capture and #cache), a String can be returned that should *never*
          be concatenated. We have temporarily created a String subclass called NonConcattingString
          which behaves (and is serialized) identically to String, but is not concatenated
          by the code that handles deprecated <% %> block helpers. Once we remove support
          for <% %> block helpers, we can remove NonConcattingString.
      9de83050
  10. 12 3月, 2010 2 次提交
  11. 10 3月, 2010 2 次提交
  12. 22 2月, 2010 1 次提交
  13. 01 2月, 2010 2 次提交
  14. 25 12月, 2009 1 次提交
  15. 03 12月, 2009 1 次提交
    • C
      Reorganize autoloads: · c1304098
      Carlhuda 提交于
        * A new module (ActiveSupport::Autoload) is provide that extends
          autoloading with new behavior.
        * All autoloads in modules that have extended ActiveSupport::Autoload
          will be eagerly required in threadsafe environments
        * Autoloads can optionally leave off the path if the path is the same
          as full_constant_name.underscore
        * It is possible to specify that a group of autoloads live under an
          additional path. For instance, all of ActionDispatch's middlewares
          are ActionDispatch::MiddlewareName, but they live under 
          "action_dispatch/middlewares/middleware_name"
        * It is possible to specify that a group of autoloads are all found
          at the same path. For instance, a number of exceptions might all
          be declared there.
        * One consequence of this is that testing-related constants are not
          autoloaded. To get the testing helpers for a given component,
          require "component_name/test_case". For instance, "action_controller/test_case".
        * test_help.rb, which is automatically required by a Rails application's
          test helper, requires the test_case.rb for all active components, so
          this change will not be disruptive in existing or new applications.
      c1304098
  16. 17 10月, 2009 1 次提交
  17. 15 10月, 2009 1 次提交
  18. 08 10月, 2009 1 次提交
    • M
      Switch to on-by-default XSS escaping for rails. · 94159359
      Michael Koziarski 提交于
        This consists of:
      
        * String#html_safe! a method to mark a string as 'safe'
        * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it
        * Calls to String#html_safe! throughout the rails helpers
        * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB)
        * New ERB implementation based on erubis which uses a SafeBuffer instead of a String
      
      Hat tip to Django for the inspiration.
      94159359
  19. 02 7月, 2009 1 次提交
  20. 26 6月, 2009 1 次提交
  21. 02 6月, 2009 1 次提交
  22. 29 5月, 2009 1 次提交
  23. 22 5月, 2009 1 次提交
  24. 14 5月, 2009 1 次提交
  25. 25 2月, 2009 1 次提交
  26. 23 1月, 2009 1 次提交
  27. 07 12月, 2008 1 次提交
  28. 24 11月, 2008 1 次提交
  29. 17 11月, 2008 1 次提交
  30. 19 7月, 2008 1 次提交
  31. 16 7月, 2008 1 次提交
  32. 25 6月, 2008 1 次提交