1. 09 10月, 2009 1 次提交
  2. 08 10月, 2009 1 次提交
    • M
      Switch to on-by-default XSS escaping for rails. · 94159359
      Michael Koziarski 提交于
        This consists of:
      
        * String#html_safe! a method to mark a string as 'safe'
        * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it
        * Calls to String#html_safe! throughout the rails helpers
        * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB)
        * New ERB implementation based on erubis which uses a SafeBuffer instead of a String
      
      Hat tip to Django for the inspiration.
      94159359
  3. 16 8月, 2009 3 次提交
    • Y
      Caches and cache clearing seems to actually work, but the actual architecture... · 9b552fb3
      Yehuda Katz 提交于
      Caches and cache clearing seems to actually work, but the actual architecture is kind of messy. Next: CLEAN UP.
      9b552fb3
    • Y
      More cleanup of ActionView and reduction in need for blocks in some cases: · 9f5cd015
      Yehuda Katz 提交于
        * only one of partial_name or :as will be available as a local
        * `object` is removed
        * Simplify _layout_for in most cases.
          * Remove <% render :partial do |args| %>
          * <% render :partial do %> still works fine
      9f5cd015
    • Y
      Clean up ActionView some: · 27adcd1c
      Yehuda Katz 提交于
        * Call _evaluate_assigns_and_ivars at the two entry points so we don't have to
          do a check at every render.
        * Make template.render viable without having to go through a wrapper method
        * Remove old TemplateHandler#render(template, local_assigns) path so we don't have
          to set self.template every time we render a template.
        * Move Template rescuing code to Template#render so it gets caught every time.
        * Pull in some tests from Pratik that test render @object in ActionView
      27adcd1c
  4. 12 8月, 2009 2 次提交
  5. 09 8月, 2009 5 次提交
  6. 08 8月, 2009 2 次提交
  7. 07 8月, 2009 11 次提交
  8. 19 7月, 2009 1 次提交
  9. 26 6月, 2009 1 次提交
  10. 18 6月, 2009 1 次提交
  11. 29 5月, 2009 1 次提交
  12. 13 5月, 2009 1 次提交
  13. 23 4月, 2009 1 次提交
    • Y
      Refactor ActionView::Path · 0a132c2f
      Yehuda Katz + Carl Lerche 提交于
        * Decouple from ActionController and ActionMailer
        * Bring back localization support.
        * Prepare to decouple templates from the filesystem.
        * Prepare to decouple localization from ActionView
        * Fix ActionMailer to take advantage of ActionView::Path
      0a132c2f
  14. 28 1月, 2009 1 次提交
  15. 23 1月, 2009 1 次提交
  16. 22 12月, 2008 1 次提交
  17. 19 11月, 2008 1 次提交
  18. 31 10月, 2008 1 次提交
  19. 01 9月, 2008 1 次提交
  20. 26 8月, 2008 1 次提交
  21. 23 8月, 2008 1 次提交
  22. 22 8月, 2008 1 次提交