- 01 5月, 2011 1 次提交
-
-
由 José Valim 提交于
-
- 28 4月, 2011 1 次提交
-
-
由 misfo 提交于
since ActionDispatch::Http::Parameters#encode_params will force encoding on all params strings (when using an encoding aware Ruby), dup all strings passed into process. This prevents modification of params passed in and, more importantly, doesn't barf when a frozen string is passed thanks and high fives to kinsteronline
-
- 25 4月, 2011 1 次提交
-
-
由 David Chelimsky 提交于
Signed-off-by: NJosé Valim <jose.valim@gmail.com>
-
- 20 4月, 2011 1 次提交
-
-
由 Florent Piteau 提交于
-
- 19 4月, 2011 3 次提交
-
-
由 José Valim 提交于
-
由 José Valim 提交于
Currently, we output: "><script type="text/javascript">window.location = "/500.html"</script></html>
-
由 José Valim 提交于
-
- 18 4月, 2011 3 次提交
-
-
由 José Valim 提交于
-
由 José Valim 提交于
-
由 José Valim 提交于
Added stream as class level method to make it explicit when to stream. Render also accepts :stream as option.
-
- 16 4月, 2011 2 次提交
-
-
由 Aaron Patterson 提交于
-
由 José Valim 提交于
-
- 14 4月, 2011 1 次提交
-
-
由 David Chelimsky 提交于
- Closes #6692 Signed-off-by: NJosé Valim <jose.valim@gmail.com>
-
- 13 4月, 2011 4 次提交
-
-
由 Prem Sichanugrist 提交于
After a long list of discussion about the performance problem from using varargs and the reason that we can't find a great pair for it, it would be best to remove support for it for now. It will come back if we can find a good pair for it. For now, Bon Voyage, `#among?`.
-
由 Xavier Noria 提交于
-
由 Xavier Noria 提交于
-
由 Xavier Noria 提交于
-
- 12 4月, 2011 1 次提交
-
-
由 David Heinemeier Hansson 提交于
-
- 11 4月, 2011 1 次提交
-
-
由 Prem Sichanugrist 提交于
There're a lot of places in Rails source code which make a lot of sense to switching to Object#in? or Object#either? instead of using [].include?.
-
- 08 4月, 2011 1 次提交
-
-
由 James Robinson 提交于
Improved formatting of csrf_helper and improved test coverage
-
- 07 4月, 2011 4 次提交
-
-
由 Aaron Patterson 提交于
-
由 Aaron Patterson 提交于
-
由 Aaron Patterson 提交于
-
由 Santiago Pastorino 提交于
-
- 05 4月, 2011 1 次提交
-
-
由 Santiago Pastorino 提交于
raise if someone tries to modify the flash when it was already streamed back to the client or converted to HTTP headers
-
- 03 4月, 2011 1 次提交
-
-
由 Santiago Pastorino 提交于
-
- 01 4月, 2011 3 次提交
-
-
由 Josh Kalderimis 提交于
Signed-off-by: NJosé Valim <jose.valim@gmail.com>
-
由 Josh Kalderimis 提交于
Signed-off-by: NJosé Valim <jose.valim@gmail.com>
-
由 Josh Kalderimis 提交于
when using respond_with with an invalid resource and custom options, the default response status and error messages should be returned Signed-off-by: NJosé Valim <jose.valim@gmail.com>
-
- 30 3月, 2011 1 次提交
-
-
由 José Valim 提交于
-
- 29 3月, 2011 1 次提交
-
-
由 David Heinemeier Hansson 提交于
Added Base.http_basic_authenticate_with to do simple http basic authentication with a single class method call [DHH]
-
- 28 3月, 2011 1 次提交
-
-
由 Prem Sichanugrist 提交于
This would become useful for site which sometime transferring sensitive information such as account information on particular controller or action. This featured was requested by DHH.
-
- 24 3月, 2011 2 次提交
-
-
由 Andrew White 提交于
The method_name argument is "default_render" for implicit actions so use the action_name attribute to determine which callbacks to run. [#5673 state:resolved]
-
由 Manfred Stienstra 提交于
Signed-off-by: NAndrew White <andyw@pixeltrix.co.uk>
-
- 09 3月, 2011 1 次提交
-
-
由 Andrew White 提交于
-
- 05 3月, 2011 1 次提交
-
-
由 R.T. Lechow 提交于
-
- 04 3月, 2011 1 次提交
-
-
由 R.T. Lechow 提交于
-
- 02 3月, 2011 1 次提交
-
-
由 Cheah Chu Yeow 提交于
Fix Action caching bug where an action that has a non-cacheable response always renders a nil response body. It now correctly renders the response body. Note that only GET and HTTP 200 responses can be cached. [#6480 state:committed] Signed-off-by: NSantiago Pastorino <santiago@wyeworks.com>
-
- 09 2月, 2011 2 次提交
-
-
由 Michael Koziarski 提交于
Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets. To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header: X-CSRF-Token: ... This fixes CVE-2011-0447
-
由 José Valim 提交于
-