- 22 9月, 2020 1 次提交
-
-
由 Adrianna Chang 提交于
* Add binary encoding logic into ActionDispatch::Request::Utils Moving the logic to set binary encoding into ActionDispatch::Request::Utils will allow us to encode from GET and POST in ActionDispatch::Request. * Refactor binary encoding logic - Move binary encoding calls into GET, POST and path_parameters - Remove binary encoding from ActionDispatch::Http::Request - This way, we only raise an invalid encoding exception if the controller is not requesting parameters in binary encoding * Check if encoding is valid in ActionDispatch::Request#POST and raise BadRequest if invalid * Fix multipart_params_test that has binary-encoded params containing invalid UTF-8 characters * Address PR comments * Pass action and controller to Request::Utils.set_binary_encoding [Rafael Mendonça França + Adrianna Chang]
-
- 29 7月, 2017 1 次提交
-
-
由 Kir Shatrov 提交于
-
- 02 7月, 2017 1 次提交
-
-
由 Matthew Draper 提交于
This reverts commit 3420a145, reversing changes made to afb66a5a.
-
- 01 7月, 2017 1 次提交
-
-
由 Kir Shatrov 提交于
-
- 23 5月, 2017 1 次提交
-
-
由 bogdanvlviv 提交于
".. with __dir__ we can restore order in the Universe." - by @fxn Related to 5b8738c2
-
- 25 12月, 2016 1 次提交
-
-
由 Akira Matsuda 提交于
-
- 25 10月, 2016 1 次提交
-
-
由 Rafael Mendonça França 提交于
This image has copyright that we are not giving so it is better to use one image that we own the copyright.
-
- 16 8月, 2016 1 次提交
-
-
由 Rafael Mendonça França 提交于
Style/SpaceBeforeBlockBraces Style/SpaceInsideBlockBraces Style/SpaceInsideHashLiteralBraces Fix all violations in the repository.
-
- 07 8月, 2016 2 次提交
-
-
由 Xavier Noria 提交于
-
由 Xavier Noria 提交于
The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default.
-
- 01 3月, 2016 1 次提交
-
-
由 Andrew White 提交于
Allowing :controller and :action values to be specified via the path in config/routes.rb has been an underlying cause of a number of issues in Rails that have resulted in security releases. In light of this it's better that controllers and actions are explicitly whitelisted rather than trying to blacklist or sanitize 'bad' values.
-
- 04 8月, 2015 1 次提交
-
-
由 Kohei Suzuki 提交于
-
- 18 7月, 2015 1 次提交
-
-
由 Prem Sichanugrist 提交于
This will silence deprecation warnings. Most of the test can be changed from `render :text` to render `:plain` or `render :body` right away. However, there are some tests that needed to be fixed by hand as they actually assert the default Content-Type returned from `render :body`.
-
- 03 2月, 2015 1 次提交
-
-
由 Vipul A M 提交于
-
- 29 1月, 2015 2 次提交
-
-
由 Rafael Mendonça França 提交于
-
由 Kir Shatrov 提交于
Non-kwargs requests are deprecated now. Guides are updated as well. `post url, nil, nil, { a: 'b' }` doesn't make sense. `post url, params: { y: x }, session: { a: 'b' }` would be an explicit way to do the same
-
- 04 6月, 2014 1 次提交
-
-
由 Aaron Patterson 提交于
application. Use of a symbol should be replaced with `action: symbol`. Use of a string without a "#" should be replaced with `controller: string`.
-
- 19 5月, 2014 1 次提交
-
-
由 Jarmo Isotalo 提交于
As Rack has some non backwards compatible changes added required modifications to keep behaviour in rails close to same as before. Also modified generators to include rack/rack for not yet released version of rack
-
- 29 6月, 2013 1 次提交
-
-
由 Aaron Patterson 提交于
-
- 15 3月, 2013 1 次提交
-
-
由 Teo Hui Ming 提交于
-
- 11 12月, 2012 1 次提交
-
-
由 Adam Stankiewicz 提交于
Such request can happen on Internet Explorer. When we redirect after multipart form submission, the request type is changed to GET, but Content-Type is preserved as multipart. GET request cannot have multipart body and that caused Rails to fail. It's similar fix to Rack's one: https://github.com/chneukirchen/rack/blob/8025a4ae9477d1e6231344c2b7d795aa9b3717b6/lib/rack/request.rb#L224
-
- 25 4月, 2012 1 次提交
-
-
由 Jose and Yehuda 提交于
In the current router DSL, using the +match+ DSL method will match all verbs for the path to the specified endpoint. In the vast majority of cases, people are currently using +match+ when they actually mean +get+. This introduces security implications. This commit disallows calling +match+ without an HTTP verb constraint by default. To explicitly match all verbs, this commit also adds a :via => :all option to +match+. Closes #5964
-
- 25 12月, 2011 1 次提交
-
-
由 Sergey Nartimov 提交于
-
- 03 5月, 2011 1 次提交
-
-
由 José Valim 提交于
-
- 05 10月, 2010 1 次提交
-
-
由 Aaron Patterson 提交于
-
- 29 9月, 2010 1 次提交
-
-
由 Emilio Tagua 提交于
-
- 26 9月, 2010 1 次提交
-
-
由 Carlos Antonio da Silva 提交于
This removes all deprecated classes in ActionController related to Routing, Abstract Request/Response and Integration/IntegrationTest. All tests and docs were changed to ActionDispatch instead of ActionController.
-
- 05 9月, 2010 1 次提交
-
-
由 Piotr Sarnacki 提交于
-
- 28 6月, 2010 1 次提交
-
-
由 Jeremy Kemper 提交于
-
- 09 12月, 2009 1 次提交
-
-
由 Joshua Peek 提交于
-
- 04 10月, 2009 1 次提交
-
-
由 Joshua Peek 提交于
with_routing. This only affects our internal AP tests.
-
- 28 8月, 2009 1 次提交
-
-
由 Joshua Peek 提交于
-
- 03 8月, 2009 1 次提交
-
-
由 Yehuda Katz 提交于
* convert_content_type! is handled by assign_default_content_type_and_charset! * set_content_length! should be handled by the endpoint server. Otherwise each middleware that modifies the body has to do the expensive work of recalculating content_length. * convert_language! appears to be legacy. There are no tests for this * convert_cookies! should be handled by the new HeaderHash in Rack * Use an integer for .status's internal representation to avoid needing to do String manipulation just to find out the status
-
- 28 4月, 2009 1 次提交
-
-
由 Jeremy Kemper 提交于
-
- 27 4月, 2009 1 次提交
-
-
由 Jeremy Kemper 提交于
-
- 26 4月, 2009 2 次提交
-
-
由 Joshua Peek 提交于
Remove RewindableInput middleware since all input MUST be rewindable according to a recent change in the Rack 1.0 SPEC
-
由 Joshua Peek 提交于
-
- 18 4月, 2009 2 次提交
-
-
由 Mislav Marohnić 提交于
Signed-off-by: NJoshua Peek <josh@joshpeek.com>
-
由 Mislav Marohnić 提交于
Signed-off-by: NJoshua Peek <josh@joshpeek.com>
-
- 29 1月, 2009 1 次提交
-
-
由 Joshua Peek 提交于
-