- 16 3月, 2018 1 次提交
-
-
由 Catherine Khuu 提交于
* Check exclude before flagging cookies as secure. * Update comments in ActionDispatch::SSL. [Catherine Khuu + Rafael Mendonça França]
-
- 15 3月, 2018 2 次提交
-
-
由 Andrew White 提交于
Time column improvements
-
由 Sean Griffin 提交于
Don't marshal ActiveSupport::Cache::Entry objects twice
-
- 14 3月, 2018 3 次提交
-
-
由 Andrew White 提交于
Fixes #32248.
-
由 Yuji Yaginuma 提交于
-
由 Kasper Timm Hansen 提交于
Update "Ruby on Rails 5.2 Release Notes" Guide [ci skip]
-
- 13 3月, 2018 5 次提交
-
-
由 George Claghorn 提交于
-
由 Adam Richardson 提交于
Since `Redis#call` duck types as a Proc, we'd call `#call` on it, thinking it's a Proc. Fixed by check for the Proc explicitly instead of duck typing on `#call`. Closes #32233
-
由 Yuji Yaginuma 提交于
Follow up of 309bb6c4
-
由 George Claghorn 提交于
-
由 Andrew White 提交于
The Active Storage service for Azure Storage has an option called `path` that is ambiguous in meaning. It needs to be set to the primary blob storage endpoint but that can be determined from the blobs client anyway. To simplify the configuration this commit removes the `path` option and gets the endpoint from the blobs client instead. Closes #32225.
-
- 12 3月, 2018 4 次提交
-
-
由 Kasper Timm Hansen 提交于
-
由 Andrew White 提交于
Closes #32219.
-
由 Andrew White 提交于
Fix 5-2-stable's changelogs [ci skip]
-
由 bogdanvlviv 提交于
- Add missing dots. - Change example of using `content_security_policy_report_only` in controller. - Remove TODO. Related to #32222
-
- 09 3月, 2018 1 次提交
-
-
由 Chris Salzberg 提交于
* Remove reference to Globalize::Backend::Static as this class no longer exists. * Remove reference to google group * Remove confusing reference to Globalize3 * Add section on translating stored content [ci skip]
-
- 08 3月, 2018 6 次提交
-
-
由 Andrew White 提交于
If the app has the CSP disabled globally allow a controller action to enable the policy for that request.
-
由 Andrew White 提交于
e.g: class LegacyPagesController < ApplicationController content_security_policy false, only: :index end
-
由 yuuji.yaginuma 提交于
We use inline style and script for the view held inside Rails like welcome page and mailer preview. Therefore, if inline is prohibited by CSP, they will not work properly. I think that this is not as expected. For that reason, I have made it possible to use inline style and script regardless of application settings.
-
由 Andrew White 提交于
-
由 Andrew White 提交于
[ci skip] (cherry picked from commit 22777c80)
-
由 Andrew White 提交于
Express `ActionDispatch::Routing::UrlFor#route_for` as public api (cherry picked from commit e764336e)
-
- 07 3月, 2018 7 次提交
-
-
由 Sean Griffin 提交于
This is an alternate implementation of #31698. That PR makes assumptions that I do not want in the code base. We can fix the performance regression with a much simpler patch.
-
由 Sean Griffin 提交于
This reverts commit a19e91f0.
-
由 Rafael França 提交于
Use authenticated cookie options to disable embedding of the expiry information in the cookies
-
由 Rafael Mendonça França 提交于
We were generating the cookie value with the expiry information embedded what makes the value impossible to be read by a Rails 5.1 application. This option is only useful if you need to share your cookies between a Rails 5.1 and a Rails 5.2 application, or if you are still validating the deploy and wants to eventually rollback.
-
由 Terence Lee 提交于
mutool is licensed under the Affero GPL, which has strict distribution requirements. Poppler is licensed under the more liberal GPL, making it a good alternative for those who can't use mutool.
-
由 George Claghorn 提交于
-
由 Nicholas Shirley 提交于
-
- 06 3月, 2018 11 次提交
-
-
由 George Claghorn 提交于
Since we started clearing the client-side blob's type in e0867b36, we no longer need to set a blank Content-Type header before issuing the direct upload request. Fixes that Safari 9 would combine the blank Content-Type header with the blank blob type to produce a Content-Type header containing a single comma, invalidating the request.
-
由 Andrew White 提交于
Fix dependence on has_one/belongs_to relationships (cherry picked from commit 13e35a59)
-
由 Yuji Yaginuma 提交于
Follow up of #32151
-
由 Thomas Walpole 提交于
-
由 Xavier Noria 提交于
-
由 Xavier Noria 提交于
-
由 Xavier Noria 提交于
-
由 George Claghorn 提交于
-
由 George Claghorn 提交于
[Matt Jones & George Claghorn]
-
由 Rafael Mendonça França 提交于
Now we always have a terminator, so we don't need to day the options only make sense when the `:terminator` options is specified.
-
由 Ryuta Kamizono 提交于
This issue is caused by `@_trigger_update_callback` won't be updated due to `_update_record` in `Locking::Optimistic` doesn't call `super` when optimistic locking is enabled. Now optimistic locking concern when updating is supported by `_update_row` low level API, therefore overriding `_update_record` is no longer necessary. Removing the method just fix the issue. Closes #29096. Closes #29321. Closes #30823.
-