- 18 12月, 2013 13 次提交
-
-
由 David Heinemeier Hansson 提交于
-
由 David Heinemeier Hansson 提交于
Remove the navigator for now. Its ugly and it promises more than it can deliver. These other views (properties, routes) are not designed to be loaded in isolation
-
由 Jeremy Kemper 提交于
-
由 Jeremy Kemper 提交于
-
由 Jeremy Kemper 提交于
Discuss Action Pack's new CSRF protection from remote script tags and what it means for your app. In short, update your tests if they don't already use the 'xhr :post' style.
-
由 Jeremy Kemper 提交于
-
由 Jeremy Kemper 提交于
CSRF protection from cross-origin <script> tags
-
由 Jeremy Kemper 提交于
Thanks to @homakov for sounding the alarm about JSONP-style data leaking
-
由 Jeremy Kemper 提交于
Create a blacklist to disallow mutator methods to be delegated to Array Conflicts: guides/source/upgrading_ruby_on_rails.md
-
由 Guillermo Iguaran 提交于
-
由 Yves Senn 提交于
Release notes fixes [ci skip]
-
由 Godfrey Chan 提交于
* Added release notes for secrets.yml and mentioned it in the highlights * Added release notes for Mailer previews and mentioned it in the highlights * Added release notes for Module#concerning * Removed mention for AV extraction from the highlights * Rearranged the major features to put highlighted features first * Various improvements and typo fixes [ci skip]
-
由 Carlos Antonio da Silva 提交于
Default I18n.enforce_available_locales to true We will default this option to true from now on to ensure users properly handle their list of available locales whenever necessary. This option was added as a security measure and thus Rails will follow it defaulting to secure option. Also improve the handling of I18n config options in its railtie, taking the new enforce_available_locales option into account, by setting it as the last one in the process. This ensures no other configuration will trigger a deprecation warning due to that setting.
-
- 17 12月, 2013 24 次提交
-
-
由 Lauro Caetano 提交于
This change was necessary because the whitelist wouldn't work. It would be painful for users trying to update their applications. This blacklist intent to prevent odd bugs and confusion in code that call mutator methods directely on the `Relation`.
-
由 Rafael Mendonça França 提交于
[ci skip]
-
由 Rafael Mendonça França 提交于
test case for #limit added - picking latest value from limit
-
由 Yves Senn 提交于
As discussed with @fxn the release notes are a snapshot document. The links going out to the API should represent that exact snapshot. This means we always link to the full final release. For example the 3.2 release notes link to http://api.rubyonrails.org/v3.2.0.
-
由 Carlos Antonio da Silva 提交于
The option enforce_available_locales is only available on latest versions, so require the last available one which has the option + other related fixes and should not have backward compatibility issues.
-
由 Carlos Antonio da Silva 提交于
-
由 Carlos Antonio da Silva 提交于
-
由 Carlos Antonio da Silva 提交于
We will default this option to true from now on to ensure users properly handle their list of available locales whenever necessary. This option was added as a security measure and thus Rails will follow it defaulting to secure option. Also improve the handling of I18n config options in its railtie, taking the new enforce_available_locales option into account, by setting it as the last one in the process. This ensures no other configuration will trigger a deprecation warning due to that setting.
-
由 Carlos Antonio da Silva 提交于
-
由 Yves Senn 提交于
/cc @chancancode
-
由 Jeremy Kemper 提交于
Introduce Module#concerning
-
由 Jeremy Kemper 提交于
A natural, low-ceremony way to separate responsibilities within a class. Imported from https://github.com/37signals/concerning#readme
-
由 Jeremy Kemper 提交于
Blast from the past, MySQL 4 era, when the password hashing style changed.
-
由 Yves Senn 提交于
Follow up to: https://github.com/rails/rails/commit/828a8f214535e59d709fd4862605902d1cc21632#commitcomment-4879462 This will be available after https://github.com/jonleighton/spring/commit/c6e25804b3338959d87a29f40967a333c650c031 is released.
-
由 Guillermo Iguaran 提交于
WIP: Integration of mail_view gem
-
由 Andrew White 提交于
-
由 Andrew White 提交于
-
由 Andrew White 提交于
-
由 Carlos Antonio da Silva 提交于
Better support for AR:B.where(belongs_to_assoc: val) which previously generated invalid SQL
-
由 Akshay Vishnoi 提交于
-
由 Martin Emde 提交于
Using the name of an association in `where` previously worked only if the value was a single `ActiveRecrd::Base` object. e.g. Post.where(author: Author.first) Any other values, including `nil`, would cause invalid SQL to be generated. This change supports arguments in the `where` query conditions where the key is a `belongs_to` association name and the value is `nil`, an `Array` of `ActiveRecord::Base` objects, or an `ActiveRecord::Relation` object. # Given the Post model class Post < ActiveRecord::Base belongs_to :author end # nil value finds records where the association is not set Post.where(author: nil) # SELECT "posts".* FROM "posts" WHERE "posts"."author_id" IS NULL # Array values find records where the association foreign key # matches the ids of the passed ActiveRecord models, resulting # in the same query as Post.where(author_id: [1,2]) authors_array = [Author.find(1), Author.find(2)] Post.where(author: authors_array) # ActiveRecord::Relation values find records using the same # query as Post.where(author_id: Author.where(last_name: "Emde")) Post.where(author: Author.where(last_name: "Emde")) Polymorphic `belongs_to` associations will continue to be handled appropriately, with the polymorphic `association_type` field added to the query to match the base class of the value. This feature previously only worked when the value was a single `ActveRecord::Base`. class Post < ActiveRecord::Base belongs_to :author, polymorphic: true end Post.where(author: Author.where(last_name: "Emde")) # Generates a query similar to: Post.where(author_id: Author.where(last_name: "Emde"), author_type: "Author")
-
由 Rafael Mendonça França 提交于
This is not a valid URL. [ci skip]
-
由 Rafael Mendonça França 提交于
Fix url leak in application templates guide
-
由 Jacob Evan Shreve 提交于
Encapsulate url that was including the trailing quote and colon.
-
- 16 12月, 2013 3 次提交
-
-
由 Jeremy Kemper 提交于
Fixes interpolation on SafeBuffer
-
由 Carlos Antonio da Silva 提交于
-
由 Yves Senn 提交于
Fixed rails dbconsole to support DATABASE_URL
-