1. 14 5月, 2019 1 次提交
  2. 12 5月, 2019 2 次提交
  3. 10 5月, 2019 1 次提交
  4. 09 5月, 2019 3 次提交
  5. 03 5月, 2019 1 次提交
  6. 07 3月, 2019 1 次提交
  7. 15 1月, 2019 1 次提交
  8. 20 12月, 2018 1 次提交
  9. 08 12月, 2018 1 次提交
  10. 02 10月, 2018 1 次提交
  11. 30 8月, 2018 1 次提交
  12. 29 8月, 2018 1 次提交
    • B
      Add "Ruby on Rails 6.0 Release Notes" guide [ci skip] · 02fa55ac
      bogdanvlviv 提交于
      This commit adds a skeleton of "Ruby on Rails 6.0 Release Notes".
      It isn't a good time to add changelogs' entries to this guide since we can
      redo/revert some things till the final release 6.0.
      It would be better to do it close to the release.
      But we already can add mentions about major features
      that have been added to 6.0. I added mention about "Parallel Testing".
      02fa55ac
  13. 22 8月, 2018 4 次提交
  14. 04 8月, 2018 1 次提交
  15. 24 7月, 2018 1 次提交
  16. 07 7月, 2018 2 次提交
    • A
      Substitute references to task for command · 2e194d0c
      Alberto Almagro 提交于
      This commit substitutes references to rails/rake task for rails command
      2e194d0c
    • A
      Recommend use of rails over bin/rails · 40b209db
      Alberto Almagro 提交于
      As discussed in #33203 rails command already looks for, and runs,
      bin/rails if it is present.
      
      We were mixing recommendations within guides and USAGE guidelines,
      in some files we recommended using rails, in others bin/rails and
      in some cases we even had both options mixed together.
      40b209db
  17. 02 5月, 2018 1 次提交
  18. 30 3月, 2018 1 次提交
    • D
      Deprecate controller level force_ssl · 4701a50b
      Derek Prior 提交于
      Today there are two common ways for Rails developers to force their
      applications to communicate over HTTPS:
      
      * `config.force_ssl` is a setting in environment configurations that
        enables the `ActionDispatch::SSL` middleware. With this middleware
        enabled, all HTTP communication to your application will be redirected
        to HTTPS. The middleware also takes care of other best practices by
        setting HSTS headers, upgrading all cookies to secure only, etc.
      * The `force_ssl` controller method redirects HTTP requests to certain
        controllers to HTTPS.
      
      As a consultant, I've seen many applications with misconfigured HTTPS
      setups due to developers adding `force_ssl` to `ApplicationController`
      and not enabling `config.force_ssl`. With this configuration, many
      application requests can be served over HTTP such as assets, requests
      that hit mounted engines, etc. In addition, because cookies are not
      upgraded to secure only in this configuration and HSTS headers are not
      set, it's possible for cookies that are meant to be secure to be sent
      over HTTP.
      
      The confusion between these two methods of forcing HTTPS is compounded
      by the fact that they share an identical name. This makes finding
      documentation on the "right" method confusing.
      
      HTTPS throughout is quickly becomming table stakes for all web sites.
      Sites are expected to operate over HTTPS for all communication,
      sensitive or otherwise. Let's encourage use of the broader-reaching
      `ActionDispatch::SSL` middleware and elminate this source of user
      confusion. If, for some reason, applications need to expose certain
      endpoints over HTTP they can do so by properly configuring
      `config.ssl_options`.
      4701a50b
  19. 14 3月, 2018 1 次提交
    • B
      Update "Upgrading from Rails 5.1 to Rails 5.2" [ci skip] · c8a22bb9
      bogdanvlviv 提交于
      Add section "Expiry in signed or encrypted cookie is now embedded in the cookies values"
      to `master` since it should always be in the guides, not only for version 5.2.
      
      Add info about `config.action_dispatch.use_authenticated_cookie_encryption`
      to the "Configuring Rails Applications" guide.
      
      It was committed straight  to `5-2-stable` since we don't need this
      functionality in 6.0. Related to b25fcbc0.
      c8a22bb9
  20. 12 3月, 2018 1 次提交
  21. 18 2月, 2018 2 次提交
  22. 11 1月, 2018 1 次提交
  23. 10 1月, 2018 1 次提交
  24. 28 12月, 2017 1 次提交
  25. 30 11月, 2017 1 次提交
  26. 06 10月, 2017 1 次提交
  27. 31 8月, 2017 1 次提交
  28. 23 8月, 2017 1 次提交
  29. 18 8月, 2017 1 次提交
    • J
      Add note about JSON/JSONB serialization changes · 835246e6
      Jon Moss 提交于
      The initial commit (efaa6e4f) that changed this
      behavior was intended to be a minor change, but ended up becoming a
      large-ish breaking change within Active Record.
      
      This is because instead of only JSON encoding `Hash`es or `Array`s in `#serialize`,
      we now encode all values passed in. This is an issue if you're passing in a `String`,
      that has already been transformed from a `Hash` to a `String`, since your data
      is now being double encoded.
      
      Unfortunately, the change was included in one of the v5.0.0 beta
      releases, and it is too late to revert without huge ripple effects.
      Thus, all we can do is update the documentation (via this commit), and
      add some test coverage (coming soon in a PR) for the new behavior.
      
      Please note that in the documentation I talk about deserialization, not
      about serialization, where the actual change occurred. This is because
      you won't notice any changes in serialized data until you try and
      deserialize it. Also to make the change itself (confusing until you
      read through everything multiple times) easier to understand.
      
      Related #27788, #25594, #26101, #24234, #28292, #28285, #28285, and
      probably others.
      
      [ci skip]
      835246e6
  30. 16 8月, 2017 1 次提交
    • J
      Change to plural · 393a7aad
      Jon Moss 提交于
      `it` and `has` are for singular, not plural
      
      [ci skip]
      393a7aad
  31. 21 7月, 2017 1 次提交
  32. 07 6月, 2017 1 次提交