8000 Commits · winston/rails · GitHub

More Web Proxy on the site http://driver.im/

Commits

Commits on Dec 3, 2013

Deep Munge the parameters for GET and POST

NZKoz
authored and
tenderlove
committed
Stop using i18n's built in HTML error handling.

NZKoz
authored and
tenderlove
committed
Ensure simple_format escapes its html attributes

NZKoz
authored and
tenderlove
committed
Escape the unit value provided to number_to_currency

NZKoz
authored and
tenderlove
committed

Commits on Apr 18, 2013

Merge pull request #10235 from joergleis/patch-1
NZKoz
committed

Commits on Feb 8, 2013

Merge pull request #9220 from robertomiranda/where-with-empty-hash
NZKoz
committed

Commits on Oct 2, 2012

Merge pull request #6952 from NZKoz/key_generator
NZKoz
committed

Commits on Oct 1, 2012

Commits on Sep 14, 2012

Merge pull request #7616 from lest/null-session-forgery-protection
NZKoz
committed

Commits on May 22, 2012

Merge pull request #5125 from winston/log_exception_when_cache_read_fails
NZKoz
committed

Commits on May 8, 2012

Merge pull request #5500 from panthomakos/load-all
NZKoz
committed

Commits on Mar 11, 2012

Merge pull request #5326 from lest/patch-2
NZKoz
committed

Commits on Mar 5, 2012

Merge pull request #5277 from rafaelfranca/fix-build
NZKoz
committed

Commits on Mar 4, 2012

Whitelist all attribute assignment by default.
NZKoz
committed

Commits on Jun 8, 2011

Ensure that the strings returned by SafeBuffer#gsub and friends aren't considered html_safe?

NZKoz
authored and
tenderlove
committed

Commits on May 19, 2011

Commits on May 17, 2011

Don't print deprecation warnings every time the user reads or writes an inheritable attribute. The warnings on declaration is enough.
NZKoz
committed

Commits on Feb 22, 2011

Prepend the CSRF filter to make it much more difficult to execute application code before it fires.
NZKoz
committed

Commits on Feb 8, 2011

Make rails.js include the CSRF token in the X-CSRF-Token header with every ajax request.

NZKoz
authored and
tenderlove
committed
Change the CSRF whitelisting to only apply to get requests

NZKoz
authored and
tenderlove
committed
Be sure to javascript_escape the email address to prevent apostrophes inadvertently causing javascript errors.

NZKoz
authored and
tenderlove
committed

Commits on Jan 18, 2011

Use the derived request_method from AD::Request rather than the raw REQUEST_METHOD from rack.
NZKoz
committed

Commits on Dec 2, 2010

Work around a strange piece of Syck behaviour where it checks Model#respond_to? before initializing the object.

NZKoz
authored and
tenderlove
committed

Commits on Nov 7, 2010

Commits on Oct 17, 2010

Rejig the html5 data helper code
NZKoz
committed

Commits on Oct 14, 2010

Revert 0c0b0aa0f223523331afdc157fb3992a121bf497 which introduced a security vulnerability.
NZKoz
committed

Commits on Oct 7, 2010

fix rendering a partial with an array as its :object [#5746 state:resolved]
NZKoz
committed

Commits on May 29, 2010

Commits on Apr 15, 2010

Split the observer railtie into two phases.
NZKoz
committed

Commits on Apr 8, 2010

0