7ce3a597249d99b1b3247d5f0ea5490416bd8f38 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/099a98e9b7108dae3e0f78b207e0a7dc5913bd1a 099a98e9b7108dae3e0f78b207e0a7dc5913bd1a 2008-11-18T09:53:48-08:00 2008-11-16T11:35:25-08:00 Verify form submissions for text/plain posts too. Some browsers can POST requests with text/plain encoding, allowing attackers to potentially subvert the request forgery prevention. http://pseudo-flaw.net/content/web-browsers/form-data-encoding-roundup/ 1a12dbfe5aff023b4a355098d6c1a5995071e323 Michael Koziarski michael@koziarski.com dac9180f8727d73dae816769de1d590e11bc0a75 ed949f35be68289a615b37d7d8c28ee0d6dd0266 gbuesing gbuesing@gmail.com http://github.com/rails/rails/commit/7ce3a597249d99b1b3247d5f0ea5490416bd8f38 7ce3a597249d99b1b3247d5f0ea5490416bd8f38 2008-11-18T07:28:50-08:00 2008-11-18T07:28:50-08:00 Merge branch '2-1-stable' of git@github.com:rails/rails into 2-1-stable f30eb878a674b9bbc4ef85dfb1fc6ad07d838a7a gbuesing gbuesing@gmail.com 51572add2b78aea3c9faf605838e47c070090c52 gbuesing gbuesing@gmail.com http://github.com/rails/rails/commit/dac9180f8727d73dae816769de1d590e11bc0a75 dac9180f8727d73dae816769de1d590e11bc0a75 2008-11-18T07:24:58-08:00 2008-11-18T07:24:58-08:00 TimeZone offset tests: use current_period, to ensure TimeZone#utc_offset is up-to-date 59e23493ce60cb4431abb7a9c23c93bea758d3b6 gbuesing gbuesing@gmail.com 0d1c459bfb9ed8e33b80b547efc92accb12f8794 Phil Ross phil.ross@gmail.com http://github.com/rails/rails/commit/51572add2b78aea3c9faf605838e47c070090c52 51572add2b78aea3c9faf605838e47c070090c52 2008-11-18T07:21:02-08:00 2008-11-12T05:42:56-08:00 TimeZone: Caracas GMT offset changed to -4:30 [#1361 state:resolved] f1f85191dd1ef788de6e2432843d597e583fe45b gbuesing gbuesing@gmail.com 318beb56eb8ce86a325d60b71a118c282a4601ff gbuesing gbuesing@gmail.com http://github.com/rails/rails/commit/0d1c459bfb9ed8e33b80b547efc92accb12f8794 0d1c459bfb9ed8e33b80b547efc92accb12f8794 2008-11-18T07:14:41-08:00 2008-11-18T07:14:41-08:00 Update bundled TZInfo to 0.3.12 9011afde51555ec8b752311bdda86088d141e9d8 gbuesing gbuesing@gmail.com 850290cc22b22db59ac564c49998acf34d374e6c Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/ed949f35be68289a615b37d7d8c28ee0d6dd0266 ed949f35be68289a615b37d7d8c28ee0d6dd0266 2008-11-14T03:42:00-08:00 2008-11-14T03:39:40-08:00 Rails now requires rubygems 1.3.1 of higher. a13e08e005083107d26d9a6357d7fb5033e94b89 Pratik Naik pratiknaik@gmail.com 814d1ceb7d31ccad0eff8f2b98fd01e9e41abed9 Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/850290cc22b22db59ac564c49998acf34d374e6c 850290cc22b22db59ac564c49998acf34d374e6c 2008-11-14T03:30:30-08:00 2008-11-14T03:30:30-08:00 Deprecate update_attribute_with_validation_skipping. [#1357 state:resolved] 0dc6bd33996aa1a9b76b9cc9967ac60d4d653a3d Pratik Naik pratiknaik@gmail.com 30e5c5499c5cb2091facbc82653193ed9e815a4f Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/814d1ceb7d31ccad0eff8f2b98fd01e9e41abed9 814d1ceb7d31ccad0eff8f2b98fd01e9e41abed9 2008-11-14T03:23:04-08:00 2008-06-06T17:25:27-07:00 Simplify ActiveRecord::Base#update_attribute 22770066cc87b113094c6d7d30a3ec9bac4cedf5 Pratik Naik pratiknaik@gmail.com a3dd69da6d76fd8375e8d4da39ed254f8fcc3238 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/30e5c5499c5cb2091facbc82653193ed9e815a4f 30e5c5499c5cb2091facbc82653193ed9e815a4f 2008-10-26T12:05:08-07:00 2008-10-26T12:04:09-07:00 Remove reference to fformat to restore support for postgres gem. dd7b4e7c67aa30e2d16224072b31324d535fc33e Michael Koziarski michael@koziarski.com 197e61c5b1df89260ee5077c7e3c94e61a51b6a2 Adam Majer adamm@zombino.com http://github.com/rails/rails/commit/a3dd69da6d76fd8375e8d4da39ed254f8fcc3238 a3dd69da6d76fd8375e8d4da39ed254f8fcc3238 2008-10-25T03:55:40-07:00 2008-09-19T19:38:39-07:00 Fix binary data corruption bug in PostgreSQL adaptor 1. Move the binary escape/unescape from column to the driver - we should store binary data AR just like most other adaptors 2. check to make sure we only unescape bytea data PGresult.ftype( column ) == 17 that is passed to us in escaped format PGresult.fformat( column ) == 0 Signed-off-by: Michael Koziarski <michael@koziarski.com> [#1063 state:committed] 5521fcbe4e6b76cefd58514e9beadc59af521bfd Michael Koziarski michael@koziarski.com 8fad8d7e174cf4f1a5bb529f24f88028fbef39f5 Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/197e61c5b1df89260ee5077c7e3c94e61a51b6a2 197e61c5b1df89260ee5077c7e3c94e61a51b6a2 2008-10-24T13:13:55-07:00 2008-10-24T13:13:55-07:00 Revert "Fix script/console --sandbox warning. [#1194 state:resolved]" This reverts commit bbb2fda11564b2d40c6c07c5a3c91cccb77fb653. 0a26157659243db925afe10b8edd4bae0d05561f Pratik Naik pratiknaik@gmail.com d1922cc31585b02011bf2928b96f5550f9dc496c Jeffrey Hardy packagethief@gmail.com http://github.com/rails/rails/commit/8fad8d7e174cf4f1a5bb529f24f88028fbef39f5 8fad8d7e174cf4f1a5bb529f24f88028fbef39f5 2008-10-23T19:22:42-07:00 2008-10-22T12:42:36-07:00 Fix incorrect closing CDATA delimiter. Add tests for CDATA nodes. Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> 75ecabe56ac47dda4c745dcfcdf9d1f7137a59f9 Jeremy Kemper jeremy@bitsweat.net 15af6b315ee65afbc873889b6ad81b7e6b7e1b35 Jeffrey Hardy packagethief@gmail.com http://github.com/rails/rails/commit/d1922cc31585b02011bf2928b96f5550f9dc496c d1922cc31585b02011bf2928b96f5550f9dc496c 2008-10-23T19:22:30-07:00 2008-10-22T13:03:21-07:00 Fix that HTML::Node.parse would blow up on unclosed CDATA sections. If an unclosed CDATA section is encountered and parsing is strict, an exception will be raised. Otherwise, we consider the remainder of the line to be the section contents. This is consistent with HTML::Tokenizer#scan_tag. Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> e12b7d6b6a797a7ae924a1d1678b15e652496d1a Jeremy Kemper jeremy@bitsweat.net e929d74bf426306c7370179f0008846f11b1a2e8 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/15af6b315ee65afbc873889b6ad81b7e6b7e1b35 15af6b315ee65afbc873889b6ad81b7e6b7e1b35 2008-10-23T09:16:55-07:00 2008-10-23T09:16:55-07:00 Latest release.rb script a1f4a5bb52e126c008b1eacb3a6db28ceeb384da David Heinemeier Hansson david@loudthinking.com 4cf5f9a154c7c540edd643deea6c07e72101c2b4 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/e929d74bf426306c7370179f0008846f11b1a2e8 e929d74bf426306c7370179f0008846f11b1a2e8 2008-10-23T09:12:27-07:00 2008-10-23T09:12:27-07:00 Fix changelog for 2.1.1, all the 2.2.0 changes had snuck in there a736fb8eb1dc89d76b8076e81d667a1a67f779bc David Heinemeier Hansson david@loudthinking.com d9562809a8eb7ca14f3128b1b3b1d4a982062cff David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/4cf5f9a154c7c540edd643deea6c07e72101c2b4 4cf5f9a154c7c540edd643deea6c07e72101c2b4 2008-10-23T09:01:03-07:00 2008-10-23T09:01:03-07:00 Make ready for the 2.1.2 release ff2023e5df77f0c35b2fbb866d933f6bdb9246d7 David Heinemeier Hansson david@loudthinking.com 318beb56eb8ce86a325d60b71a118c282a4601ff Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/d9562809a8eb7ca14f3128b1b3b1d4a982062cff d9562809a8eb7ca14f3128b1b3b1d4a982062cff 2008-10-20T17:48:24-07:00 2008-10-20T17:47:27-07:00 Fix script/generate warning f3a2e19ef4fb7999c1cc2a248b3b5ed13a63284a Pratik Naik pratiknaik@gmail.com 3f3e3eba892486597ded527f8773cc36bea5c1d8 Geoff Garside geoff@geoffgarside.co.uk http://github.com/rails/rails/commit/318beb56eb8ce86a325d60b71a118c282a4601ff 318beb56eb8ce86a325d60b71a118c282a4601ff 2008-10-20T07:21:47-07:00 2008-10-20T06:54:42-07:00 Bump active_support/vendor.rb tzinfo version number [#1237 state:resolved] 230248690873180834fcb1c78ea00cad40737b51 gbuesing gbuesing@gmail.com 75b017caadf063a31f2f8d712a665e9f71ea19fc gbuesing gbuesing@gmail.com http://github.com/rails/rails/commit/3f3e3eba892486597ded527f8773cc36bea5c1d8 3f3e3eba892486597ded527f8773cc36bea5c1d8 2008-10-19T20:45:37-07:00 2008-10-19T20:45:37-07:00 TimeWithZone#freeze: preload instance variables so that we can actually freeze 68739c18bf778a576cbed5d69f9b8027c8786573 gbuesing gbuesing@gmail.com 9f9a6c4e4c2b431b59dede5d932536316ac57949 gbuesing gbuesing@gmail.com http://github.com/rails/rails/commit/75b017caadf063a31f2f8d712a665e9f71ea19fc 75b017caadf063a31f2f8d712a665e9f71ea19fc 2008-10-19T20:13:13-07:00 2008-10-19T20:13:13-07:00 Bundle TzInfo version 0.3.11 9a042e6e33ab609377130e1cd482e85f62f17898 gbuesing gbuesing@gmail.com 4a256d7769306a07beab936fd01c95ae621c9984 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/9f9a6c4e4c2b431b59dede5d932536316ac57949 9f9a6c4e4c2b431b59dede5d932536316ac57949 2008-10-19T06:40:32-07:00 2008-10-14T02:47:27-07:00 Sanitize the URLs passed to redirect_to to prevent a potential response spli CGI.rb and mongrel don't do any sanitization of the contents of HTTP headers cda76571a253a52994dcfa8a03f6f2b342a1cc06 Michael Koziarski michael@koziarski.com bbb2fda11564b2d40c6c07c5a3c91cccb77fb653 Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/4a256d7769306a07beab936fd01c95ae621c9984 4a256d7769306a07beab936fd01c95ae621c9984 2008-10-17T14:44:30-07:00 2008-10-17T14:43:26-07:00 Fix Brasilia timezone. [#1180 state:resolved] 5456d646146da16a8b0d955a0dc6102a3b7bee4c Pratik Naik pratiknaik@gmail.com cebfb5c90843e214f445edeab0ee1ece13c39ed9 Matt Jones al2o3cr@gmail.com http://github.com/rails/rails/commit/bbb2fda11564b2d40c6c07c5a3c91cccb77fb653 bbb2fda11564b2d40c6c07c5a3c91cccb77fb653 2008-10-08T17:41:21-07:00 2008-10-08T14:00:38-07:00 Fix script/console --sandbox warning. [#1194 state:resolved] Signed-off-by: Pratik Naik <pratiknaik@gmail.com> 932e80748c336c84b3a05d090895e912bc4f3890 Pratik Naik pratiknaik@gmail.com 03a6f74bdd8d0164525fa9bf89087be1160d6d6f Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/cebfb5c90843e214f445edeab0ee1ece13c39ed9 cebfb5c90843e214f445edeab0ee1ece13c39ed9 2008-10-05T07:08:00-07:00 2008-10-05T07:05:51-07:00 Update to 2.2 in the warnings 447d7f8c365d6b58c089469974dbcf561233e8d4 Michael Koziarski michael@koziarski.com 78feaf6be75a5fcb766a7d1dcedd52e890561081 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/03a6f74bdd8d0164525fa9bf89087be1160d6d6f 03a6f74bdd8d0164525fa9bf89087be1160d6d6f 2008-10-05T07:08:00-07:00 2008-10-05T07:05:07-07:00 Reference more detailed documentation on the country_select issue rather than just recommending the country_select plugin. ed5ac4869acefa42438c74b2ae94b51795daf942 Michael Koziarski michael@koziarski.com 6370ff37b1aeb3e9daa49ad65a00c6581b19c9f2 Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/78feaf6be75a5fcb766a7d1dcedd52e890561081 78feaf6be75a5fcb766a7d1dcedd52e890561081 2008-10-04T12:07:38-07:00 2008-10-04T12:03:42-07:00 Ensure Model.sum and Model.avg typecast appropriately. [#1066 state:resolved] Model.sum delegates typecasting to the column being summed. If that's not feasible, returns a string. Model.avg always returns big decimal. 6557159a1a269f8867410b5b1b96c96ddaa0e17f Pratik Naik pratiknaik@gmail.com 7823c50c975df975ca3237bfbe9ca0b3c60f6b6d Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/6370ff37b1aeb3e9daa49ad65a00c6581b19c9f2 6370ff37b1aeb3e9daa49ad65a00c6581b19c9f2 2008-10-03T12:35:16-07:00 2008-10-03T12:35:01-07:00 Remove AS for oracle compatibility 7db10820c0261539858f3e4a3576a7a896268423 Michael Koziarski michael@koziarski.com e34e6d67e3861dab5b6e21703c0fefa96e728158 Will Bryant will.bryant@gmail.com http://github.com/rails/rails/commit/7823c50c975df975ca3237bfbe9ca0b3c60f6b6d 7823c50c975df975ca3237bfbe9ca0b3c60f6b6d 2008-09-29T08:50:26-07:00 2008-09-23T22:00:35-07:00 fix eager loading's :condition sanitizing expanding against the wrong table Signed-off-by: Michael Koziarski <michael@koziarski.com> [#1101 state:commited] 4b8f745b5e31439bd745a5a7547df1f330827212 Michael Koziarski michael@koziarski.com 4526e35af89bc8db9d6ba13e4392f3f851a59bb9 Will Bryant will.bryant@gmail.com http://github.com/rails/rails/commit/e34e6d67e3861dab5b6e21703c0fefa96e728158 e34e6d67e3861dab5b6e21703c0fefa96e728158 2008-09-29T08:50:18-07:00 2008-09-23T21:44:56-07:00 wrote a test showing eager loading's misbehavior (sanitizing against the wrong table) when the association has a :conditions hash Signed-off-by: Michael Koziarski <michael@koziarski.com> 675dc6109865910cc56643b346edff03120f3113 Michael Koziarski michael@koziarski.com 7d2201d0bfe0cfcc01594a75c8a058f952fb07f3 Tarmo Tänav tarmo@itech.ee http://github.com/rails/rails/commit/4526e35af89bc8db9d6ba13e4392f3f851a59bb9 4526e35af89bc8db9d6ba13e4392f3f851a59bb9 2008-09-26T11:13:05-07:00 2008-09-26T10:57:56-07:00 Ignore all exceptions for validates_acceptance_of columns fetch so it can run even without a database connection Signed-off-by: Michael Koziarski <michael@koziarski.com> 1850d3e07ce8d0b85a263b3838dcfba6d9e0d5b2 Michael Koziarski michael@koziarski.com