f27e7ebc0e2a55a268631c78d49a5b70b06ad59a Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/9415935902f120a9bac0bfce7129725a0db38ed3 9415935902f120a9bac0bfce7129725a0db38ed3

2009-10-07T13:31:20-07:00

Switch to on-by-default XSS escaping for rails. This consists of: * String#html_safe! a method to mark a string as 'safe' * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it * Calls to String#html_safe! throughout the rails helpers * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB) * New ERB implementation based on erubis which uses a SafeBuffer instead of a String Hat tip to Django for the inspiration. 654d184caccfd7e1de4d60236fb7813bf1177d84 Michael Koziarski michael@koziarski.com 66eb05821b1cb522f497c874e7708fe705fb8356 Darragh Curran darragh@peelmeagrape.net http://github.com/rails/rails/commit/9cb8c812f2a23ab5653a7888740a014a02c97c18 9cb8c812f2a23ab5653a7888740a014a02c97c18

2009-06-21T09:07:22-07:00

2009-06-21T09:05:43-07:00

Add content_for?(:name) helper to check if content_for(:name) is present [#1311 state:resolved] Signed-off-by: Pratik Naik <pratiknaik@gmail.com> ed207d0ec3e013b1921a1c8951ba46d51fa86967 Pratik Naik pratiknaik@gmail.com ca8f8fb0316fe9a2f3a4756a781c9bf4cdcf465c Yehuda Katz + Carl Lerche ykatz+clerche@engineyard.com http://github.com/rails/rails/commit/b4a91db441fa9583df24fb8d3cf0d6906e8359db b4a91db441fa9583df24fb8d3cf0d6906e8359db

2009-06-17T18:55:10-07:00

Extract the layout proc into a method, and write documentation explaining what the proc does in various cases. 22fcca0337858a4bca669f51216561a3f7b97161 Yehuda Katz + Carl Lerche ykatz+clerche@engineyard.com 65102c8f1a55c8d73e44b62eed5e689017ace7cd Yehuda Katz + Carl Lerche ykatz+clerche@engineyard.com http://github.com/rails/rails/commit/a9ad763c86e110c280be0b7a763496f9e1204de0 a9ad763c86e110c280be0b7a763496f9e1204de0

2009-06-17T18:08:45-07:00

Drive the final stake through @content_for_*'s heart! f3f6fe2d86a4536cae6f1a9a7ddf73d67c59f2e0 Yehuda Katz + Carl Lerche ykatz+clerche@engineyard.com d120f9de7e150ea6a5f21c834c1f1d0a9ea25d1a Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/e23554d79e2db2324144f3ab58f82a895b93fbf5 e23554d79e2db2324144f3ab58f82a895b93fbf5

2009-05-28T15:12:48-07:00

2009-05-28T14:56:09-07:00

Ruby 1.9: flushing the output buffer preserves its encoding 35b715035f77d0488294f930ad42dece27076035 Jeremy Kemper jeremy@bitsweat.net 91d274059536f09dffd87141e570c3eab9ebd9b4 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/3d260760f035c5aab11ab218881ed36e3046157b 3d260760f035c5aab11ab218881ed36e3046157b

2009-03-13T00:25:05-07:00

Introduce flush_output_buffer to append the buffer to the response body then start a new buffer. Useful for pushing custom parts to the response body without disrupting template rendering. 4d75d5d2bcb6693a4768abc2ddc581c27196d227 Jeremy Kemper jeremy@bitsweat.net fbef982e4b906b879240a35a1ecff447007da6b2 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/ecc054352512cac8c0895c78c5f3d043046dcfec ecc054352512cac8c0895c78c5f3d043046dcfec

2008-07-15T18:42:22-07:00

JavaScriptGenerator should only sets output_buffer for the duration of the update block f912cb8d90909eb829a7f7aec9f0d021bcad2790 Jeremy Kemper jeremy@bitsweat.net c00baf496ef40d09962aabcb63d6d319cb8a0584 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/6b9f8adb3eff3be81653bd565be4ff9c63cd775d 6b9f8adb3eff3be81653bd565be4ff9c63cd775d

2008-07-11T10:23:21-07:00

2008-07-11T10:22:43-07:00

Whitespace 65cb64ea1715cc3fdf116ded0b25524da51c82c9 Michael Koziarski michael@koziarski.com c440c9b199d7474e356472616ef03f9c7e17c405 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/72f93b581f1d1a7496ccebbd90578714c171c5a5 72f93b581f1d1a7496ccebbd90578714c171c5a5

2008-06-19T22:21:56-07:00

2008-06-19T22:03:27-07:00

Check whether blocks are called from erb using a special __in_erb_template variable visible in block binding. 0e89550d0297bba6a87c8eae507c7388d62c92e8 Jeremy Kemper jeremy@bitsweat.net df44df945d6315238e7d94d9bdef82e435dc9b24 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/c88f2b5e23b0cb6c1a3b3687958f45d518414041 c88f2b5e23b0cb6c1a3b3687958f45d518414041

2008-06-08T20:35:30-07:00

2008-06-08T20:35:14-07:00

with_output_buffer returns the temporary buffer instead of the result of the block 9ca56019a073aea37fc5eda1b4735e1e21428425 Jeremy Kemper jeremy@bitsweat.net d9fb021845c0481c5119eebdc534aec427072f7d Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/ff5f155f8dc1d2ba363718c3e17f99719399eab5 ff5f155f8dc1d2ba363718c3e17f99719399eab5

2008-06-08T20:05:39-07:00

Use output_buffer reader and writer methods exclusively instead of hitting the instance variable so others can override the methods. 6d6e353284cc9c630697ae92f710df499d2f8197 Jeremy Kemper jeremy@bitsweat.net 26ec1be24a820327d00e22fb65764a3dc06977e2 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/fe9d2ad6e84626d34f1850ef4668a87787d5c6b0 fe9d2ad6e84626d34f1850ef4668a87787d5c6b0

2008-06-06T18:01:14-07:00

Remove some internal dead code that supported content_for cdf7ec66399be11bc0ba25cb223995def4b8181c Jeremy Kemper jeremy@bitsweat.net 933697a5fc5f4c56c4fd7fbbd31b8973df9c1054 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/0bdb7d353b4ac6f5470884360f9a480a16bd709c 0bdb7d353b4ac6f5470884360f9a480a16bd709c

2008-06-02T21:32:50-07:00

2008-06-02T13:32:58-07:00

Work with @output_buffer instead of _erbout 53d266015cf696c280b9ba37995c9d1f6bd02358 Jeremy Kemper jeremy@bitsweat.net da91450e687fe9faa7b0575062c2b2aacc261f68 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/933697a5fc5f4c56c4fd7fbbd31b8973df9c1054 933697a5fc5f4c56c4fd7fbbd31b8973df9c1054

2008-06-02T21:32:50-07:00

2008-06-02T09:12:00-07:00

Try replacing _erbout with @output_buffer 44f55a5c801e94db8c3637c73dfc6db7f2c3350d Jeremy Kemper jeremy@bitsweat.net db3a60eb92707912461c76895492f6b018b63cc5 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/b7aa22355413e4c160dbbe280006022bb193cce5 b7aa22355413e4c160dbbe280006022bb193cce5

2008-03-28T13:03:28-07:00

Update doc (closes #11402) git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@9116 5ecf4fe2-1ee6-0310-87b1-e25e094e27de c09f4b4fa0068a57fbc9d3d0fce5f0be6d663caf David Heinemeier Hansson david@loudthinking.com 7cb1f93bcccb2fe476c85e4df71eea06db9a3a5b David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/e3b49c052b497827c9f058feaa066bbfe184f4da e3b49c052b497827c9f058feaa066bbfe184f4da

2007-09-28T07:18:47-07:00

Fixed spelling errors (closes #9706) [tarmo/rmm5t] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7666 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 4224be14c405d38f7a8911f52360bdd0150673ce David Heinemeier Hansson david@loudthinking.com 8e78a4542e80a2d8d593547ecf8021b0e2902a0d David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/e70bb8031f17c113810aa334aa524b2ed34cbb5f e70bb8031f17c113810aa334aa524b2ed34cbb5f

2007-09-24T16:01:50-07:00

Stop rdoc from whining git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7622 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 139e3408b1ca3e82bdc10f87779054066c6ecb24 David Heinemeier Hansson david@loudthinking.com 0d5a7d1d8c921c3f34f52d3e188de11cff0964e9 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/415649760226a7987ba1f8d234c1785d0fa333b0 415649760226a7987ba1f8d234c1785d0fa333b0

2007-09-20T20:40:25-07:00

Fixed CaptureHelper#content_for to work with the optional content parameter instead of just the block #9434 [sandofsky/wildchild] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7522 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 52bb4ffe58b508cd6a9423ef611a1ccc67627bcf David Heinemeier Hansson david@loudthinking.com 3029a76af32113676182f902ad4f91d82c2734de David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/80150a0cfb778a9b7ec765106f0487bf1b7e1bf8 80150a0cfb778a9b7ec765106f0487bf1b7e1bf8

2007-07-23T18:19:08-07:00

Its just ERb now git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7211 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 25ca08b29f3eca9873284a6137408728f64579cf David Heinemeier Hansson david@loudthinking.com f26141c98deed64009b95190e25700eecdfdc403 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/dfc15e122afcc7e3cfabaadfbac639af7e846b5a dfc15e122afcc7e3cfabaadfbac639af7e846b5a

2007-06-28T11:32:34-07:00

Improve capture helper documentation. Closes #8796. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7148 5ecf4fe2-1ee6-0310-87b1-e25e094e27de a452750e7855d137531e81b7ca523f8e40213891 Jeremy Kemper jeremy@bitsweat.net 8aefa3ee75e261488a39ea9d26a767c9db696c20 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/b00e6a984df51a2f891c2a4c819ac2ab08359eed b00e6a984df51a2f891c2a4c819ac2ab08359eed

2007-06-23T10:49:18-07:00

Massive documentation update for all helpers (closes #8223, #8177, #8175, #8108, #7977, #7972, #7971, #7969) [jeremymcanally] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@7106 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 963bdbbc51159f294be459788c2a57eef0624f1d David Heinemeier Hansson david@loudthinking.com 89cb34c9cfe9d169b79206b74c602e91bc7116a5 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/e1056530665d5c8eed2c325157fbb88553eb2678 e1056530665d5c8eed2c325157fbb88553eb2678

2007-02-20T14:09:12-08:00

Added .erb and .builder as preferred aliases to the now deprecated .rhtml and .rxml extensions [Chad Fowler]. This is done to separate the renderer from the mime type. .erb templates are often used to render emails, atom, csv, whatever. So labeling them .rhtml doesn't make too much sense. The same goes for .rxml, which can be used to build everything from HTML to Atom to whatever. .rhtml and .rxml will continue to work until Rails 3.0, though. So this is a slow phasing out. All generators and examples will start using the new aliases, though. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@6178 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 30341bae8b9a63faed289f9dc56c1a654a449731 David Heinemeier Hansson david@loudthinking.com 495f113e57c5b5db883c9a395aa80f8ccfc171bf Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/96cca7db6dd2022d74fd94eb532ceacc8913b57b 96cca7db6dd2022d74fd94eb532ceacc8913b57b

2006-11-17T05:10:23-08:00

ActionView::Base.erb_variable accessor names the buffer variable used to render templates. Defaults to _erbout; use _buf for erubis. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@5544 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 98f4ba262dc540b405542dd430d55b9a17a6ae91 Jeremy Kemper jeremy@bitsweat.net ba5591f21240534186714efad207d3d8558ad391 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/afd288cf8141eca321061cb00879f52108d68013 afd288cf8141eca321061cb00879f52108d68013

2006-10-22T16:41:11-07:00

Fixed that setting RAILS_ASSET_ID to "" should not add a trailing slash after assets (closes #6454) [BobSilva/chrismear] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@5335 5ecf4fe2-1ee6-0310-87b1-e25e094e27de f23c8230880c5c012f9ef1a5b30849584221b339 David Heinemeier Hansson david@loudthinking.com 91531372f9b7130f8a940cdb23f19984b65a60fa Marcel Molina marcel@vernix.org http://github.com/rails/rails/commit/fe8db233712de8ce77e226a11ee737e078e06e0f fe8db233712de8ce77e226a11ee737e078e06e0f

2006-04-26T07:40:26-07:00

Fix documentation indentation git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@4275 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 62114f058b443369bd37eafdabe577a6d16608a2 Marcel Molina marcel@vernix.org 51cd1aec00c182c6789f09f9bf40365934034bcd Marcel Molina marcel@vernix.org http://github.com/rails/rails/commit/7bb20659c295d2b6a2820295b948ae3a2c0fa99e 7bb20659c295d2b6a2820295b948ae3a2c0fa99e

2006-04-24T21:03:51-07:00

Update layout and content_for documentation to use yield rather than magic @content_for instance variables. git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@4262 5ecf4fe2-1ee6-0310-87b1-e25e094e27de c719fba93498776b64cc54aabadcffa0e7b8a082 Marcel Molina marcel@vernix.org 26eaf073c4de8276663f927fdeeb91453e8b3956 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/3d1b51b4411ffe8de92d997b824637f9eaf47bb1 3d1b51b4411ffe8de92d997b824637f9eaf47bb1

2006-02-26T11:47:50-08:00

Added .rxml (and any non-rhtml template, really) supportfor CaptureHelper#content_for and CaptureHelper#capture #3287 [Brian Takita] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@3669 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 2bdc1efce7f43615960f4b2ba2f2277c7395cd3d David Heinemeier Hansson david@loudthinking.com 852e5a435de6413785b21fdbf6ba6175a0bc09f3 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/3ccea931fac2872ffb26014592c036b5d137655f 3ccea931fac2872ffb26014592c036b5d137655f

2005-07-24T08:27:47-07:00

Simplify content_for implementation git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@1914 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 1e7bfc548ae022ff15bf308c7333a50d2f1fb16f David Heinemeier Hansson david@loudthinking.com b25f9af998ad26653083e004b7a6cb9ca0061940 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/1ae0a53d861c43dff8883fc956a08404c23f180c 1ae0a53d861c43dff8883fc956a08404c23f180c

2005-07-24T06:20:29-07:00

Fixed regression for content_for #1820 [Stefan Kaes] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@1911 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 25f85878792f5bcd655872ed3bd0fecce6369a65 David Heinemeier Hansson david@loudthinking.com 0bdd44accae978a04f51b1adace09db3a6f77f33 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/f2a021dc06d934f569977a05fa4e579e3f593d34 f2a021dc06d934f569977a05fa4e579e3f593d34

2005-06-20T23:43:14-07:00

Added option to pass in parameters to CaptureHelper#capture, so you can create more advanced view helper methods #1466 [duane.johnson@gmail.com] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@1459 5ecf4fe2-1ee6-0310-87b1-e25e094e27de aaa4c157d7507f88ff315267997b66d6695ea526 David Heinemeier Hansson david@loudthinking.com 90f78e2bd14d2aa6c14ad132bdcdc4270fac0077 David Heinemeier Hansson david@loudthinking.com http://github.com/rails/rails/commit/823a918a52c1cc6c5707ef923eadb065a471d4a5 823a918a52c1cc6c5707ef923eadb065a471d4a5

2005-03-14T15:37:38-08:00

Added CaptureHelper with CaptureHelper#capture and CaptureHelper#content_for. See documentation in helper #837 [Tobias Luetke] git-svn-id: http://svn-commit.rubyonrails.org/rails/trunk@907 5ecf4fe2-1ee6-0310-87b1-e25e094e27de 1f9d58676083f49c49ad53eb991fc708e587f7b5 David Heinemeier Hansson david@loudthinking.com