63f9426d455af0fcf25c20bb7bb8fdfd9a4b79a8 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/a60779f7e69a7045a308844e9464d7d6b9cac94d a60779f7e69a7045a308844e9464d7d6b9cac94d 2009-09-13T05:07:42-07:00 2009-08-22T15:53:19-07:00 Ruby 1.9: fix Time#beginning_of_day inaccuracy due to subtracting a Float 0ee8109c5c4f134c70102de13a9d33172d299d98 Jeremy Kemper jeremy@bitsweat.net e9a5ef475586f9565ea783632d6a4a25ce1aa874 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/63f9426d455af0fcf25c20bb7bb8fdfd9a4b79a8 63f9426d455af0fcf25c20bb7bb8fdfd9a4b79a8 2009-09-13T04:53:29-07:00 2009-09-13T04:53:29-07:00 Ruby 1.9 compat: no . in load path 66d15a1e3aac0214c1429c12b9d5e03bae20a5ff Jeremy Kemper jeremy@bitsweat.net 8d354bc792265ce8d125cbd868663b42fdbf8c9f Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/e9a5ef475586f9565ea783632d6a4a25ce1aa874 e9a5ef475586f9565ea783632d6a4a25ce1aa874 2009-09-13T04:51:51-07:00 2009-09-13T04:48:40-07:00 Silence warning for Encoding.default_external= 31af92430d50f08f45347d96741a8abd17f18ec5 Jeremy Kemper jeremy@bitsweat.net 76e971ecfbb55981ce6ee6ee97dc7d35c511a3f0 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/8d354bc792265ce8d125cbd868663b42fdbf8c9f 8d354bc792265ce8d125cbd868663b42fdbf8c9f 2009-09-13T04:51:43-07:00 2009-09-13T04:43:41-07:00 Use Encoding.default_external, not _internal 4861ea08ca7dcb4ffa98f31802c564edd859aa9b Jeremy Kemper jeremy@bitsweat.net 095cf9135b3ae2e3f88effec9a47e4ae30a71940 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/76e971ecfbb55981ce6ee6ee97dc7d35c511a3f0 76e971ecfbb55981ce6ee6ee97dc7d35c511a3f0 2009-09-12T15:38:57-07:00 2009-09-12T15:38:57-07:00 Dup the arguments to string compare so we can use force_encoding. 85cfc74a7b900e981c7927204e94f73cd69a3c69 Michael Koziarski michael@koziarski.com 26306f9292f59a6b7fbacbb4369583944e36701d Beau Harrington bohford@gmail.com http://github.com/rails/rails/commit/095cf9135b3ae2e3f88effec9a47e4ae30a71940 095cf9135b3ae2e3f88effec9a47e4ae30a71940 2009-09-10T17:37:27-07:00 2009-09-09T22:25:23-07:00 Remove redundant checks for valid character regexp in ActiveSupport::Multibyte#clean and #verify. [#3181 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> 1d5d1b27270950131673e6ef68bb4e47c5c27901 Jeremy Kemper jeremy@bitsweat.net 896475c192c4aad833b980fee07785925f04dc47 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/26306f9292f59a6b7fbacbb4369583944e36701d 26306f9292f59a6b7fbacbb4369583944e36701d 2009-09-08T15:47:01-07:00 2009-09-08T15:47:01-07:00 1.9 compatible secure_compare e37b1da691b0993b5bda3da93395ad94d3a893e6 Michael Koziarski michael@koziarski.com 91f65b714b7018a74402ee02a000b19a090ad556 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/896475c192c4aad833b980fee07785925f04dc47 896475c192c4aad833b980fee07785925f04dc47 2009-09-08T15:27:19-07:00 2009-09-08T15:27:19-07:00 Revert "Ruby 1.9: fix MessageVerifier#secure_compare" This reverts commit 91f65b714b7018a74402ee02a000b19a090ad556. MessageVerifier was never in 2.2 bb665349ee524dd494fda64622b4b9655879517a Michael Koziarski michael@koziarski.com 7a48cd64624b9114b4530db758c483c9cf2a876b Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/91f65b714b7018a74402ee02a000b19a090ad556 91f65b714b7018a74402ee02a000b19a090ad556 2009-09-07T22:22:38-07:00 2009-09-07T22:05:33-07:00 Ruby 1.9: fix MessageVerifier#secure_compare 1eb8e937d5bd093e84d54aa5ce3f085574e3708c Jeremy Kemper jeremy@bitsweat.net 6363822f185db35f53a292550c4e8b257c964a21 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/7a48cd64624b9114b4530db758c483c9cf2a876b 7a48cd64624b9114b4530db758c483c9cf2a876b 2009-09-07T22:20:06-07:00 2009-09-07T22:20:06-07:00 Fix AS test breakage bb665349ee524dd494fda64622b4b9655879517a Jeremy Kemper jeremy@bitsweat.net 31678df21276f0a986a4e39a69a4c10a2236a2ce rick technoweenie@gmail.com http://github.com/rails/rails/commit/6363822f185db35f53a292550c4e8b257c964a21 6363822f185db35f53a292550c4e8b257c964a21 2009-09-03T23:11:12-07:00 2009-09-03T23:11:12-07:00 Prepare for Rails 2.2.3 release. e7193265ff31faad2c7c6fc1312722eb54a268c0 rick technoweenie@gmail.com 9c61eb32c534c706815f80eb375012cdcf854e71 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/31678df21276f0a986a4e39a69a4c10a2236a2ce 31678df21276f0a986a4e39a69a4c10a2236a2ce 2009-08-31T12:20:55-07:00 2009-08-31T12:07:30-07:00 Clean tag attributes before passing through the escape_once logic. Addresses CVE-2009-3009 65581aa5bbe86b4697805f44197b7d789c09710a Michael Koziarski michael@koziarski.com 674f780d59a5a7ec0301755d43a7b277a3ad2978 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/9c61eb32c534c706815f80eb375012cdcf854e71 9c61eb32c534c706815f80eb375012cdcf854e71 2009-08-31T12:20:46-07:00 2009-08-31T12:20:46-07:00 Add verify and clean methods to ActiveSupport::Multibyte. When accepting character input from outside of your application you can't blindly trust that all strings are properly encoded. With these methods you can check incoming strings and clean them up if necessary. Signed-off-by: Michael Koziarski <michael@koziarski.com> Conflicts: activesupport/lib/active_support/multibyte/chars.rb c304190ab11357f1735899ff7a690b3c6aefa5b7 Michael Koziarski michael@koziarski.com 3cb89257b4d7bd706c642e0838909ed13019f557 Michael Koziarski michael@koziarski.com http://github.com/rails/rails/commit/674f780d59a5a7ec0301755d43a7b277a3ad2978 674f780d59a5a7ec0301755d43a7b277a3ad2978 2009-08-22T22:26:46-07:00 2009-08-22T22:26:46-07:00 Fix timing attack vulnerability in the Cookie Store Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC 30cd78cd7244d2c5b59f1debea8e208c5888554e Michael Koziarski michael@koziarski.com 2dab082d0e1382eb0bc6a143bef6db8deebfd812 Pratik Naik pratiknaik@gmail.com http://github.com/rails/rails/commit/3cb89257b4d7bd706c642e0838909ed13019f557 3cb89257b4d7bd706c642e0838909ed13019f557 2009-04-20T05:56:28-07:00 2009-04-20T05:51:11-07:00 Ensure JoinAssociation uses aliased table name when multiple associations have hash conditions on the same table bff43f96613ccd6ee2064ecfd2e91a37ab9787ac Pratik Naik pratiknaik@gmail.com 5f95347af583d2e2a67631da02e0293679991612 Frederick Cheung frederick.cheung@gmail.com http://github.com/rails/rails/commit/2dab082d0e1382eb0bc6a143bef6db8deebfd812 2dab082d0e1382eb0bc6a143bef6db8deebfd812 2009-04-01T07:51:10-07:00 2008-12-10T12:57:19-08:00 Don't use the transaction instance method so that people with has_one/belongs_to :transaction aren't fubared [#1551 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> d66a3afff89ea0be1cafb5657f829eb963614eeb Pratik Naik pratiknaik@gmail.com b6ad4bd0a23f4fcb7201b512445fdb0da33a73bd Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/5f95347af583d2e2a67631da02e0293679991612 5f95347af583d2e2a67631da02e0293679991612 2009-03-10T23:11:51-07:00 2009-03-10T23:11:05-07:00 Don't duplicate :order from scope and options, it makes mysql do extra work 3883638067e200b597d00b20f6a17cfab24f2257 Jeremy Kemper jeremy@bitsweat.net 763effcb6d6f3145540797d68dda32f539b1d499 Sam Granieri sam@samgranieri.com http://github.com/rails/rails/commit/b6ad4bd0a23f4fcb7201b512445fdb0da33a73bd b6ad4bd0a23f4fcb7201b512445fdb0da33a73bd 2009-02-25T09:39:10-08:00 2009-02-22T19:24:53-08:00 Ruby 1.9 compat: silence a warning about regexp languages [#2050 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> ebb3c7369cc0f8731146235ce69b8b5eea9f5214 Jeremy Kemper jeremy@bitsweat.net a9aa18fdcdf3146ccbdecff71e52015f26a0f0b7 51eb04c84c40bd9cdfeda3b14fa7048773329cba rick technoweenie@gmail.com http://github.com/rails/rails/commit/763effcb6d6f3145540797d68dda32f539b1d499 763effcb6d6f3145540797d68dda32f539b1d499 2009-02-25T09:11:58-08:00 2009-02-25T09:11:58-08:00 Merge branch '2-2-stable' of git@github.com:rails/rails into 2-2-stable 364f330936757e13f8784495f6d8909e77cd0a9b rick technoweenie@gmail.com e5c211c5eb6e8f1651130b7aa0a5291e5d184ab4 Diego Algorta diego@oboxodo.com http://github.com/rails/rails/commit/a9aa18fdcdf3146ccbdecff71e52015f26a0f0b7 a9aa18fdcdf3146ccbdecff71e52015f26a0f0b7 2009-02-25T09:10:40-08:00 2009-02-12T22:07:39-08:00 Fixed bug that makes named_scopes _forgot_ current scope Signed-off-by: rick <technoweenie@gmail.com> [#1960 #1677 state:resolved] 82a45818235f7ea9784b76c38e909989ca612322 rick technoweenie@gmail.com ce41582d276ccc25f338c11ebfb9a59f4c918ecb Andrew White andyw@pixeltrix.co.uk http://github.com/rails/rails/commit/51eb04c84c40bd9cdfeda3b14fa7048773329cba 51eb04c84c40bd9cdfeda3b14fa7048773329cba 2009-02-21T18:41:16-08:00 2009-02-21T18:41:16-08:00 Remove hardcoded number_of_capturesin ControllerSegment to allow regexp requirements with capturing parentheses dd1a71410e601471157134de75e6a45eaff5783f Michael Koziarski michael@koziarski.com 0f93f8c4c87792c2fc0ffb044040e336edf0c43a Andrew White andyw@pixeltrix.co.uk http://github.com/rails/rails/commit/ce41582d276ccc25f338c11ebfb9a59f4c918ecb ce41582d276ccc25f338c11ebfb9a59f4c918ecb 2009-02-21T18:38:05-08:00 2009-01-16T01:16:18-08:00 Fix requirements regexp for path segments Signed-off-by: Michael Koziarski <michael@koziarski.com> b4eece3edc6b6a25cce976c294b817e6f20fd35e Michael Koziarski michael@koziarski.com 518389d1ef41f8c4116bc844bad44356c7aa4f9d Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/0f93f8c4c87792c2fc0ffb044040e336edf0c43a 0f93f8c4c87792c2fc0ffb044040e336edf0c43a 2009-02-20T18:42:48-08:00 2009-02-20T18:42:48-08:00 Update changelog for URI.unescape fix [#2033 state:committed] 4711e4e651eb2a8d7d5e808af46c06438c103065 Jeremy Kemper jeremy@bitsweat.net faf7986bae995d147eadc2ea8bdd1835cdf7c15c Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/518389d1ef41f8c4116bc844bad44356c7aa4f9d 518389d1ef41f8c4116bc844bad44356c7aa4f9d 2009-02-20T18:38:32-08:00 2009-02-20T18:38:18-08:00 Broaden URI.unescape fix to all affected 1.9.x by checking for broken behavior instead of specific patchlevel 111ceae2bce222bf819f4645e76dcd705aea9311 Jeremy Kemper jeremy@bitsweat.net 99341a2d80a3ff516ae1e5f217340c6adec2b39b moro moronatural@gmail.com http://github.com/rails/rails/commit/faf7986bae995d147eadc2ea8bdd1835cdf7c15c faf7986bae995d147eadc2ea8bdd1835cdf7c15c 2009-02-20T18:31:48-08:00 2009-02-15T02:35:08-08:00 fix test data, should specify encoding to use multibyte chars on Ruby 1.9 Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> 68674de063daac07b420900b5fcc199c99205be1 Jeremy Kemper jeremy@bitsweat.net a8f32e1c86d73623cf93cdcf1683a23e3af47ce3 Jeremy Kemper jeremy@bitsweat.net http://github.com/rails/rails/commit/99341a2d80a3ff516ae1e5f217340c6adec2b39b 99341a2d80a3ff516ae1e5f217340c6adec2b39b 2009-02-20T18:26:32-08:00 2009-02-20T18:25:02-08:00 URI.unescape fix removes the old unescape method a47eed3361951c7842ffdba3bc4a932c718faf59 Jeremy Kemper jeremy@bitsweat.net 3d15e1a7b5c996baf11728ed32945b0d27418b1a moro moronatural@gmail.com http://github.com/rails/rails/commit/a8f32e1c86d73623cf93cdcf1683a23e3af47ce3 a8f32e1c86d73623cf93cdcf1683a23e3af47ce3 2009-02-20T18:26:22-08:00 2009-02-15T02:34:04-08:00 Ruby 1.9.1p0's URI.decode() bug fix backport to fix Ruby 1.9.1p0 bug on [ruby-dev:38005]. Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> 0cc5345ab86ff1eb3d587646d7db47faf35f3e14 Jeremy Kemper jeremy@bitsweat.net 13bf5c5a6ae510cd17f05ac24cad5df9dda42342 Bruno Duyé brunetton@gmail.com http://github.com/rails/rails/commit/3d15e1a7b5c996baf11728ed32945b0d27418b1a 3d15e1a7b5c996baf11728ed32945b0d27418b1a 2009-02-19T19:01:55-08:00 2009-02-19T19:01:18-08:00 Make atomic_write() puts the check_file in the cache dir, not in application root [#1962 state:resolved] Signed-off-by: Joshua Peek <josh@joshpeek.com> 7cd30e52f4761d2e3fea54c4938c11b7084e8c5b Joshua Peek josh@joshpeek.com b0792a3e7be88e3060af19bab01cd3d26d347e4c Akira Matsuda ronnie@dio.jp http://github.com/rails/rails/commit/13bf5c5a6ae510cd17f05ac24cad5df9dda42342 13bf5c5a6ae510cd17f05ac24cad5df9dda42342 2009-02-17T11:59:49-08:00 2009-02-14T11:09:50-08:00 Ruby 1.9 compat: fix JSON decoding to work properly with multibyte values [#1969 state:committed] Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net> 675ef8c18247cdab4a0eb4c9f4403f6b90660fc9 Jeremy Kemper jeremy@bitsweat.net 96687ad8a9430829910c2146959da15ef0ed016d Joshua Sierles joshua@37signals.com http://github.com/rails/rails/commit/b0792a3e7be88e3060af19bab01cd3d26d347e4c b0792a3e7be88e3060af19bab01cd3d26d347e4c 2009-02-12T11:24:36-08:00 2009-02-12T11:24:36-08:00 Allow memcache-client versions > 1.5.x to override bundled version Signed-off-by: Joshua Peek <josh@joshpeek.com> 6694f046ff2bad313da53a63c38b7b0d60638543 Joshua Peek josh@joshpeek.com