Permalink
Commits on Jan 16, 2013
  1. Fix for CVE-2013-0155

    ernie committed with jkraemer Jan 8, 2013
Commits on Jan 10, 2013
Commits on Jan 9, 2013
Commits on Jan 8, 2013
  1. bumping to 2.3.15 😢🔫

    tenderlove committed Jan 8, 2013
Commits on Jan 7, 2013
Commits on Jan 3, 2013
  1. Merge pull request #6722 from adgear/2-3-stable

    tenderlove committed Jan 3, 2013
    Backported rails 2.3 fix for CVE-2012-2695
Commits on Jan 2, 2013
Commits on Dec 23, 2012
Commits on Jun 15, 2012
  1. fix gemspecs

    jkraemer committed Jun 15, 2012
Commits on Jun 13, 2012
  1. Fix SQL injection via nested hashes in conditions

    Justin Collins committed with Mina Naguib Jun 2, 2012
  2. update gemspecs to 2.3.14

    jkraemer committed Jun 13, 2012
  3. Adding .gemspec files for all gems in the 2-3-stable version of rails…

    mt committed with jkraemer Nov 1, 2010
    …, copied and pasted together from the Rakefiles in the gem directories.
    
    This way, you can point to this branch from a Gemfile and bundler can pick up the gems in the gem directories.
    
    Had to copy&paste two classes/modules from the rake gem into the railties .gemspec file, as it's using FileList and requiring rake there
    is a circular dependency.
  4. Fix SQL injection via nested hashes in conditions

    Justin Collins committed with jkraemer Jun 2, 2012
Commits on Mar 29, 2012
  1. Merge pull request #5653 from eee-c/patch-1

    fxn committed Mar 29, 2012
    Doc fixes in 2.3: validates_length_of
Commits on Dec 31, 2011
  1. Merge pull request #4247 from amatsuda/hashdos_23

    josevalim committed Dec 31, 2011
    bump up rack version to the one that includes the Hash DoS fix
Commits on Dec 29, 2011
  1. Merge pull request #4202 from dasch/request-remote-ip

    tenderlove committed Dec 29, 2011
    Fix bug in `ActionController::Request#remote_ip`
Commits on Dec 27, 2011
  1. Make Request#remote_ip return nil when HTTP_X_FORWARDED_FOR is empty

    dasch committed Dec 27, 2011
    If HTTP_X_FORWARDED_FOR only contains whitespace, don't try to extract a
    list of IP addresses from it.
Commits on Aug 16, 2011
  1. fixing sql injection problem

    tenderlove committed Aug 16, 2011
  2. 2.3.14. yay. :'(

    tenderlove committed Aug 16, 2011
  3. bumping to 2.3.13

    tenderlove committed Aug 16, 2011
  4. adding notification for rdoc

    tenderlove committed Aug 16, 2011
Commits on Aug 4, 2011
Commits on Jul 27, 2011
  1. contrib app minor tweak

    fxn committed Jul 27, 2011
Commits on Jun 17, 2011
  1. Merge pull request #1740 from Antiarchitect/2-3-stable

    josevalim committed Jun 17, 2011
    Fix OrderedHash merging with block given.
Commits on Jun 16, 2011
Commits on Jun 9, 2011
  1. Remove deprecation warning for ActiveRecord::Errors#generate_message.…

    bcardarella committed with tenderlove Jun 9, 2011
    … This is the same API that ActiveModel ended up using and that won't be changing.
Commits on Jun 7, 2011