Skip to content


Subversion checkout URL

You can clone with
Download ZIP
Commits on Feb 5, 2010
  1. @jeremy

    Backport html_safe. Use latest rails_xss plugin for forward-compatibi…

    Santiago Pastorino and José Ignacio Costa committed with jeremy
    …lity with Rails 3.
Commits on Oct 8, 2009
  1. @NZKoz

    Merge the prerequisites for on-by-default XSS escaping into rails.

    NZKoz committed
    This consists of:
    * String#html_safe! a method to mark a string as 'safe'
    * ActionView::SafeBuffer a string subclass which escapes anything unsafe which is concatenated to it
    * Calls to String#html_safe! throughout the rails helpers
    * a 'raw' helper which lets you concatenate trusted HTML from non-safety-aware sources (e.g. presantized strings in the DB)
    Note, this does *not* give you on-by-default XSS escaping in 2.3 applications.  To get that you'll need to install a plugin:
Commits on Jun 15, 2009
  1. @josh

    Add :concat option to asset tag helpers to force concatenation.

    josh committed
    This is useful for working around IE's stylesheet limit.
      stylesheet_link_tag :all, :concat => true
Commits on Jun 11, 2009
  1. @akaspick @NZKoz

    allow absolute paths for the asset caches

    akaspick committed with NZKoz
    Signed-off-by: Michael Koziarski <>
Commits on Feb 5, 2009
  1. @pixeltrix @josh

    Eliminate unnecessary File.exist? when correct file extension given [#…

    pixeltrix committed with josh
    …1879 state:resolved]
    Signed-off-by: Joshua Peek <>
Commits on Jan 18, 2009
  1. @lifo

    Merge docrails

    lifo committed
Commits on Jan 4, 2009
  1. @josh

    Cache AssetTag timestamps

    josh committed
Commits on Jan 2, 2009
  1. @josh
Commits on Jan 1, 2009
  1. @dhh

    Fixed the AssetTagHelper cache to use the computed asset host as part…

    dhh committed
    … of the cache key instead of just assuming the its a string [#1299 state:committed]
Commits on Dec 1, 2008
  1. @tekin @NZKoz

    Ensure ActionMailer doesn't blow up when a two argument proc is set f…

    tekin committed with NZKoz
    …or the asset host
    Signed-off-by: Michael Koziarski <>
    [#1394 state:committed]
Commits on Nov 29, 2008
  1. @svenfuchs @josh

    Make sure #compute_public_path caching allows to return different res…

    svenfuchs committed with josh
    …ults for different given sources [#1471 state:resolved]
    Signed-off-by: Joshua Peek <>
Commits on Nov 27, 2008
  1. @dhh
Commits on Nov 19, 2008
  1. @aaronbatalion @jeremy

    need to make sure the asset type is cached with it in Cache.. name is…

    aaronbatalion committed with jeremy
    … sufficient, not self
    Signed-off-by: Jeremy Kemper <>
  2. @aaronbatalion @josh

    Fixed asset host to not cache objects [#1419 state:resolved]

    aaronbatalion committed with josh
    Signed-off-by: Joshua Peek <>
Commits on Oct 26, 2008
  1. @dhh

    Fixed bug with asset timestamping when using relative_url_root (Joe G…

    dhh committed
    …oldwasser) [#1265 status:committed]
Commits on Oct 6, 2008
  1. @lifo

    Fix image_tag behavior on windows. [#1085 state:resolved]

    madlep committed with lifo
    Signed-off-by: Pratik Naik <>
Commits on Sep 22, 2008
  1. @martinrehfeld @josh

    Fixed AssetTag cache with with relative_url_root [#1022 state:resolved]

    martinrehfeld committed with josh
    Signed-off-by: Joshua Peek <>
  2. @josh
Commits on Sep 11, 2008
  1. @josh
Commits on Sep 2, 2008
  1. @clemens @jeremy

    Removed unnecessary Symbol#to_proc from Asset Tag Helper.

    clemens committed with jeremy
    Signed-off-by: Jeremy Kemper <>
Commits on Aug 14, 2008
  1. @jeremy
Commits on Aug 13, 2008
  1. @jeremy

    Set asset-cached file ctime and mtime to the max mtime of the combine…

    jeremy committed
    …d files. Allows for consistent ETag generation without having a shared filesystem.
Commits on Aug 6, 2008
  1. @josh
Commits on Jul 24, 2008
  1. @josh

    AbstractRequest.relative_url_root is no longer automatically configur…

    josh committed
    …ed by a HTTP header. It can now be set in your configuration environment with config.action_controller.relative_url_root
Commits on Jul 17, 2008
  1. @josh
Commits on Jul 16, 2008
  1. @dhh

    Resolved conflict

    dhh committed
  2. @dhh

    Fixed that AssetTagHelper#compute_public_path shouldn't cache the ass…

    dhh committed
    …et_host along with the source or per-request proc's won't run [DHH]
Commits on Jul 8, 2008
  1. @djanowski @lifo

    Add :recursive option to javascript_include_tag and stylesheet_link_t…

    djanowski committed with lifo
    …ag to be used along with :all. [#480 state:resolved]
    Signed-off-by: Pratik Naik <>
Commits on Jul 3, 2008
  1. @NZKoz

    Move the file exists checks outside write_asset_file_contents.

    NZKoz committed
    This lets us avoid the relatively costly trip through compute_*_paths if the file already exists.
Commits on May 25, 2008
  1. @lifo

    Merge docrails.

    lifo committed
    Signed-off-by: Pratik Naik <>
Commits on May 2, 2008
  1. @fxn @lifo

    Improve documentation coverage and markup

    fxn committed with lifo
    Signed-off-by: Pratik Naik <>
Commits on Apr 14, 2008
  1. @josh
Commits on Apr 13, 2008
  1. @dhh

    Added Rails.public_path to control where HTML and assets are expected…

    dhh committed
    … to be loaded from (defaults to Rails.root + "/public") #11581 [nicksieger]
Commits on Apr 12, 2008
  1. @stephencelis
Commits on Mar 20, 2008
  1. @jeremy

    Re-added ActionView::Helpers::register_javascript/stylesheet_expansio…

    jeremy committed
    …n to make it easier for plugin developers to inject multiple assets. Closes #10350.
    git-svn-id: 5ecf4fe2-1ee6-0310-87b1-e25e094e27de
Something went wrong with that request. Please try again.