XSS attacks. Thanks Sascha Depold for the report.
…ns that it doesn't force Action Controller / Active Record to load, but it doesn't fail if they have already loaded. Thanks @josevalim for the hint.
…zer - use config object instead. Cuts about 15% off the load time. (#734)
…if RAILS_ENV was not provided
…error with nil class.
…::Error#message and Template::Error#inspect." This reverts commit 403b06e. The call to `message` calls `inspect` on our exception. The exception holds a reference to the environment, and the controller. This string becomes very large, and the call to `super` dups the string (in tern doubling the memory used). I'm reverting this for 3.1 but leaving the commit on master. We should stop holding references to so many objects and reduce the size of our inspect.
set a particular value for it. This allows servers to set it through X-Sendfile-Type, read https://github.com/rack/rack/blob/master/lib/rack/sendfile.rb for more info. Anyways you can force this value in your production.rb
This fixes a bug that is caused by Resource/SingletonResource mangling resource options when using inline "multi"-resource declarations.
… form_for() - fixes #2094
addresses issue #1907 - any routes that follow a route with a constraints block are inheriting the previous route's constraints.
This brings back the ability to overwrite/extend url generating methods in application heleprs.
oh and obviously I meant according to Webster, not Weber
…h English to American English(according to Weber) Conflicts: actionpack/lib/action_controller/metal/request_forgery_protection.rb railties/lib/rails/engine.rb