Permalink
Commits on Dec 23, 2015
  1. Remove hidden files

    rafaelfranca committed Dec 23, 2015
Commits on Dec 3, 2014
  1. Test no fingerprint validation on body request

    josh committed Dec 3, 2014
  2. Test fingerprint with ?body=1

    josh committed Dec 3, 2014
Commits on Oct 28, 2014
  1. Sprockets 2.12.3

    josh committed Oct 28, 2014
  2. Add security note to changelog

    josh committed Oct 28, 2014
Commits on Oct 15, 2014
  1. Check for absolute paths in server URL before passing to find

    josh committed Oct 15, 2014
    Various double slashes and URL encodings can bypass current checks.
    In the case of the file existing, the server will 500 instead of 403
    which leaks the existence but not the contents of the file.
    
    Props to @eadz for finding this.
Commits on Sep 6, 2014
  1. Sprockets 2.12.2

    josh committed Sep 6, 2014
  2. Merge pull request #638 from sstephenson/clean-absolute-path-for-find…

    josh committed Sep 6, 2014
    …-asset
    
    Clean absolute paths on find_asset
  3. Catch execjs error subclass

    josh committed Feb 9, 2014
    Conflicts:
    	test/test_environment.rb
  4. Fix sass test fixture

    josh committed Aug 25, 2014
Commits on Jul 15, 2014
  1. Merge pull request #615 from amccloud/root-sass-module

    josh committed Jul 15, 2014
    Anchor Sass::Script::String to root
  2. Anchor Sass::Script::String to root

    Andrew McCloud committed Jul 15, 2014
Commits on Jul 8, 2014
  1. Merge pull request #600 from amccloud/root-sass-importer

    josh committed Jul 8, 2014
    Anchor Sass::Importers::Filesystem to root, fixes #599
Commits on Jul 6, 2014
  1. Anchor Sass::Importers::Filesystem to root, fixes #599

    Andrew McCloud committed Jul 6, 2014
Commits on Apr 17, 2014
  1. Sprockets 2.12.1

    josh committed Apr 17, 2014
  2. Add changelog for manifest fix

    josh committed Apr 17, 2014
  3. Merge pull request #561 from johnnyshields/patch-1

    josh committed Apr 17, 2014
    Backport mkdir_p path fix for Manifest to 2.x branch
Commits on Apr 15, 2014
Commits on Mar 13, 2014
  1. Sprockets 2.12.0

    josh committed Mar 13, 2014
  2. Note importer change as 2.12

    josh committed Mar 13, 2014
  3. Fix execjs error assertion

    josh committed Mar 13, 2014
  4. Sprockets 2.11.1

    josh committed Mar 13, 2014
  5. Add readme note

    josh committed Mar 13, 2014
Commits on Mar 12, 2014
  1. Avoid exposing a context reference to SassImporter

    josh committed Mar 12, 2014
    Make SassImporter safely marshalable
Commits on Feb 19, 2014
  1. Sprockets 2.11.0

    josh committed Feb 19, 2014
  2. Add release notes for bower.json

    josh committed Feb 19, 2014
  3. Support .bower.json

    josh committed Feb 19, 2014
Commits on Nov 23, 2013
  1. Sprockets 2.10.1

    josh committed Nov 23, 2013
  2. Fix searching for index or component with `.`

    josh committed Nov 23, 2013
    "jquery.foo.js"
Commits on Nov 17, 2013