Permalink
Commits on Apr 26, 2012
  1. Sprockets 2.1.3

    josh committed Apr 26, 2012
  2. Check for directory traversal after unescaping

    The `forbidden_request?` check could be trivially bypassed
    by percent encoding .. as %2e%2e.
    
    After auditing Sprockets and Hike and fuzzing a simple
    server, I don't believe this is exploitable. However,
    better safe than sorry/defense in depth/etc.
    jfirebaugh committed with josh Feb 9, 2012
Commits on Nov 20, 2011
  1. Sprockets 2.1.2

    josh committed Nov 20, 2011
  2. Remove server mtime checking

    josh committed Nov 20, 2011
Commits on Nov 18, 2011
  1. Sprockets 2.1.1

    josh committed Nov 18, 2011
  2. Add 2.1.1 changelog

    josh committed Nov 18, 2011
  3. Fix windows absolute path check

    josh committed Nov 18, 2011
Commits on Nov 16, 2011
  1. Ensure cache directory exists

    Fixes #244
    josh committed Nov 16, 2011
Commits on Nov 11, 2011
  1. Tweak changelog

    josh committed Nov 11, 2011
  2. Sprockets 2.1.0

    josh committed Nov 11, 2011
  3. Add periods

    josh committed Nov 11, 2011
  4. Add version history

    josh committed Nov 11, 2011
Commits on Nov 9, 2011
  1. Travis seems to work now

    josh committed Nov 9, 2011
  2. Fix encoding test on 1.8

    josh committed Nov 9, 2011
  3. Merge pull request #242 from sstephenson/replace-directive-with-empty…

    …-line
    
    Preserve directive whitespace
    josh committed Nov 9, 2011
  4. Preserve directive whitespace

    josh committed Nov 9, 2011
  5. 1.9.1 isn't supported

    josh committed Nov 9, 2011
  6. Coffeescript 1.1.3 changes

    josh committed Nov 9, 2011
Commits on Nov 5, 2011
  1. Sprockets 2.1.0.beta

    josh committed Nov 5, 2011
  2. Merge pull request #213 from sstephenson/2.1.x

    Release 2.1.0
    josh committed Nov 5, 2011
Commits on Nov 3, 2011
  1. Revert "Only static asset should read length from disk"

    This reverts commit 921f81c.
    josh committed Nov 3, 2011
Commits on Nov 2, 2011
  1. Fix length of processed asset

    josh committed Nov 2, 2011
  2. Cleanup processed asset init

    josh committed Nov 2, 2011
  3. Make required_assets internal

    josh committed Nov 2, 2011
  4. Merge branch 'master' into 2.1.x

    Conflicts:
    	lib/sprockets/asset_attributes.rb
    	lib/sprockets/environment.rb
    	lib/sprockets/index.rb
    josh committed Nov 2, 2011
  5. Extensions could be empty

    josh committed Nov 2, 2011
Commits on Oct 24, 2011
  1. Merge branch 'master' into 2.1.x

    Conflicts:
    	lib/sprockets/asset_attributes.rb
    	test/test_asset_attributes.rb
    josh committed Oct 24, 2011
Commits on Oct 17, 2011
  1. Merge branch 'master' into 2.1.x

    josh committed Oct 17, 2011