rails 4.1.8 → 4.1.9.rc1

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: bb7a290677a74e7a53f55ca43217138313ab3353
4
- data.tar.gz: 16e3b221492195e110a004908fa09d4244ce6659
3
+ metadata.gz: afb9c3ac69dec277754b1b76b4fce0e3ff45b71c
4
+ data.tar.gz: a9d66f7bf0662ba3f5e77a7fb14eb9b07bcc7574
5
5
  SHA512:
6
- metadata.gz: 9edb1dc0114fe07b60061c158d5a5d42fad83c34551bc94b4f6818d35f796fef586b53d1cfd9bd0a9d607bbe0c682f881432a2ed4108c23991c895917a3ac397
7
- data.tar.gz: e8b020310e3f7f553eefce45af5ea13f15df67fcb72655d9a30e47a3ee3e51b716209805facc938d7eb3352bb7116675555607171379eba980ff34a50b6678a9
6
+ metadata.gz: 63a0f4b467266252a9abea0b2f797e3349ab343f198eb664df7d1ea1eef9451098a69df1edcfc8f2f7da40bec7a52e25f5fa8f1f868dc3f19325364e20265ab2
7
+ data.tar.gz: eeaeac974894fc6db168f3110e9a26879b7fb89c255fbcde8fe6f5cfda129928cebff27cf1fdaf308ec7693d2d875ef04eda8728d0013de78b1b22f2ca95f4ef
@@ -1,3 +1,18 @@
1
+ ## Rails 4.1.8 (November 16, 2014) ##
2
+
3
+ * No changes.
4
+
5
+
6
+ ## Rails 4.1.7.1 (November 19, 2014) ##
7
+
8
+ * No changes.
9
+
10
+
11
+ ## Rails 4.1.7 (October 29, 2014) ##
12
+
13
+ * No changes.
14
+
15
+
1
16
  ## Rails 4.1.6 (September 11, 2014) ##
2
17
 
3
18
  * No changes.
@@ -7,8 +7,8 @@ require 'action_controller/railtie'
7
7
  class TestApp < Rails::Application
8
8
  config.root = File.dirname(__FILE__)
9
9
  config.session_store :cookie_store, key: 'cookie_store_key'
10
- config.secret_token = 'secret_token'
11
- config.secret_key_base = 'secret_key_base'
10
+ secrets.secret_token = 'secret_token'
11
+ secrets.secret_key_base = 'secret_key_base'
12
12
 
13
13
  config.logger = Logger.new($stdout)
14
14
  Rails.logger = config.logger
@@ -16,8 +16,8 @@ require 'action_controller/railtie'
16
16
  class TestApp < Rails::Application
17
17
  config.root = File.dirname(__FILE__)
18
18
  config.session_store :cookie_store, key: 'cookie_store_key'
19
- config.secret_token = 'secret_token'
20
- config.secret_key_base = 'secret_key_base'
19
+ secrets.secret_token = 'secret_token'
20
+ secrets.secret_key_base = 'secret_key_base'
21
21
 
22
22
  config.logger = Logger.new($stdout)
23
23
  Rails.logger = config.logger
@@ -1281,7 +1281,7 @@ The method `squish` strips leading and trailing whitespace, and substitutes runs
1281
1281
 
1282
1282
  There's also the destructive version `String#squish!`.
1283
1283
 
1284
- Note that it handles both ASCII and Unicode whitespace like mongolian vowel separator (U+180E).
1284
+ Note that it handles both ASCII and Unicode whitespace.
1285
1285
 
1286
1286
  NOTE: Defined in `active_support/core_ext/string/filters.rb`.
1287
1287
 
@@ -590,11 +590,11 @@ This is the final step required to get the new comment form working. Displaying
590
590
  the comments, however, is not quite right yet. If you were to create a comment
591
591
  right now, you would see this error:
592
592
 
593
- ```
593
+ ```
594
594
  Missing partial blorgh/comments/comment with {:handlers=>[:erb, :builder],
595
595
  :formats=>[:html], :locale=>[:en, :en]}. Searched in: *
596
596
  "/Users/ryan/Sites/side_projects/blorgh/test/dummy/app/views" *
597
- "/Users/ryan/Sites/side_projects/blorgh/app/views"
597
+ "/Users/ryan/Sites/side_projects/blorgh/app/views"
598
598
  ```
599
599
 
600
600
  The engine is unable to find the partial required for rendering the comments.
@@ -828,12 +828,12 @@ $ bin/rake blorgh:install:migrations
828
828
  Notice that only _one_ migration was copied over here. This is because the first
829
829
  two migrations were copied over the first time this command was run.
830
830
 
831
- ```
831
+ ```
832
832
  NOTE Migration [timestamp]_create_blorgh_posts.rb from blorgh has been
833
833
  skipped. Migration with the same name already exists. NOTE Migration
834
834
  [timestamp]_create_blorgh_comments.rb from blorgh has been skipped. Migration
835
835
  with the same name already exists. Copied migration
836
- [timestamp]_add_author_id_to_blorgh_posts.rb from blorgh
836
+ [timestamp]_add_author_id_to_blorgh_posts.rb from blorgh
837
837
  ```
838
838
 
839
839
  Run the migration using:
@@ -1036,22 +1036,43 @@ functionality, especially controllers. This means that if you were to make a
1036
1036
  typical `GET` to a controller in a controller's functional test like this:
1037
1037
 
1038
1038
  ```ruby
1039
- get :index
1039
+ module Blorgh
1040
+ class FooControllerTest < ActionController::TestCase
1041
+ def test_index
1042
+ get :index
1043
+ ...
1044
+ end
1045
+ end
1046
+ end
1040
1047
  ```
1041
1048
 
1042
1049
  It may not function correctly. This is because the application doesn't know how
1043
1050
  to route these requests to the engine unless you explicitly tell it **how**. To
1044
- do this, you must also pass the `:use_route` option as a parameter on these
1045
- requests:
1051
+ do this, you must set the `@routes` instance variable to the engine's route set
1052
+ in your setup code:
1046
1053
 
1047
1054
  ```ruby
1048
- get :index, use_route: :blorgh
1055
+ module Blorgh
1056
+ class FooControllerTest < ActionController::TestCase
1057
+ setup do
1058
+ @routes = Engine.routes
1059
+ end
1060
+
1061
+ def test_index
1062
+ get :index
1063
+ ...
1064
+ end
1065
+ end
1066
+ end
1049
1067
  ```
1050
1068
 
1051
1069
  This tells the application that you still want to perform a `GET` request to the
1052
1070
  `index` action of this controller, but you want to use the engine's route to get
1053
1071
  there, rather than the application's one.
1054
1072
 
1073
+ This also ensures that the engine's URL helpers will work as expected in your
1074
+ tests.
1075
+
1055
1076
  Improving engine functionality
1056
1077
  ------------------------------
1057
1078
 
@@ -356,7 +356,7 @@ Refer to the Injection section for countermeasures against XSS. It is _recommend
356
356
 
357
357
  **CSRF** Cross-Site Request Forgery (CSRF), also known as Cross-Site Reference Forgery (XSRF), is a gigantic attack method, it allows the attacker to do everything the administrator or Intranet user may do. As you have already seen above how CSRF works, here are a few examples of what attackers can do in the Intranet or admin interface.
358
358
 
359
- A real-world example is a [router reconfiguration by CSRF](http://www.h-online.com/security/Symantec-reports-first-active-attack-on-a-DSL-router--/news/102352). The attackers sent a malicious e-mail, with CSRF in it, to Mexican users. The e-mail claimed there was an e-card waiting for them, but it also contained an image tag that resulted in a HTTP-GET request to reconfigure the user's router (which is a popular model in Mexico). The request changed the DNS-settings so that requests to a Mexico-based banking site would be mapped to the attacker's site. Everyone who accessed the banking site through that router saw the attacker's fake web site and had their credentials stolen.
359
+ A real-world example is a [router reconfiguration by CSRF](http://www.h-online.com/security/news/item/Symantec-reports-first-active-attack-on-a-DSL-router-735883.html). The attackers sent a malicious e-mail, with CSRF in it, to Mexican users. The e-mail claimed there was an e-card waiting for them, but it also contained an image tag that resulted in a HTTP-GET request to reconfigure the user's router (which is a popular model in Mexico). The request changed the DNS-settings so that requests to a Mexico-based banking site would be mapped to the attacker's site. Everyone who accessed the banking site through that router saw the attacker's fake web site and had their credentials stolen.
360
360
 
361
361
  Another example changed Google Adsense's e-mail address and password by. If the victim was logged into Google Adsense, the administration interface for Google advertisements campaigns, an attacker could change their credentials.

362
362
 
@@ -712,7 +712,7 @@ class UserFlowsTest < ActionDispatch::IntegrationTest
712
712
  https!(false)
713
713
  get "/posts/all"
714
714
  assert_response :success
715
- assert assigns(:products)
715
+ assert assigns(:posts)
716
716
  end
717
717
  end
718
718
  ```
@@ -541,7 +541,7 @@ file (in `config/application.rb`):
541
541
  ```ruby
542
542
  # Require the gems listed in Gemfile, including any gems
543
543
  # you've limited to :test, :development, or :production.
544
- Bundler.require(:default, Rails.env)
544
+ Bundler.require(*Rails.groups)
545
545
  ```
546
546
 
547
547
  ### vendor/plugins
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: rails
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.1.8
4
+ version: 4.1.9.rc1
5
5
  platform: ruby
6
6
  authors:
7
7
  - David Heinemeier Hansson
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2014-11-16 00:00:00.000000000 Z
11
+ date: 2015-01-02 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: activesupport
@@ -16,98 +16,98 @@ dependencies:
16
16
  requirements:
17
17
  - - '='
18
18
  - !ruby/object:Gem::Version
19
- version: 4.1.8
19
+ version: 4.1.9.rc1
20
20
  type: :runtime
21
21
  prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - '='
25
25
  - !ruby/object:Gem::Version
26
- version: 4.1.8
26
+ version: 4.1.9.rc1
27
27
  - !ruby/object:Gem::Dependency
28
28
  name: actionpack
29
29
  requirement: !ruby/object:Gem::Requirement
30
30
  requirements:
31
31
  - - '='
32
32
  - !ruby/object:Gem::Version
33
- version: 4.1.8
33
+ version: 4.1.9.rc1
34
34
  type: :runtime
35
35
  prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '='
39
39
  - !ruby/object:Gem::Version
40
- version: 4.1.8
40
+ version: 4.1.9.rc1
41
41
  - !ruby/object:Gem::Dependency
42
42
  name: actionview
43
43
  requirement: !ruby/object:Gem::Requirement
44
44
  requirements:
45
45
  - - '='
46
46
  - !ruby/object:Gem::Version
47
- version: 4.1.8
47
+ version: 4.1.9.rc1
48
48
  type: :runtime
49
49
  prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
52
  - - '='
53
53
  - !ruby/object:Gem::Version
54
- version: 4.1.8
54
+ version: 4.1.9.rc1
55
55
  - !ruby/object:Gem::Dependency
56
56
  name: activemodel
57
57
  requirement: !ruby/object:Gem::Requirement
58
58
  requirements:
59
59
  - - '='
60
60
  - !ruby/object:Gem::Version
61
- version: 4.1.8
61
+ version: 4.1.9.rc1
62
62
  type: :runtime
63
63
  prerelease: false
64
64
  version_requirements: !ruby/object:Gem::Requirement
65
65
  requirements:
66
66
  - - '='
67
67
  - !ruby/object:Gem::Version
68
- version: 4.1.8
68
+ version: 4.1.9.rc1
69
69
  - !ruby/object:Gem::Dependency
70
70
  name: activerecord
71
71
  requirement: !ruby/object:Gem::Requirement
72
72
  requirements:
73
73
  - - '='
74
74
  - !ruby/object:Gem::Version
75
- version: 4.1.8
75
+ version: 4.1.9.rc1
76
76
  type: :runtime
77
77
  prerelease: false
78
78
  version_requirements: !ruby/object:Gem::Requirement
79
79
  requirements:
80
80
  - - '='
81
81
  - !ruby/object:Gem::Version
82
- version: 4.1.8
82
+ version: 4.1.9.rc1
83
83
  - !ruby/object:Gem::Dependency
84
84
  name: actionmailer
85
85
  requirement: !ruby/object:Gem::Requirement
86
86
  requirements:
87
87
  - - '='
88
88
  - !ruby/object:Gem::Version
89
- version: 4.1.8
89
+ version: 4.1.9.rc1
90
90
  type: :runtime
91
91
  prerelease: false
92
92
  version_requirements: !ruby/object:Gem::Requirement
93
93
  requirements:
94
94
  - - '='
95
95
  - !ruby/object:Gem::Version
96
- version: 4.1.8
96
+ version: 4.1.9.rc1
97
97
  - !ruby/object:Gem::Dependency
98
98
  name: railties
99
99
  requirement: !ruby/object:Gem::Requirement
100
100
  requirements:
101
101
  - - '='
102
102
  - !ruby/object:Gem::Version
103
- version: 4.1.8
103
+ version: 4.1.9.rc1
104
104
  type: :runtime
105
105
  prerelease: false
106
106
  version_requirements: !ruby/object:Gem::Requirement
107
107
  requirements:
108
108
  - - '='
109
109
  - !ruby/object:Gem::Version
110
- version: 4.1.8
110
+ version: 4.1.9.rc1
111
111
  - !ruby/object:Gem::Dependency
112
112
  name: bundler
113
113
  requirement: !ruby/object:Gem::Requirement
@@ -452,7 +452,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
452
452
  version: 1.8.11
453
453
  requirements: []
454
454
  rubyforge_project:
455
- rubygems_version: 2.4.2
455
+ rubygems_version: 2.4.5
456
456
  signing_key:
457
457
  specification_version: 4
458
458
  summary: Full-stack web application framework.