rails/actionpack/test
Andrew White 6520ea5f7e Deprecate :controller and :action path parameters
Allowing :controller and :action values to be specified via the path
in config/routes.rb has been an underlying cause of a number of issues
in Rails that have resulted in security releases. In light of this it's
better that controllers and actions are explicitly whitelisted rather
than trying to blacklist or sanitize 'bad' values.
2016-03-01 08:48:53 +00:00
..
abstract Revert "ActionController::Base#process() now only takes an action name" 2015-10-29 16:18:27 -07:00
assertions Add both HTTP Response Code and Type to assertion messages 2016-01-12 13:09:00 -07:00
controller Deprecate :controller and :action path parameters 2016-03-01 08:48:53 +00:00
dispatch Deprecate :controller and :action path parameters 2016-03-01 08:48:53 +00:00
fixtures Additional review of 6b31761. 2016-02-25 11:13:42 +01:00
journey Deprecate :controller and :action path parameters 2016-03-01 08:48:53 +00:00
lib/controller Removing unused fake models 2014-09-07 22:51:14 -03:00
routing Remove deprecate *_path helpers in email views 2015-01-04 11:58:42 -03:00
tmp Use safe tmp dir 2009-08-13 21:03:25 -05:00
abstract_unit.rb Deprecate :controller and :action path parameters 2016-03-01 08:48:53 +00:00