rails/actionpack/test
wonda-tea-coffee f6cdce50d4 Fix sec issue with _url_host_allowed?
Disallow certain strings from `_url_host_allowed?` to avoid a redirect
to malicious sites.

[CVE-2023-22797]
2023-01-17 11:38:11 -08:00
..
abstract Raise error when callback's only/unless symbols aren't methods 2021-12-14 15:22:08 -05:00
assertions Use frozen string literal in actionpack/ 2017-07-29 14:02:40 +03:00
controller Fix sec issue with _url_host_allowed? 2023-01-17 11:38:11 -08:00
dispatch discard marshal dumped values when reading a signed cookie 2023-01-13 10:47:01 +11:00
fixtures Fix word case. html -> HTML 2022-09-18 04:21:22 +10:00
journey Add ActionDispatch.deprecator 2022-10-27 17:11:02 -05:00
lib Include layout when rendering objects from controllers 2020-10-14 11:49:45 -06:00
routing Use frozen string literal in actionpack/ 2017-07-29 14:02:40 +03:00
support Introduce Journey::Ast to avoid extra ast walks 2021-07-29 16:23:11 -04:00
abstract_unit.rb Add ActionDispatch.deprecator 2022-10-27 17:11:02 -05:00