5631 Commits (337561261ab3e3843c19419abb19c92d0a8f0902)

 

All Branches   

Search

Author	SHA1	Message	Date
Martin Linkhorst	337561261a	some documentation regarding mass assignment, show full stack trace in console	13 years ago
Martin Linkhorst	696ed97dcd	fix: use the old style #force_attributes	13 years ago
Martin Linkhorst	12bb66c264	refactor dealing with mass assignment	13 years ago
Martin Linkhorst	42bc728288	fix to work with protected :project_id	13 years ago
jwollert	e0a2b9e768	fixes creation of anonymous user. shouldn't mass assign protected attributes (i.e. login)	13 years ago
Martin Linkhorst	1fce5b6a8f	added attr_protected calls to protect mass assignment of :project_id through a view	13 years ago
Jean-Philippe Lang	f5ac69401d	Set user_id as a protected attribute (#922).	13 years ago
Jean-Philippe Lang	a6a95c8617	Prevent mass-assignment vulnerability when adding/updating a wiki (#922).	13 years ago
Jean-Philippe Lang	5c6fbc664b	Prevent mass-assignment vulnerability when adding/updating a version (#922).	13 years ago
Jean-Philippe Lang	42caba0351	Prevent mass-assignment vulnerability when adding/updating a time entry (#922).	13 years ago
Jean-Philippe Lang	ff5472e6f7	Use safe_attributes= just like in #create. (#922)	13 years ago
Jean-Philippe Lang	676bf0f751	Prevent mass-assignment vulnerability when adding/updating a news (#922).	13 years ago
Jean-Philippe Lang	4156485090	Prevent mass-assignment vulnerability when adding/updating a forum message (#922).	13 years ago
Jean-Philippe Lang	8e6f54c4ec	Prevent mass-assignment vulnerability when adding a project member (#922).	13 years ago
Jean-Philippe Lang	6b25085997	Prevent mass-assignment vulnerability when adding/updating an issue category (#922).	13 years ago
Jean-Philippe Lang	21c498557e	Prevent mass-assignment vulnerability when adding/updating a document (#922). ... Conflicts: app/controllers/documents_controller.rb	13 years ago
Romano Licker	17e0a7b1ba	add css class 'input-as-link' which styles a submit button ... (input-element) to look like a link	13 years ago
Gregor Schmidt	c9a3b3b26e	Reduce vertical height of tables to fit more content into viewport	13 years ago
Gregor Schmidt	ad1f36b16d	Avoid calling attr_protected if _accessible is used ... When attr_accessible is used, we may assume that watcher_ids and watcher_user_ids is already protected from mass assignment. Therefore we do not need to perform additional actions. Also, when attr_protected and attr_accessible is used on the same model, AR throws nasty "Declare either attr_protected or attr_accessible for *, but not both." errors.	13 years ago
Jens Ulferts	1c1a7c9d84	refactored allowed_to to be more extensible ... * AllowanceEvaluator can be registered to decide whether to grant or deny a permission request * default AllowanceEvaluator is functionally identical with former impelmentation * broken up allowed_to into allowed_to_for_project and allowed_to_globally to reduce method length	13 years ago
Martin Linkhorst	a9444cbbfb	show log unit costs in issue detail page, fixes #26310	13 years ago
Martin Linkhorst	6faf3c653d	add translation for Account, fixes #25922 #25924	13 years ago
Martin Linkhorst	84bdd935eb	fix typo, issue #25928	13 years ago
Martin Linkhorst	009dc110a4	don't show multiple issue status in backlog, fixes #25703	13 years ago
Martin Linkhorst	25f4d79191	don't show users registration date on profile page (/users/:id) fixes #24805	13 years ago
Martin Linkhorst	2a140068ed	add missing translations for last commit	13 years ago
Martin Linkhorst	97ff222d1c	Only allow project admins to export issues. export formats are: atom, rss, api, xls, csv, pdf. #25512	13 years ago
Martin Linkhorst	fcac419324	better locking info. issue #25606	13 years ago
Romano Licker	de4cdf538b	without ! nothing is added to the formatters hash	13 years ago
Romano Licker	080490532d	[accessibility] rename accessibility flag option as follows: ... Heading: User interface Checkbox: Accessibility mode Heading: Nutzeroberfläche Checkbox: Für die barrierefreie Nutzung optimierte Oberfläche	13 years ago
Romano Licker	3e3fa57554	Merge branch 'refs/heads/feature/3.0.0-pre/fixes-on-acts-as-journalized' into feature/2.4.0/accessibility-master	13 years ago
Romano Licker	17810216b0	having a fix call order resolves a problem where ... 'value=' was called before 'name=' resulting in no serialization	13 years ago
Romano Licker	d29112203b	fixes recreating initial journals ... the method now uses the acts_as_journalized methods when recreating the initial journal and tries to use existing journals for rebuilding the history	13 years ago
Romano Licker	d39f9c8584	Merge branch 'feature/2.4.0/accessibility-master' of github.com:finnlabs/chiliproject into feature/2.4.0/accessibility-master	13 years ago
Romano Licker	d2d21388ae	having a fix call order resolves a problem where ... 'value=' was called before 'name=' resulting in no serialization	13 years ago
Jens Ulferts	a44467e292	renaming in report view ... * "report" into "summary" (including breadcrumb) * "subproject" into "subprojects"	13 years ago
Romano Licker	f191c1c73e	Merge branch 'refs/heads/feature/3.0.0-pre/fixes-on-acts-as-journalized' into feature/2.4.0/accessibility-master	13 years ago
Romano Licker	3506a0327f	journalize parent_id on issues	13 years ago
Gregor Schmidt	bed651ca39	Automatically selecting input elements that are focussed	13 years ago
Romano Licker	9b080e6d61	Merge branch 'refs/heads/feature/3.0.0-pre/design-fixes-accessibility-master' into feature/2.4.0/accessibility-master	13 years ago
Romano Licker	1fe2825da6	[designfix] remove border on roadmap's related issues ... make it look like 'related issues' on issues/show	13 years ago
Romano Licker	cbc0ccbba1	[designfix] remove paddings on gravatars ... this style gets overwritten in some cases resulting in views having a visibile border with paddings and views that don't	13 years ago
Romano Licker	68c3e1692d	[designfix] fix strange border style definition ... which made the border too loooooong	13 years ago
Romano Licker	bfb8fddf44	[designfix] fixing icon positions and unifying paddings ... for action menus and contextuals	13 years ago
Romano Licker	09316e2355	[designfix] get fieldsets position right	13 years ago
Romano Licker	ae28bd8c74	[designfix] counter "fieldsetborder"-margin	13 years ago
Romano Licker	f71c896245	[designfix] rearrange actions in news	13 years ago
Jens Ulferts	8ecc722b64	create consistency between accessibility_css_enabled? and no_focus_on_flash ... * no_focus_on_flash renamed to accessibility_js_enabled?	13 years ago
Jens Ulferts	965e466362	include accessibility.css by default but view can choose to not include it ... * call disable_accessibility_css! in view to not include css	13 years ago
Gregor Schmidt	04a73ca6d1	Making link_to_if_authorized accept a block as well	13 years ago