413 Commits (62b7c5c46ccb072afd678cb37b7c1e7638b2086d)

Author	SHA1	Message	Date
Philipp Tessenow	068fbf6545	modified our human_attribute_name patch ... All /(.*)_id/ attributes names will be stripped of the '_id' part. Prepare for the new Rails3 way translation files.	12 years ago
Jens Ulferts	3ba030289d	improves deprecation warning message and allows passing default values ... * states the key and model for which the human_attribute_name is inquired * have the raise and default option only as a fallback when nothing else is supplied. Doing this allows for model classes to pass additional attributes.	12 years ago
Jens Ulferts	cdca76e9d2	prevents attribute name to be humanized ... Without the :default => false, the method's super implementation will use attribute_name.to_s.humanize as a last resort. This will prevent an error from beeing raised which will render the rescue statement added for backwards compatibility useless. Adding the fix will lead to a lot of warnings. But hey, that will lead to a faster adaptation of the new standard.	12 years ago
Martin Czuchra	59155c4e94	Fixes support for raise option.	12 years ago
Martin Czuchra	7f6c674136	Adds a deprecation warning to the human_attribute_name thingie.	12 years ago
Martin Czuchra	2815770661	Changes redmine attribute i18n.	12 years ago
Christian Ratz	b601de119e	fixed numbered headings ... - do not use require_dependency 'redcloth3' in initializers - specs are running now	12 years ago
jwollert	45dbaf526a	pull in changes from numbered_headings plugin	12 years ago
Christian Rijke	ee80a51cee	Remove bullet "disable_browser_cache" option as is has been deprecated in bullet version 4.3.1.	12 years ago
Philipp Tessenow	2b7e87d003	work with i18n-js rewrite branch as it supports rails 3.2	12 years ago
Philipp Tessenow	6f96b1fd67	Revert "backports CVE-2013-0155" ... Fix is included in latest rails This reverts commit 1b27c78edb.	12 years ago
Philipp Tessenow	671e825504	Revert "Backported fix for CVE-2012-5664" ... The security fix is included in newest Rails releases. This reverts commit b6d165bd87.	12 years ago
Philipp Tessenow	86df804f7d	Revert "ci-test - revert this later" ... This reverts commit 7d59d5f3cb.	12 years ago
Philipp Tessenow	7d59d5f3cb	ci-test - revert this later	12 years ago
Jens Ulferts	1b27c78edb	backports CVE-2013-0155	12 years ago
Martin Linkhorst	6e6dfbbdc2	this patch expands the #full_messages of errors of the :custom_fields attribute to display all the individual errors per custom field	12 years ago
Jens Ulferts	5606e0e07d	removes security patches now part of rails 2.3.15	12 years ago
Martin Czuchra	b6d165bd87	Backported fix for CVE-2012-5664 ... Options hashes should only be extracted if there are extra parameters. Fixed Versions: 3.2.10, 3.1.9 and 3.0.18. https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/DCNTNp_qjFM	12 years ago
Philipp Tessenow	5a5fe267e0	remove globalize3 path as it is already included in a current globalize3 (this solves a StackLevelTooDeep Exceptions)	12 years ago
Jens Ulferts	47a89b8bfa	patches nested_set to add tree rebuilding methods that are not using ... save The original nested_set implementation uses save on each node (issue, project). With the callbacks defined on issues, this can lead to stale object errors when an issues has been loaded by the rebuilding method but changed by a callback. The rebuild_silently! method can also take root nodes as their parameter. With such provided the method will only fix their trees. This is build upon by the selectively_rebuild_silently! method which first looks for invalid nodes, determines their root node and then calls rebuild_silently! with those root nodes. This should speed up rebuilding on large trees. Additionally, methods where added as a byproduct to retreive nodes who's tree attributes are invalid.	12 years ago
Martin Linkhorst	e3936457c3	this globalize3 patch allows :scope in #validates_uniqueness_of :some_translated_attribute ... this code is not yet merged into the globalize3 repository. see https://github.com/svenfuchs/globalize3/pull/139	12 years ago
Gregor Schmidt	237c0c9a50	Making i18n-js work for OpenProject ... * Limit i18n keys in JS to the 'js' scope to reduce payload * Update i18n gem to make i18n-js work with limited scopes * Exporting translations on server start and not on every request to save computing resources and avoid impact on response times * Configuring i18n-js to use the same fallbacks like the ruby part to ensure consistent behavior across languages * Removing rake tasks from Rakefile since (a) they do not belong there - should have been in lib/tasks - and (b) they are no longer needed, since the export happens at server start NB: public/javascripts/i18n needs to be writeable by the app server user.	12 years ago
Philipp Tessenow	e1d2b1b8ba	Don't register Mime types if they're already registered	12 years ago
Martin Linkhorst	37007d8388	only use logging if there's a log folder in the current directory	12 years ago
Martin Linkhorst	584e592bd4	active records' #attributes=() signature changed. so let's change as well	12 years ago
Martin Linkhorst	ef1606fc57	DEPRECATION FIX: moved plugins to lib folder as suggested by the deprecation warning	12 years ago
Martin Linkhorst	5fb51daab1	applied the rails 3.2 generator	12 years ago
Martin Linkhorst	52294f5a68	active records' #attributes=() signature changed. so let's change as well	12 years ago
Martin Linkhorst	ee9941e912	DEPRECATION FIX: moved plugins to lib folder as suggested by the deprecation warning	12 years ago
Martin Linkhorst	40cecc66a3	applied the rails 3.2 generator	12 years ago
Martin Linkhorst	dd4adc9f3e	disable javascript alert messages for bullet.	12 years ago
Martin Linkhorst	fb42eb8813	remove a patch that is in the gem code now	12 years ago
Martin Linkhorst	7d2f6be3b0	remove the globalize3_patch.rb hack that allowed for uniqueness validation on translations. instead use the current git master since the fix is not yet released in version 0.2.0 of globalize3	12 years ago
Martin Linkhorst	d19fdaf6a1	apply the rails 3.1.8 generator on the project	12 years ago
Martin Linkhorst	8743d77ac6	finally, re-enable all deprecation warnings since there are only a few left	12 years ago
Martin Linkhorst	78c4196656	DEPRECATION FIX: use errors[:attribute] instead of errors.on(:attribute). ... also errors[:attribute] will never return nil. it always returns an array. if there aren't any errors that array will be empty. updated the specs accordingly	12 years ago
Martin Linkhorst	bb4ff05d15	use the rails 3 way to define the session secrets, checking them in while we're developing	12 years ago
Jens Ulferts	dec036e9e4	Fixes potential XSS vulnerabilities in Ruby on Rails (CVE-2012-3464) and strip_tags (CVE-2012-3465)	12 years ago
Martin Linkhorst	4d5c1e9f61	remove tmail specific stuff from the initializer ... asynchronous sending will be done with delayed job in rails 3 rails 4 can use the new Rails.queue with an async Mail wrapper enabled by config.action_mailer.async = true	12 years ago
Jens Ulferts	944f6f86ab	handles responses to api again ... * defines a custom lookup of templates to find templates names foo.api.erb again	12 years ago
Martin Linkhorst	497460bbaa	added the bullet gem to find n+1 queries easily at runtime	12 years ago
Martin Linkhorst	ddf490a0f7	adding the awesome rails footnotes	12 years ago
Martin Linkhorst	d1e0c6d971	REVIEW: merge the two patches	12 years ago
Martin Linkhorst	b6aac286d4	take the root Query class rather than active records. also re-allow passing an order to acts_as_nested_set. all to make the tests happy	12 years ago
Martin Linkhorst	b49e0207a5	fix nested issues tests (1 test still fails from time to time :()	12 years ago
Holger Just	afa147beee	Fix SQL injection via nested hashes in conditions. CVE-2012-2695 #1037	12 years ago
Holger Just	5c71f038c5	Fix SQL injection via nested hashes in conditions (CVE-2012-2694) #1036	12 years ago
Holger Just	5ac0002526	[#1025] Fix Rails vulnerability (CVE-2012-2660)	12 years ago
Jens Ulferts	723cd7ebb8	renames globalize2 patch to globalize3 patch as this is what is patched	12 years ago
Jens Ulferts	61d7c58f65	replaces own validates_uniqueness with one issued as a pull request ... * will not yet work with rails 3.0	12 years ago