109 Commits (79e27e79f472aafb9c639c9c0962d91f913df7cc)

Author	SHA1	Message	Date
Jens Ulferts	cdca76e9d2	prevents attribute name to be humanized ... Without the :default => false, the method's super implementation will use attribute_name.to_s.humanize as a last resort. This will prevent an error from beeing raised which will render the rescue statement added for backwards compatibility useless. Adding the fix will lead to a lot of warnings. But hey, that will lead to a faster adaptation of the new standard.	12 years ago
Martin Czuchra	59155c4e94	Fixes support for raise option.	12 years ago
Martin Czuchra	7f6c674136	Adds a deprecation warning to the human_attribute_name thingie.	12 years ago
Martin Czuchra	2815770661	Changes redmine attribute i18n.	12 years ago
Philipp Tessenow	6f96b1fd67	Revert "backports CVE-2013-0155" ... Fix is included in latest rails This reverts commit 1b27c78edb.	12 years ago
Philipp Tessenow	671e825504	Revert "Backported fix for CVE-2012-5664" ... The security fix is included in newest Rails releases. This reverts commit b6d165bd87.	12 years ago
Jens Ulferts	1b27c78edb	backports CVE-2013-0155	12 years ago
Martin Linkhorst	6e6dfbbdc2	this patch expands the #full_messages of errors of the :custom_fields attribute to display all the individual errors per custom field	12 years ago
Jens Ulferts	5606e0e07d	removes security patches now part of rails 2.3.15	12 years ago
Martin Czuchra	b6d165bd87	Backported fix for CVE-2012-5664 ... Options hashes should only be extracted if there are extra parameters. Fixed Versions: 3.2.10, 3.1.9 and 3.0.18. https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/DCNTNp_qjFM	12 years ago
Martin Linkhorst	fb42eb8813	remove a patch that is in the gem code now	12 years ago
Martin Linkhorst	8743d77ac6	finally, re-enable all deprecation warnings since there are only a few left	12 years ago
Martin Linkhorst	78c4196656	DEPRECATION FIX: use errors[:attribute] instead of errors.on(:attribute). ... also errors[:attribute] will never return nil. it always returns an array. if there aren't any errors that array will be empty. updated the specs accordingly	12 years ago
Jens Ulferts	dec036e9e4	Fixes potential XSS vulnerabilities in Ruby on Rails (CVE-2012-3464) and strip_tags (CVE-2012-3465)	12 years ago
Martin Linkhorst	4d5c1e9f61	remove tmail specific stuff from the initializer ... asynchronous sending will be done with delayed job in rails 3 rails 4 can use the new Rails.queue with an async Mail wrapper enabled by config.action_mailer.async = true	12 years ago
Jens Ulferts	944f6f86ab	handles responses to api again ... * defines a custom lookup of templates to find templates names foo.api.erb again	12 years ago
Martin Linkhorst	d1e0c6d971	REVIEW: merge the two patches	12 years ago
Martin Linkhorst	b6aac286d4	take the root Query class rather than active records. also re-allow passing an order to acts_as_nested_set. all to make the tests happy	12 years ago
Martin Linkhorst	b49e0207a5	fix nested issues tests (1 test still fails from time to time :()	12 years ago
Holger Just	afa147beee	Fix SQL injection via nested hashes in conditions. CVE-2012-2695 #1037	12 years ago
Holger Just	5c71f038c5	Fix SQL injection via nested hashes in conditions (CVE-2012-2694) #1036	12 years ago
Holger Just	5ac0002526	[#1025] Fix Rails vulnerability (CVE-2012-2660)	12 years ago
Martin Linkhorst	1caae19c22	REVIEW: patch active record base since more than one class use it	12 years ago
Martin Linkhorst	65f1302b57	correct markup for inline errors	12 years ago
Martin Linkhorst	771dcf4fb0	keep the right api for human_attribute_name	12 years ago
Jens Ulferts	52e106c113	redefines api mime type ... * broken by rails upgrade	12 years ago
Jens Ulferts	5babf1d05f	REVIEW: deactivates method manipulation for ActiveRecord::Errors#on ... * get rails 3 to boot first	12 years ago
Jens Ulferts	12e24f0f47	REVIEW: deactivates alias method chaining of TMail::Unquoter#convert_to ... * get rails 3 to boot first	12 years ago
Jens Ulferts	9711b9ab70	moving accessibility concern on errors into own module, included by ActionView::Base ... * handles custom_values correctly ** no longer crashes when #full_messages returns more values than #errors * refactoring former version	13 years ago
Jens Ulferts	3243bdde7a	Revert "include custom_values into the full error messages directly:" ... This reverts commit 8b85f078da.	13 years ago
Jens Ulferts	5fe699dce6	Revert "using same method (errors_including_custom_values) for generating unique ids on error_messages_for as full_messages does:" ... This reverts commit 8b8047cbff.	13 years ago
Jens Ulferts	8b8047cbff	using same method (errors_including_custom_values) for generating unique ids on error_messages_for as full_messages does: ... * prevents unequal amount of errors returned	13 years ago
Jens Ulferts	8b85f078da	include custom_values into the full error messages directly: ... * delete generic error message for custom values	13 years ago
Romano Licker	cadf140681	[#671] error messages are now links that focus the corresponding ... element	13 years ago
Holger Just	91070236db	Set source encoding to UTF-8	13 years ago
Holger Just	07185fb169	[#436] Remove trailing whitespace	14 years ago
Eric Davis	99507a0391	[#197] Upgrade the copyright in the code files	14 years ago
Jean-Philippe Lang	0e789c5272	Updgraded Rails to 2.3.11 (#6887). ... git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4904 e93f8b46-1217-0410-a6f0-8f06a7374b81	14 years ago
Eric Davis	904897ac90	[#283] Fix tpyo	14 years ago
Eric Davis	f16c5bcb5f	[#283] Fix tpyo	14 years ago
Eric Davis	85d52978c3	[#283] Update the i18n deprecation message ... * Use Rails' Deprecation logger instead of the standard logger * Update the url to a message in the forum about the change	14 years ago
Eric Davis	0c458be040	[#283] Update the i18n deprecation message ... * Use Rails' Deprecation logger instead of the standard logger * Update the url to a message in the forum about the change	14 years ago
Jean-Philippe Lang	3c1576e364	Manually require i18n 0.4.2 before Rails tries to load the most recent gem (#7013). ... This workaround makes Redmine work even if i18n 0.5.0 gem is installed. git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4516 e93f8b46-1217-0410-a6f0-8f06a7374b81	14 years ago
Jean-Philippe Lang	ea59d93dc8	Dry Users API responders. ... git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4454 e93f8b46-1217-0410-a6f0-8f06a7374b81	14 years ago
Jean-Philippe Lang	7482d2f5f4	Fixed: Trunk not working with i18n gem 0.4.2 (#6784). ... git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4389 e93f8b46-1217-0410-a6f0-8f06a7374b81	14 years ago
Eric Davis	768d67f27b	Workaround for i18n 0.4.x with the old style syntax. #6428 #5608 ... This will also silance the whole trace with the deprecation warning. Contributed by Felix Schäfer git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@4183 e93f8b46-1217-0410-a6f0-8f06a7374b81	14 years ago
Jean-Philippe Lang	2a19efaf05	Rails 2.3.5 deprecation. ... git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3235 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Jean-Philippe Lang	86a9d90f07	Fixes distance of date in words calculation. ... git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@3016 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Eric Davis	7b0cb6aba8	Upgraded to Rails 2.3.4 (#3597) ... * Ran the Rails upgrade * Upgraded to Rails Engines 2.3.2 * Added a plugin to let Engines override application views. * Converted tests to use the new classes: ** ActionController::TestCase for functional ** ActiveSupport::TestCase for units * Converted ActiveRecord::Error message to a string. * ActiveRecord grouping returns an ordered hash which doesn't have #sort! * Updated the I18n storage_units format. * Added some default initializers from a fresh rails app * Changed the order of check_box_tags and hidden_field_tags. The hidden tag needs to appear first in Rails 2.3, otherwise it will override any value in the check_box_tag. * Removed the custom handler for when the cookie store is tampered with. Rails 2.3 removed the TamperedWithCookie exception and instead Rails will not load the data from it when it's been tampered with (e.g. no user login). * Fixed mail layouts, 2.3 has problems with implicit multipart emails that use layouts. Also removed some custom Redmine mailer code. * Fixed a bug that occurred in tests where the "required" span tag would be added to the :field_status translation. This resulted in an email string of: <li>Status<span class="required"> *</span><span class="required"> *</span> Instead of: <li>Status: New</li> git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2887 e93f8b46-1217-0410-a6f0-8f06a7374b81	15 years ago
Jean-Philippe Lang	a64b8695c8	Patch ActiveRecord::Errors#full_messages so that it contains custom values error messages. ... git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2518 e93f8b46-1217-0410-a6f0-8f06a7374b81	16 years ago