72 Commits (a48792b12b24b23f1a64752dfb9f1278ce203644)

Author	SHA1	Message	Date
Johannes Wollert	8b096975fe	updates copyright headers ... updates more copyright more copyright headers	11 years ago
Hagen Schink	502c7b74d6	Removes superfluous patch	11 years ago
Jonas Heinrich	06f2b8b8bf	found another prettier way	11 years ago
Jonas Heinrich	ed54671e6f	fixed error message during creation of groups	11 years ago
Jonas Heinrich	cd35372b0c	Replaced Issue added/updated with Work package added/updated and added a migration for the settings	11 years ago
jwollert	2fdbf0316e	fixes small grammatical error in translation missing warning	11 years ago
Philipp Tessenow	444546e2e8	use \A and \z instead of ^ and $ in ruby regexes	11 years ago
Philipp Tessenow	a1e67dd460	new copyright header #1903	11 years ago
Christian Ratz	43bc798abb	changed feed setting to enabled instead of disabled	11 years ago
Christian Ratz	b86f8d65d7	[#1850] Disable atom feeds via setting	11 years ago
Jens Ulferts	bf1cb1e449	removes vendored acts_as_list ... The patch applied on it was moved to a separate module which is loaded during initialization. In order to have all the classes using acts_as_list receive the patch, it is necessary to load the patch as early as possible. Hence the patch is loaded in 10-patches.	12 years ago
Jens Ulferts	21459a384f	provide every possible file with a short copyright notice ... This was done using the rake task: rake copyright:update	12 years ago
Philipp Tessenow	48459250e4	when generating the I18n Deprecation message, consider all rails3 translation definitions (even superclasses)	12 years ago
Philipp Tessenow	068fbf6545	modified our human_attribute_name patch ... All /(.*)_id/ attributes names will be stripped of the '_id' part. Prepare for the new Rails3 way translation files.	12 years ago
Jens Ulferts	3ba030289d	improves deprecation warning message and allows passing default values ... * states the key and model for which the human_attribute_name is inquired * have the raise and default option only as a fallback when nothing else is supplied. Doing this allows for model classes to pass additional attributes.	12 years ago
Jens Ulferts	cdca76e9d2	prevents attribute name to be humanized ... Without the :default => false, the method's super implementation will use attribute_name.to_s.humanize as a last resort. This will prevent an error from beeing raised which will render the rescue statement added for backwards compatibility useless. Adding the fix will lead to a lot of warnings. But hey, that will lead to a faster adaptation of the new standard.	12 years ago
Martin Czuchra	59155c4e94	Fixes support for raise option.	12 years ago
Martin Czuchra	7f6c674136	Adds a deprecation warning to the human_attribute_name thingie.	12 years ago
Martin Czuchra	2815770661	Changes redmine attribute i18n.	12 years ago
Philipp Tessenow	6f96b1fd67	Revert "backports CVE-2013-0155" ... Fix is included in latest rails This reverts commit 1b27c78edb.	12 years ago
Philipp Tessenow	671e825504	Revert "Backported fix for CVE-2012-5664" ... The security fix is included in newest Rails releases. This reverts commit b6d165bd87.	12 years ago
Jens Ulferts	1b27c78edb	backports CVE-2013-0155	12 years ago
Martin Linkhorst	6e6dfbbdc2	this patch expands the #full_messages of errors of the :custom_fields attribute to display all the individual errors per custom field	12 years ago
Jens Ulferts	5606e0e07d	removes security patches now part of rails 2.3.15	12 years ago
Martin Czuchra	b6d165bd87	Backported fix for CVE-2012-5664 ... Options hashes should only be extracted if there are extra parameters. Fixed Versions: 3.2.10, 3.1.9 and 3.0.18. https://groups.google.com/forum/?fromgroups=#!topic/rubyonrails-security/DCNTNp_qjFM	12 years ago
Martin Linkhorst	fb42eb8813	remove a patch that is in the gem code now	12 years ago
Martin Linkhorst	8743d77ac6	finally, re-enable all deprecation warnings since there are only a few left	12 years ago
Martin Linkhorst	78c4196656	DEPRECATION FIX: use errors[:attribute] instead of errors.on(:attribute). ... also errors[:attribute] will never return nil. it always returns an array. if there aren't any errors that array will be empty. updated the specs accordingly	12 years ago
Jens Ulferts	dec036e9e4	Fixes potential XSS vulnerabilities in Ruby on Rails (CVE-2012-3464) and strip_tags (CVE-2012-3465)	12 years ago
Martin Linkhorst	4d5c1e9f61	remove tmail specific stuff from the initializer ... asynchronous sending will be done with delayed job in rails 3 rails 4 can use the new Rails.queue with an async Mail wrapper enabled by config.action_mailer.async = true	12 years ago
Jens Ulferts	944f6f86ab	handles responses to api again ... * defines a custom lookup of templates to find templates names foo.api.erb again	12 years ago
Martin Linkhorst	d1e0c6d971	REVIEW: merge the two patches	12 years ago
Martin Linkhorst	b6aac286d4	take the root Query class rather than active records. also re-allow passing an order to acts_as_nested_set. all to make the tests happy	12 years ago
Martin Linkhorst	b49e0207a5	fix nested issues tests (1 test still fails from time to time :()	12 years ago
Holger Just	afa147beee	Fix SQL injection via nested hashes in conditions. CVE-2012-2695 #1037	12 years ago
Holger Just	5c71f038c5	Fix SQL injection via nested hashes in conditions (CVE-2012-2694) #1036	12 years ago
Holger Just	5ac0002526	[#1025] Fix Rails vulnerability (CVE-2012-2660)	12 years ago
Martin Linkhorst	1caae19c22	REVIEW: patch active record base since more than one class use it	12 years ago
Martin Linkhorst	65f1302b57	correct markup for inline errors	12 years ago
Martin Linkhorst	771dcf4fb0	keep the right api for human_attribute_name	12 years ago
Jens Ulferts	52e106c113	redefines api mime type ... * broken by rails upgrade	12 years ago
Jens Ulferts	5babf1d05f	REVIEW: deactivates method manipulation for ActiveRecord::Errors#on ... * get rails 3 to boot first	12 years ago
Jens Ulferts	12e24f0f47	REVIEW: deactivates alias method chaining of TMail::Unquoter#convert_to ... * get rails 3 to boot first	12 years ago
Jens Ulferts	9711b9ab70	moving accessibility concern on errors into own module, included by ActionView::Base ... * handles custom_values correctly ** no longer crashes when #full_messages returns more values than #errors * refactoring former version	13 years ago
Jens Ulferts	3243bdde7a	Revert "include custom_values into the full error messages directly:" ... This reverts commit 8b85f078da.	13 years ago
Jens Ulferts	5fe699dce6	Revert "using same method (errors_including_custom_values) for generating unique ids on error_messages_for as full_messages does:" ... This reverts commit 8b8047cbff.	13 years ago
Jens Ulferts	8b8047cbff	using same method (errors_including_custom_values) for generating unique ids on error_messages_for as full_messages does: ... * prevents unequal amount of errors returned	13 years ago
Jens Ulferts	8b85f078da	include custom_values into the full error messages directly: ... * delete generic error message for custom values	13 years ago
Romano Licker	cadf140681	[#671] error messages are now links that focus the corresponding ... element	13 years ago
Holger Just	91070236db	Set source encoding to UTF-8	13 years ago