Ian Christian Myers b61e10f9ad All parameters for #create in PostsController pass through strong_parameters. ...

We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type.

2013-06-07 01:29:25 -07:00

..

admin

Only use HTML templates for the digest email.

2013-06-06 15:08:56 -04:00

users

Refactored user_name suggestion methods into a module to reduce the complexity of User model

2013-06-06 16:40:10 +02:00

application_controller.rb

Handle /t/only-the-slug urls by trying to find the topic by slug (second try)

2013-06-06 14:41:37 -04:00

categories_controller.rb

Implemented strong_parameters for Category/CategoriesController.

2013-06-04 23:45:25 -07:00

clicks_controller.rb

Enabled strong_parameters across all models/controllers.

2013-06-06 00:30:59 -07:00

draft_controller.rb

Use consistent new-style hashes in render calls *twitch*

2013-03-22 14:08:11 -04:00

education_controller.rb

Replace MultisiteI18n hack with SiteContent and admin editing.

2013-04-05 16:48:15 -04:00

email_controller.rb

enforce coding convention

2013-03-05 01:42:44 +01:00

exceptions_controller.rb

get rid of nonsense 404.html

2013-05-20 10:29:49 +10:00

forums_controller.rb

keep /srv/status exposed

2013-06-06 14:40:10 +10:00

invites_controller.rb

Merge pull request #964 from chrishunt/exclusive-club

2013-06-05 16:38:47 -07:00

list_controller.rb

work in progress, live unread and new counts

2013-05-30 16:49:57 +10:00

notifications_controller.rb

we need some, albeit hacky way of clearing these old pms, make at least some way of finding them

2013-05-16 17:30:30 +10:00

onebox_controller.rb

Fixes regression with video embeds

2013-03-21 20:53:12 -04:00

post_actions_controller.rb

Implemented strong_parameters for PostAction/PostActionsController.

2013-06-05 00:23:51 -07:00

posts_controller.rb

All parameters for #create in PostsController pass through strong_parameters.

2013-06-07 01:29:25 -07:00

request_access_controller.rb

Fix all the trailing whitespace

2013-02-07 16:45:24 +01:00

robots_txt_controller.rb

Remove unusued site_settings, show checkbox in UI for boolean values, remove restrict_access

2013-03-01 14:27:41 -05:00

search_controller.rb

Enabled strong_parameters across all models/controllers.

2013-06-06 00:30:59 -07:00

session_controller.rb

Enabled strong_parameters across all models/controllers.

2013-06-06 00:30:59 -07:00

static_controller.rb

Redirect to root after login if no path provided

2013-06-04 16:10:10 -07:00

topics_controller.rb

Store when a topic was first set to auto-close and report that amount of time when it closes. And do some refactoring.

2013-06-06 17:04:21 -04:00

uploads_controller.rb

Implemented strong_parameters for Upload/UploadsController.

2013-06-05 00:55:55 -07:00

user_actions_controller.rb

introduce strong_parameters

2013-05-27 11:06:09 +10:00

users_controller.rb

Show 'waiting approval' and don't send email

2013-06-06 18:36:16 -07:00