Ian Christian Myers b61e10f9ad All parameters for #create in PostsController pass through strong_parameters. ...

We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type.

2013-06-07 01:29:25 -07:00

..

admin

Enabled strong_parameters across all models/controllers.

2013-06-06 00:30:59 -07:00

application_controller_spec.rb

FIX: [security bug] XHR check bypass

2013-04-30 02:34:19 +02:00

categories_controller_spec.rb

Implemented strong_parameters for Category/CategoriesController.

2013-06-04 23:45:25 -07:00

clicks_controller_spec.rb

Enabled strong_parameters across all models/controllers.

2013-06-06 00:30:59 -07:00

draft_controller_spec.rb

remove trailing whitespaces ❤️

2013-02-26 07:31:35 +03:00

education_controller_spec.rb

Replace MultisiteI18n hack with SiteContent and admin editing.

2013-04-05 16:48:15 -04:00

email_controller_spec.rb

remove trailing whitespaces ❤️

2013-02-26 07:31:35 +03:00

invites_controller_spec.rb

Implemented strong_parameters for Invite/InvitesController.

2013-06-05 00:04:03 -07:00

list_controller_spec.rb

work in progress, live unread and new counts

2013-05-30 16:49:57 +10:00

notifications_controller_spec.rb

remove trailing whitespaces ❤️

2013-02-26 07:31:35 +03:00

omniauth_callbacks_controller_spec.rb

Disable OmniAuth account creation if 'invite only'

2013-06-05 11:11:02 -07:00

onebox_controller_spec.rb

Fixes regression with video embeds

2013-03-21 20:53:12 -04:00

post_actions_controller_spec.rb

Implemented strong_parameters for PostAction/PostActionsController.

2013-06-05 00:23:51 -07:00

posts_controller_spec.rb

All parameters for #create in PostsController pass through strong_parameters.

2013-06-07 01:29:25 -07:00

request_access_controller_spec.rb

remove trailing whitespaces ❤️

2013-02-26 07:31:35 +03:00

robots_txt_controller_spec.rb

Remove unusued site_settings, show checkbox in UI for boolean values, remove restrict_access

2013-03-01 14:27:41 -05:00

search_controller_spec.rb

Use search context for filtering search results by current category or user

2013-05-24 14:04:26 -04:00

session_controller_spec.rb

Test correct login behavior when pending approval

2013-06-06 18:36:16 -07:00

static_controller_spec.rb

Redirect to root after login if no path provided

2013-06-04 16:10:10 -07:00

topics_controller_spec.rb

Store when a topic was first set to auto-close and report that amount of time when it closes. And do some refactoring.

2013-06-06 17:04:21 -04:00

uploads_controller_spec.rb

Implemented strong_parameters for Upload/UploadsController.

2013-06-05 00:55:55 -07:00

user_actions_controller_spec.rb

introduce strong_parameters

2013-05-27 11:06:09 +10:00

users_controller_spec.rb

Show 'waiting approval' and don't send email

2013-06-06 18:36:16 -07:00