kotovalexarian-likes-github/rails--rails
1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
Code Releases Activity
rails--rails/actionview/lib/action_view/helpers.rb

67 lines
1.6 KiB
Ruby
Raw Normal View History

Use frozen string literal in actionview/
2017-07-23 11:36:41 -04:00
# frozen_string_literal: true
applies new string literal convention in actionview/lib The current code base is not uniform. After some discussion, we have chosen to go with double quotes by default.
2016-08-06 12:48:35 -04:00
require "active_support/benchmarkable"
Revert benchmark helper regression. Use a #capture within a #benchmark block. Breaks benchmark calls that return non-String values otherwise. Revert "add benchmark helper that works in erb" This reverts commit 904e544cc8f5846de7c31827bb5556c6a238c0de. Conflicts: actionpack/lib/action_view/helpers.rb actionpack/lib/action_view/helpers/benchmark_helper.rb actionpack/test/template/benchmark_helper_test.rb
2013-01-14 12:24:43 -05:00
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
module ActionView #:nodoc:
module Helpers #:nodoc:
Use ActiveSupport::Autoload for view helpers. [#4237 state:resolved] Signed-off-by: wycats <wycats@gmail.com>
2010-03-19 15:19:13 -04:00
extend ActiveSupport::Autoload
autoload :ActiveModelHelper
autoload :AssetTagHelper
Split asset url helpers into seperate AssetUrlHelper
2012-10-12 14:46:24 -04:00
autoload :AssetUrlHelper
Use ActiveSupport::Autoload for view helpers. [#4237 state:resolved] Signed-off-by: wycats <wycats@gmail.com>
2010-03-19 15:19:13 -04:00
autoload :AtomFeedHelper
autoload :CacheHelper
autoload :CaptureHelper
More AV::Base cleanup.
2011-05-04 06:04:29 -04:00
autoload :ControllerHelper
Add support for automatic nonce generation for Rails UJS Because the UJS library creates a script tag to process responses it normally requires the script-src attribute of the content security policy to include 'unsafe-inline'. To work around this we generate a per-request nonce value that is embedded in a meta tag in a similar fashion to how CSRF protection embeds its token in a meta tag. The UJS library can then read the nonce value and set it on the dynamically generated script tag to enable it to execute without needing 'unsafe-inline' enabled. Nonce generation isn't 100% safe - if your script tag is including user generated content in someway then it may be possible to exploit an XSS vulnerability which can take advantage of the nonce. It is however an improvement on a blanket permission for inline scripts. It is also possible to use the nonce within your own script tags by using `nonce: true` to set the nonce value on the tag, e.g <%= javascript_tag nonce: true do %> alert('Hello, World!'); <% end %> Fixes #31689.
2018-02-16 08:21:48 -05:00
autoload :CspHelper
Use ActiveSupport::Autoload for view helpers. [#4237 state:resolved] Signed-off-by: wycats <wycats@gmail.com>
2010-03-19 15:19:13 -04:00
autoload :CsrfHelper
autoload :DateHelper
autoload :DebugHelper
autoload :FormHelper
autoload :FormOptionsHelper
autoload :FormTagHelper
autoload :JavaScriptHelper, "action_view/helpers/javascript_helper"
autoload :NumberHelper
Removed Array#safe_join in AS core_ext and moved it to a view helper with the same same. This also changes how safe_join works, if items or the separator are not html_safe they are html_escape'd, a html_safe string is always returned. Signed-off-by: José Valim <jose.valim@gmail.com>
2011-02-10 10:45:39 -05:00
autoload :OutputSafetyHelper
Tidy up pending TODOs after discussion with Mr. Gatoz (@wycats).
2011-05-01 13:39:57 -04:00
autoload :RenderingHelper
Use ActiveSupport::Autoload for view helpers. [#4237 state:resolved] Signed-off-by: wycats <wycats@gmail.com>
2010-03-19 15:19:13 -04:00
autoload :SanitizeHelper
autoload :TagHelper
autoload :TextHelper
autoload :TranslationHelper
autoload :UrlHelper
Make ActionView::Tags loading tread safe
2013-12-02 17:25:20 -05:00
autoload :Tags
def self.eager_load!
super
Tags.eager_load!
end
use autoload instead of explicit requires for ActionView
2008-11-23 14:42:07 -05:00
Refactored url_for in AV to have its own instances of the helpers instead of proxying back to the controller. This potentially allows for more standalone usage of AV. It also kicked up a lot of dust in the tests, which were mocking out controllers to get this behavior. By moving it to the view, it made a lot of the tests more standalone (a win)
2010-04-03 05:30:06 -04:00
extend ActiveSupport::Concern
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
Revert benchmark helper regression. Use a #capture within a #benchmark block. Breaks benchmark calls that return non-String values otherwise. Revert "add benchmark helper that works in erb" This reverts commit 904e544cc8f5846de7c31827bb5556c6a238c0de. Conflicts: actionpack/lib/action_view/helpers.rb actionpack/lib/action_view/helpers/benchmark_helper.rb actionpack/test/template/benchmark_helper_test.rb
2013-01-14 12:24:43 -05:00
include ActiveSupport::Benchmarkable
Rename ActiveRecordHelper to ActiveModelHelper
2009-07-19 12:28:15 -04:00
include ActiveModelHelper
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
include AssetTagHelper
Split asset url helpers into seperate AssetUrlHelper
2012-10-12 14:46:24 -04:00
include AssetUrlHelper
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
include AtomFeedHelper
include CacheHelper
include CaptureHelper
More AV::Base cleanup.
2011-05-04 06:04:29 -04:00
include ControllerHelper
Add support for automatic nonce generation for Rails UJS Because the UJS library creates a script tag to process responses it normally requires the script-src attribute of the content security policy to include 'unsafe-inline'. To work around this we generate a per-request nonce value that is embedded in a meta tag in a similar fashion to how CSRF protection embeds its token in a meta tag. The UJS library can then read the nonce value and set it on the dynamically generated script tag to enable it to execute without needing 'unsafe-inline' enabled. Nonce generation isn't 100% safe - if your script tag is including user generated content in someway then it may be possible to exploit an XSS vulnerability which can take advantage of the nonce. It is however an improvement on a blanket permission for inline scripts. It is also possible to use the nonce within your own script tags by using `nonce: true` to set the nonce value on the tag, e.g <%= javascript_tag nonce: true do %> alert('Hello, World!'); <% end %> Fixes #31689.
2018-02-16 08:21:48 -05:00
include CspHelper
Expose CSRF tag for UJS adapters
2010-02-04 17:15:16 -05:00
include CsrfHelper
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
include DateHelper
include DebugHelper
include FormHelper
include FormOptionsHelper
include FormTagHelper
simplify console with helpers
2008-11-23 16:15:05 -05:00
include JavaScriptHelper
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
include NumberHelper
Removed Array#safe_join in AS core_ext and moved it to a view helper with the same same. This also changes how safe_join works, if items or the separator are not html_safe they are html_escape'd, a html_safe string is always returned. Signed-off-by: José Valim <jose.valim@gmail.com>
2011-02-10 10:45:39 -05:00
include OutputSafetyHelper
Tidy up pending TODOs after discussion with Mr. Gatoz (@wycats).
2011-05-01 13:39:57 -04:00
include RenderingHelper
Include all helpers into ActionView::Helper
2008-08-25 22:24:48 -04:00
include SanitizeHelper
include TagHelper
include TextHelper
include TranslationHelper
include UrlHelper
end
end
Copy permalink