mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
Audit the usage of the word "JavaScript"
This commit is contained in:
parent
eb66eadfc6
commit
f8d1b52a4f
5 changed files with 5 additions and 5 deletions
|
@ -785,7 +785,7 @@ h5. content_for
|
|||
|
||||
Calling +content_for+ stores a block of markup in an identifier for later use. You can make subsequent calls to the stored content in other templates or the layout by passing the identifier as an argument to +yield+.
|
||||
|
||||
For example, let's say we have a standard application layout, but also a special page that requires certain Javascript that the rest of the site doesn't need. We can use +content_for+ to include this Javascript on our special page without fattening up the rest of the site.
|
||||
For example, let's say we have a standard application layout, but also a special page that requires certain JavaScript that the rest of the site doesn't need. We can use +content_for+ to include this JavaScript on our special page without fattening up the rest of the site.
|
||||
|
||||
*app/views/layouts/application.html.erb*
|
||||
|
||||
|
|
|
@ -28,7 +28,7 @@ the +ul+ node.
|
|||
h4. Asynchronous JavaScript + XML
|
||||
|
||||
AJAX means Asynchronous JavaScript + XML. Asynchronous means that the page is not
|
||||
reloaded, the request made is separate from the regular page request. Javascript
|
||||
reloaded, the request made is separate from the regular page request. JavaScript
|
||||
is used to evaluate the response and the XML part is a bit misleading as XML is
|
||||
not required, you respond to the HTTP request with JSON or regular HTML as well.
|
||||
|
||||
|
|
|
@ -160,7 +160,7 @@ $ rails generate controller Greetings hello
|
|||
create app/assets/stylesheets/greetings.css.scss
|
||||
</shell>
|
||||
|
||||
What all did this generate? It made sure a bunch of directories were in our application, and created a controller file, a view file, a functional test file, a helper for the view, a javascript file and a stylesheet file.
|
||||
What all did this generate? It made sure a bunch of directories were in our application, and created a controller file, a view file, a functional test file, a helper for the view, a JavaScript file and a stylesheet file.
|
||||
|
||||
Check out the controller and modify it a little (in +app/controllers/greetings_controller.rb+):
|
||||
|
||||
|
|
|
@ -186,7 +186,7 @@ The full set of methods that can be used in this block are as follows:
|
|||
* +force_plural+ allows pluralized model names. Defaults to +false+.
|
||||
* +helper+ defines whether or not to generate helpers. Defaults to +true+.
|
||||
* +integration_tool+ defines which integration tool to use. Defaults to +nil+.
|
||||
* +javascripts+ turns on the hook for javascripts in generators. Used in Rails for when the +scaffold+ generator is run. Defaults to +true+.
|
||||
* +javascripts+ turns on the hook for JavaScripts in generators. Used in Rails for when the +scaffold+ generator is run. Defaults to +true+.
|
||||
* +javascript_engine+ configures the engine to be used (for eg. coffee) when generating assets. Defaults to +nil+.
|
||||
* +orm+ defines which orm to use. Defaults to +false+ and will use Active Record by default.
|
||||
* +performance_tool+ defines which performance tool to use. Defaults to +nil+.
|
||||
|
|
|
@ -608,7 +608,7 @@ This URL passes the filter because the regular expression matches – the second
|
|||
link_to "Homepage", @user.homepage
|
||||
</ruby>
|
||||
|
||||
The link looks innocent to visitors, but when it's clicked, it will execute the javascript function "exploit_code" or any other javascript the attacker provides.
|
||||
The link looks innocent to visitors, but when it's clicked, it will execute the JavaScript function "exploit_code" or any other JavaScript the attacker provides.
|
||||
|
||||
To fix the regular expression, \A and \z should be used instead of ^ and $, like so:
|
||||
|
||||
|
|
Loading…
Reference in a new issue