kotovalexarian-likes-github/rails--rails

Fork 0

mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00

Commit graph

Author	SHA1	Message	Date
Jose and Yehuda	56cdc81c08	Remove default match without specified method In the current router DSL, using the +match+ DSL method will match all verbs for the path to the specified endpoint. In the vast majority of cases, people are currently using +match+ when they actually mean +get+. This introduces security implications. This commit disallows calling +match+ without an HTTP verb constraint by default. To explicitly match all verbs, this commit also adds a :via => :all option to +match+. Closes #5964	2012-04-24 22:52:26 -05:00
lest	565d92f578	fix method redefined warnings in tests	2011-11-30 18:57:12 +03:00
Aaron Patterson	943a37348a	moving test_generate to an integration test with one assert per test	2011-08-12 15:55:00 -07:00

Author

SHA1

Message

Date

Jose and Yehuda

56cdc81c08

Remove default match without specified method

In the current router DSL, using the +match+ DSL
method will match all verbs for the path to the
specified endpoint.

In the vast majority of cases, people are
currently using +match+ when they actually mean
+get+. This introduces security implications.

This commit disallows calling +match+ without
an HTTP verb constraint by default. To explicitly
match all verbs, this commit also adds a
:via => :all option to +match+.

Closes #5964

2012-04-24 22:52:26 -05:00

lest

565d92f578

fix method redefined warnings in tests

2011-11-30 18:57:12 +03:00

Aaron Patterson

943a37348a

moving test_generate to an integration test with one assert per test

2011-08-12 15:55:00 -07:00

3 commits