Aaron Patterson 2392535f40 Merge branch 'master-sec' ... * master-sec: fix protocol checking in sanitization [CVE-2013-1857] JDOM XXE Protection [CVE-2013-1856] fix incorrect ^$ usage leading to XSS in sanitize_css [CVE-2013-1855] stop calling to_sym when building arel nodes [CVE-2013-1854]		2013-03-18 10:17:32 -07:00
..
erb	Don't require action_dispatch in ActionView::UrlHelpers	2012-08-28 11:19:29 +02:00
html-scanner	fix protocol checking in sanitization [CVE-2013-1857]	2013-03-15 17:46:34 -07:00
testing
active_model_helper_test.rb
asset_tag_helper_test.rb	Revert "Revert "Merge pull request #4803 from lucascaton/master""	2013-02-21 15:34:02 -02:00
atom_feed_helper_test.rb	deprecate assert_blank and assert_present.	2013-01-05 18:04:52 +01:00
capture_helper_test.rb	Fix #9360 regression in content_for	2013-02-25 20:03:37 +04:00
compiled_templates_test.rb
date_helper_i18n_test.rb	Remove i18n symbol dependency	2013-01-17 15:21:26 +00:00
date_helper_test.rb	fix time_tag helper and update tests to not rely on dynamically generated values	2013-02-22 11:04:13 +04:00
debug_helper_test.rb	Add missing require to debug helper test	2013-03-05 22:00:10 -03:00
dependency_tracker_test.rb	Register trackers on extensions, not handlers	2013-02-20 16:42:30 +01:00
digestor_test.rb	Register trackers on extensions, not handlers	2013-02-20 16:42:30 +01:00
erb_util_test.rb	&#39 dates back to SGML when &#x27 was introduced in HTML 4.0	2012-09-09 19:48:32 +06:00
form_collections_helper_test.rb	Fix collection_radio_buttons with the option :checked with value of	2012-12-26 23:00:31 -03:00
form_helper_test.rb	Allow pass multipart option to form_for	2013-03-17 10:51:08 +01:00
form_options_helper_i18n_test.rb
form_options_helper_test.rb	Fix incorrectly appended square brackets to a multiple select box	2013-03-08 19:01:32 +01:00
form_tag_helper_test.rb	set 'alt' attribute for image_submit_tag	2013-01-08 15:56:47 +04:00
javascript_helper_test.rb	Use Encoding::UTF_8 constant 🚯	2013-01-28 17:06:02 +09:00
log_subscriber_test.rb	Remove stubs from LogSubscriber tests	2012-08-28 10:51:04 +02:00
lookup_context_test.rb	Add ActionView::Base.default_formats	2012-08-28 10:51:04 +02:00
number_helper_test.rb	cleanup AP number_helpers_test	2013-02-27 13:40:26 +01:00
output_buffer_test.rb
output_safety_helper_test.rb
record_identifier_test.rb	Fix ActionView::RecordIdentifier to work as a singleton	2012-08-28 11:19:37 +02:00
record_tag_helper_test.rb	Fix content_tag_for with array html option.	2013-01-31 01:28:57 +08:00
render_test.rb	Do not generate local vars for partials without object or collection	2013-01-08 09:15:20 -02:00
resolver_patterns_test.rb
sanitize_helper_test.rb	Minor cleanup, helper method was only used once	2012-10-15 11:30:54 +02:00
streaming_render_test.rb
tag_helper_test.rb	Add test to ensure data attributes are properly escaped with tag helpers	2012-11-01 08:49:47 -02:00
template_error_test.rb
template_test.rb	Override <%== to always behave as literal text rather than toggling based on whether escaping is enabled. Fixes that existing plaintext email templates using <%== unexpectedly flipped to *escaping* HTML when #8235 was merged.	2012-12-03 10:31:18 -07:00
test_case_test.rb	partials inside directory work with assert_template	2013-02-04 14:46:50 +01:00
test_test.rb	Remove unneeded tests	2012-12-31 13:57:24 -03:00
text_helper_test.rb	Use Encoding::UTF_8 constant 🚯	2013-01-28 17:06:02 +09:00
translation_helper_test.rb
url_helper_test.rb	remove ancient TODOs [ci skip].	2013-03-18 16:42:08 +01:00