1
0
Fork 0
mirror of https://github.com/rails/rails.git synced 2022-11-09 12:12:34 -05:00
rails--rails/guides
Jose and Yehuda 56cdc81c08 Remove default match without specified method
In the current router DSL, using the +match+ DSL
method will match all verbs for the path to the
specified endpoint.

In the vast majority of cases, people are
currently using +match+ when they actually mean
+get+. This introduces security implications.

This commit disallows calling +match+ without
an HTTP verb constraint by default. To explicitly
match all verbs, this commit also adds a
:via => :all option to +match+.

Closes #5964
2012-04-24 22:52:26 -05:00
..
assets Add validation code to getting started guide and improve validation 2012-04-21 12:17:51 +02:00
code/getting_started Add validation code to getting started guide and improve validation 2012-04-21 12:17:51 +02:00
rails_guides Revert "parse <css> block as code (used in engines guide) " 2012-04-02 23:34:47 +05:30
source Remove default match without specified method 2012-04-24 22:52:26 -05:00
rails_guides.rb
Rakefile
w3c_validator.rb Updated/changed useless tr/gsubs 2012-04-03 15:16:09 +02:00