mirror of
https://github.com/rails/rails.git
synced 2022-11-09 12:12:34 -05:00
56cdc81c08
In the current router DSL, using the +match+ DSL method will match all verbs for the path to the specified endpoint. In the vast majority of cases, people are currently using +match+ when they actually mean +get+. This introduces security implications. This commit disallows calling +match+ without an HTTP verb constraint by default. To explicitly match all verbs, this commit also adds a :via => :all option to +match+. Closes #5964 |
||
|---|---|---|
| .. | ||
| bare_metal_test.rb | ||
| base_test.rb | ||
| content_negotiation_test.rb | ||
| content_type_test.rb | ||
| metal_test.rb | ||
| middleware_test.rb | ||
| render_action_test.rb | ||
| render_context_test.rb | ||
| render_file_test.rb | ||
| render_implicit_action_test.rb | ||
| render_layout_test.rb | ||
| render_partial_test.rb | ||
| render_streaming_test.rb | ||
| render_template_test.rb | ||
| render_test.rb | ||
| render_text_test.rb | ||
| render_xml_test.rb | ||