## Rails 3.0.20 (unreleased) * Fixed JSON params parsing regression for non-object JSON content. ## Rails 3.0.19 (Jan 8, 2013) * Strip nils from collections on JSON and XML posts. [CVE-2013-0155] ## Rails 3.0.18 (Jan 2, 2013) * No changes. ## Rails 3.0.17 (Aug 9, 2012) * There is an XSS vulnerability in the strip_tags helper in Ruby on Rails, the helper doesn't correctly handle malformed html. As a result an attacker can execute arbitrary javascript through the use of specially crafted malformed html. *Marek from Nethemba (www.nethemba.com) & Santiago Pastorino* * When an "include_blank" value is supplied to the `select_tag` helper, the "include_blank" value is not escaped. If untrusted data is not escaped, and is supplied as the prompt value, there is a potential for XSS attacks. Vulnerable code will look something like this: select_tag("name", options, :include_blank => UNTRUSTED_INPUT) *Santiago Pastorino* ## Rails 3.0.16 (Jul 26, 2012) * Do not convert digest auth strings to symbols. CVE-2012-3424 ## Rails 3.0.14 (Jun 12, 2012) * nil is removed from array parameter values CVE-2012-2694 * Rails 3.0.13 (May 31, 2012) * Strip null bytes from Location header * load the encoding converter to work around [ruby-core:41556] when switching encodings * Avoid inspecting the whole route set, closes #1525 * whitelist protocols for auto_link * Strip [nil] from parameters hash. Thanks to Ben Murphy for reporting this! CVE-2012-2660 *Rails 3.0.12 (unreleased)* * Fix using `tranlate` helper with a html translation which uses the `:count` option for pluralization. *Jon Leighton* *Rails 3.0.11 (unreleased)* * Fix XSS security vulnerability in the `translate` helper method. When using interpolation in combination with HTML-safe translations, the interpolated input would not get HTML escaped. *GH 3664* Before: translate('foo_html', :something => ' Which is needed for dealing with the IE6 DOM when it's not yet fully loaded. * Fixed that rescue template path shouldn't be hardcoded, then it's easier to hook in your own #6295 [Mike Naberezny] * Fixed escaping of backslashes in JavaScriptHelper#escape_javascript #6302 [sven@c3d2.de] * Fixed that some 500 rescues would cause 500's themselves because the response had not yet been generated #6329 [cmselmer] * respond_to :html doesn't assume .rhtml. #6281 [Hampton Catlin] * Fixed some deprecation warnings in ActionPack [Rick Olson] * assert_select_rjs decodes escaped unicode chars since the Javascript generators encode them. #6240 [japgolly] * Deprecation: @cookies, @headers, @request, @response will be removed after 1.2. Use the corresponding method instead. [Jeremy Kemper] * Make the :status parameter expand to the default message for that status code if it is an integer. Also support symbol statuses. [Jamis Buck]. Examples: head :status => 404 # expands to "404 Not Found" head :status => :not_found # expands to "404 Not Found" head :status => :created # expands to "201 Created" * Add head(options = {}) for responses that have no body. [Jamis Buck]. Examples: head :status => 404 # return an empty response with a 404 status head :location => person_path(@person), :status => 201 * Fix bug that kept any before_filter except the first one from being able to halt the before_filter chain. [Rick Olson] * strip_links is case-insensitive. #6285 [tagoh, Bob Silva] * Clear the cache of possible controllers whenever Routes are reloaded. [Nicholas Seckar] * Filters overhaul including meantime filter support using around filters + blocks. #5949 [Martin Emde, Roman Le Negrate, Stefan Kaes, Jeremy Kemper] * Update RJS render tests. [sam] * Update CGI process to allow sessions to contain namespaced models. Closes #4638. [dfelstead@site5.com] * Fix routing to respect user provided requirements and defaults when assigning default routing options (such as :action => 'index'). Closes #5950. [Nicholas Seckar] * Rescue Errno::ECONNRESET to handle an unexpectedly closed socket connection. Improves SCGI reliability. #3368, #6226 [sdsykes, fhanshaw@vesaria.com] * Added that respond_to blocks will automatically set the content type to be the same as is requested [David Heinemeier Hansson]. Examples: respond_to do |format| format.html { render :text => "I'm being sent as text/html" } format.rss { render :text => "I'm being sent as application/rss+xml" } format.atom { render :text => "I'm being sent as application/xml", :content_type => Mime::XML } end * Added utf-8 as the default charset for all renders. You can change this default using ActionController::Base.default_charset=(encoding) [David Heinemeier Hansson] * Added proper getters and setters for content type and charset [David Heinemeier Hansson]. Example of what we used to do: response.headers["Content-Type"] = "application/atom+xml; charset=utf-8" ...now: response.content_type = Mime::ATOM response.charset = "utf-8" * Updated prototype.js to 1.5.0_rc1 with latest fixes. [Rick Olson] - XPATH support - Make Form.getElements() return elements in the correct order - fix broken Form.serialize return * Declare file extensions exempt from layouts. #6219 [brandon] Example: ActionController::Base.exempt_from_layout 'rpdf' * Add chained replace/update support for assert_select_rjs [Rick Olson] Given RJS like... page['test1'].replace "
foo
" page['test2'].replace_html "
foo
" Test it with... assert_select_rjs :chained_replace assert_select_rjs :chained_replace, "test1" assert_select_rjs :chained_replace_html assert_select_rjs :chained_replace_html, "test2" * Load helpers in alphabetical order for consistency. Resolve cyclic javascript_helper dependency. #6132, #6178 [choonkeat@gmail.com] * Skip params with empty names, such as the &=Save query string from . #2569 [Manfred Stienstra, raphinou@yahoo.com] * Fix assert_tag so that :content => "foo" does not match substrings, but only exact strings. Use :content => /foo/ to match substrings. #2799 [Eric Hodel] * Add descriptive messages to the exceptions thrown by cgi_methods. #6091, #6103 [Nicholas Seckar, Bob Silva] * Update JavaScriptGenerator#show/hide/toggle/remove to new Prototype syntax for multiple ids, #6068 [petermichaux@gmail.com] * Update UrlWriter to support :only_path. [Nicholas Seckar, Dave Thomas] * Fixed JavaScriptHelper#link_to_function and JavaScriptHelper#button_to_function to have the script argument be optional [David Heinemeier Hansson]. So what used to require a nil, like this: link_to("Hider", nil, :class => "hider_link") { |p| p[:something].hide } ...can be written like this: link_to("Hider", :class => "hider_link") { |p| p[:something].hide } * Update to script.aculo.us 1.6.3 [Thomas Fuchs] * Update to Prototype 1.5.0_rc1 [sam] * Added access to nested attributes in RJS #4548 [richcollins@gmail.com]. Examples: page['foo']['style'] # => $('foo').style; page['foo']['style']['color'] # => $('blank_slate').style.color; page['foo']['style']['color'] = 'red' # => $('blank_slate').style.color = 'red'; page['foo']['style'].color = 'red' # => $('blank_slate').style.color = 'red'; * Fixed that AssetTagHelper#image_tag and others using compute_public_path should not modify the incoming source argument (closes #5102) [eule@space.ch] * Deprecated the auto-appending of .png to AssetTagHelper#image_tag calls that doesn't have an extension [David Heinemeier Hansson] * Fixed FormOptionsHelper#select to respect :selected value #5813 * Fixed TextHelper#simple_format to deal with multiple single returns within a single paragraph #5835 [moriq@moriq.com] * Fixed TextHelper#pluralize to handle 1 as a string #5909 [rails@bencurtis.com] * Improved resolution of DateHelper#distance_of_time_in_words for better precision #5994 [Bob Silva] * Changed that uncaught exceptions raised any where in the application will cause RAILS_ROOT/public/500.html to be read and shown instead of just the static "Application error (Rails)" [David Heinemeier Hansson] * Integration tests: thoroughly test ActionController::Integration::Session. #6022 [Kevin Clark] (tests skipped unless you `gem install mocha`) * Added deprecation language for pagination which will become a plugin by Rails 2.0 [David Heinemeier Hansson] * Added deprecation language for in_place_editor and auto_complete_field that both pieces will become plugins by Rails 2.0 [David Heinemeier Hansson] * Deprecated all of ActionController::Dependencies. All dependency loading is now handled from Active Support [David Heinemeier Hansson] * Added assert_select* for CSS selector-based testing (deprecates assert_tag) #5936 [assaf.arkin@gmail.com] * radio_button_tag generates unique id attributes. #3353 [Bob Silva, somekool@gmail.com] * strip_tags passes through blank args such as nil or "". #2229, #6702 [duncan@whomwah.com, dharana] * Cleanup assert_tag :children counting. #2181 [jamie@bravenet.com] * button_to accepts :method so you can PUT and DELETE with it. #6005 [Dan Webb] * Update sanitize text helper to strip plaintext tags, and . [Rick Olson] * Update routing documentation. Closes #6017 [Nathan Witmer] * Add routing tests to assert that RoutingError is raised when conditions aren't met. Closes #6016 [Nathan Witmer] * Deprecation: update docs. #5998 [Jakob Skjerning, Kevin Clark] * Make auto_link parse a greater subset of valid url formats. [Jamis Buck] * Integration tests: headers beginning with X aren't excluded from the HTTP_ prefix, so X-Requested-With becomes HTTP_X_REQUESTED_WITH as expected. [Mike Clark] * Tighten rescue clauses. #5985 [james@grayproductions.net] * Fix send_data documentation typo. #5982 [brad@madriska.com] * Switch to using FormEncodedPairParser for parsing request parameters. [Nicholas Seckar, David Heinemeier Hansson] * respond_to .html now always renders #{action_name}.rhtml so that registered custom template handlers do not override it in priority. Custom mime types require a block and throw proper error now. [Tobias Lütke] * Deprecation: test deprecated instance vars in partials. [Jeremy Kemper] * Add UrlWriter to allow writing urls from Mailers and scripts. [Nicholas Seckar] * Clean up and run the Active Record integration tests by default. #5854 [Kevin Clark, Jeremy Kemper] * Correct example in cookies docs. #5832 [jessemerriman@warpmail.net] * Updated to script.aculo.us 1.6.2 [Thomas Fuchs] * Relax Routing's anchor pattern warning; it was preventing use of [^/] inside restrictions. [Nicholas Seckar] * Add controller_paths variable to Routing. [Nicholas Seckar] * Fix assert_redirected_to issue with named routes for module controllers. [Rick Olson] * Tweak RoutingError message to show option diffs, not just missing named route significant keys. [Rick Olson] * Invoke method_missing directly on hidden actions. Closes #3030. [Nicholas Seckar] * Require Tempfile explicitly for TestUploadedFile due to changes in class auto loading. [Rick Olson] * Add RoutingError exception when RouteSet fails to generate a path from a Named Route. [Rick Olson] * Replace Reloadable with Reloadable::Deprecated. [Nicholas Seckar] * Deprecation: check whether instance variables have been monkeyed with before assigning them to deprecation proxies. Raises a RuntimeError if so. [Jeremy Kemper] * Add support for the param_name parameter to the auto_complete_field helper. #5026 [david.a.williams@gmail.com] * Deprecation! @params, @session, @flash will be removed after 1.2. Use the corresponding instance methods instead. You'll get printed warnings during tests and logged warnings in dev mode when you access either instance variable directly. [Jeremy Kemper] * Make Routing noisy when an anchor regexp is assigned to a segment. #5674 [François Beausoleil] * Added months and years to the resolution of DateHelper#distance_of_time_in_words, such that "60 days ago" becomes "2 months ago" #5611 [pjhyett@gmail.com] * Short documentation to mention use of Mime::Type.register. #5710 [choonkeat@gmail.com] * Make controller_path available as an instance method. #5724 [jmckible@gmail.com] * Update query parser to support adjacent hashes. [Nicholas Seckar] * Make action caching aware of different formats for the same action so that, e.g. foo.xml is cached separately from foo.html. Implicitly set content type when reading in cached content with mime revealing extensions so the entire onous isn't on the webserver. [Marcel Molina Jr.] * Restrict Request Method hacking with ?_method to POST requests. [Rick Olson] * Fix bug when passing multiple options to SimplyRestful, like :new => { :preview => :get, :draft => :get }. [Rick Olson, Josh Susser, Lars Pind] * Dup the options passed to map.resources so that multiple resources get the same options. [Rick Olson] * Fixed the new_#{resource}_url route and added named route tests for Simply Restful. [Rick Olson] * Added map.resources from the Simply Restful plugin [David Heinemeier Hansson]. Examples (the API has changed to use plurals!): map.resources :messages map.resources :messages, :comments map.resources :messages, :new => { :preview => :post } * Fixed that integration simulation of XHRs should set Accept header as well [Edward Frederick] * TestRequest#reset_session should restore a TestSession, not a hash [Michael Koziarski] * Don't search a load-path of '.' for controller files [Jamis Buck] * Update integration.rb to require test_process explicitly instead of via Dependencies. [Nicholas Seckar] * Fixed that you can still access the flash after the flash has been reset in reset_session. Closes #5584 [lmarlow] * Allow form_for and fields_for to work with indexed form inputs. [Jeremy Kemper, Matt Lyon] <% form_for 'post[]', @post do |f| -%> <% end -%> * Remove leak in development mode by replacing define_method with module_eval. [Nicholas Seckar] * Provide support for decimal columns to form helpers. Closes #5672. [Dave Thomas] * Update documentation for erb trim syntax. #5651 [matt@mattmargolis.net] * Pass :id => nil or :class => nil to error_messages_for to supress that html attribute. #3586 [olivier_ansaldi@yahoo.com] * Reset @html_document between requests so assert_tag works. #4810 [Jarkko Laine, easleydp@gmail.com] * Update render :partial documentation. #5646 [matt@mattmargolis.net] * Integration tests behave well with render_component. #4632 [edward.frederick@revolution.com, dev.rubyonrails@maxdunn.com] * Added exception handling of missing layouts #5373 [chris@ozmm.org] * Fixed that real files and symlinks should be treated the same when compiling templates #5438 [zachary@panandscan.com] * Fixed that the flash should be reset when reset_session is called #5584 [Shugo Maeda] * Added special case for "1 Byte" in NumberHelper#number_to_human_size #5593 [murpyh@rubychan.de] * Fixed proper form-encoded parameter parsing for requests with "Content-Type: application/x-www-form-urlencoded; charset=utf-8" (note the presence of a charset directive) [David Heinemeier Hansson] * Add route_name_path method to generate only the path for a named routes. For example, map.person will add person_path. [Nicholas Seckar] * Avoid naming collision among compiled view methods. [Jeremy Kemper] * Fix CGI extensions when they expect string but get nil in Windows. Closes #5276 [Mislav Marohnić] * Determine the correct template_root for deeply nested components. #2841 [s.brink@web.de] * Fix that routes with *path segments in the recall can generate URLs. [Rick Olson] * Fix strip_links so that it doesn't hang on multiline tags [Jamis Buck] * Remove problematic control chars in rescue template. #5316 [Stefan Kaes] * Make sure passed routing options are not mutated by routing code. #5314 [Blair Zajac] * Make sure changing the controller from foo/bar to bing/bang does not change relative to foo. [Jamis Buck] * Escape the path before routing recognition. #3671 * Make sure :id and friends are unescaped properly. #5275 [me@julik.nl] * Fix documentation for with_routing to reflect new reality. #5281 [rramdas@gmail.com] * Rewind readable CGI params so others may reread them (such as CGI::Session when passing the session id in a multipart form). #210 [mklame@atxeu.com, matthew@walker.wattle.id.au] * Added Mime::TEXT (text/plain) and Mime::ICS (text/calendar) as new default types [David Heinemeier Hansson] * Added Mime::Type.register(string, symbol, synonyms = []) for adding new custom mime types [David Heinemeier Hansson]. Example: Mime::Type.register("image/gif", :gif) * Added support for Mime objects in render :content_type option [David Heinemeier Hansson]. Example: render :text => some_atom, :content_type => Mime::ATOM * Add :status option to send_data and send_file. Defaults to '200 OK'. #5243 [Manfred Stienstra ] * Routing rewrite. Simpler, faster, easier to understand. The published API for config/routes.rb is unchanged, but nearly everything else is different, so expect breakage in plugins and libs that try to fiddle with routes. [Nicholas Seckar, Jamis Buck] map.connect '/foo/:id', :controller => '...', :action => '...' map.connect '/foo/:id.:format', :controller => '...', :action => '...' map.connect '/foo/:id', ..., :conditions => { :method => :get } * Cope with missing content type and length headers. Parse parameters from multipart and urlencoded request bodies only. [Jeremy Kemper] * Accept multipart PUT parameters. #5235 [guy.naor@famundo.com] * Added interrogation of params[:format] to determine Accept type. If :format is specified and matches a declared extension, like "rss" or "xml", that mime type will be put in front of the accept handler. This means you can link to the same action from different extensions and use that fact to determine output [David Heinemeier Hansson]. Example: class WeblogController < ActionController::Base def index @posts = Post.find :all respond_to do |format| format.html format.xml { render :xml => @posts.to_xml } format.rss { render :action => "feed.rxml" } end end end # returns HTML when requested by a browser, since the browser # has the HTML mimetype at the top of its priority list Accept: text/html GET /weblog # returns the XML Accept: application/xml GET /weblog # returns the HTML Accept: application/xml GET /weblog.html # returns the XML Accept: text/html GET /weblog.xml All this relies on the fact that you have a route that includes .:format. * Expanded :method option in FormTagHelper#form_tag, FormHelper#form_for, PrototypeHelper#remote_form_for, PrototypeHelper#remote_form_tag, and PrototypeHelper#link_to_remote to allow for verbs other than GET and POST by automatically creating a hidden form field named _method, which will simulate the other verbs over post [David Heinemeier Hansson] * Added :method option to UrlHelper#link_to, which allows for using other verbs than GET for the link. This replaces the :post option, which is now deprecated. Example: link_to "Destroy", person_url(:id => person), :method => :delete [David Heinemeier Hansson] * follow_redirect doesn't complain about being redirected to the same controller. #5153 [dymo@mk.ukrtelecom.ua] * Add layout attribute to response object with the name of the layout that was rendered, or nil if none rendered. [Kevin Clark] * Fix NoMethodError when parsing params like &&. [Adam Greenfield] * Fix flip flopped logic in docs for url_for's :only_path option. Closes #4998. [esad@esse.at] * form.text_area handles the :size option just like the original text_area (:size => '60x10' becomes cols="60" rows="10"). [Jeremy Kemper] * Excise ingrown code from FormOptionsHelper#options_for_select. #5008 [anonymous] * Small fix in routing to allow dynamic routes (broken after [4242]) [Rick Olson] map.connect '*path', :controller => 'files', :action => 'show' * Replace alias method chaining with Module#alias_method_chain. [Marcel Molina Jr.] * Replace Ruby's deprecated append_features in favor of included. [Marcel Molina Jr.] * Use #flush between switching from #write to #syswrite. Closes #4907. [Blair Zajac ] * Documentation fix: integration test scripts don't require integration_test. Closes #4914. [Frederick Ros ] * ActionController::Base Summary documentation rewrite. Closes #4900. [Kevin Clark] * Fix text_helper.rb documentation rendering. Closes #4725. [Frederick Ros] * Fixes bad rendering of JavaScriptMacrosHelper rdoc (closes #4910) [Frederick Ros] * Allow error_messages_for to report errors for multiple objects, as well as support for customizing the name of the object in the error summary header. Closes #4186. [andrew@redlinesoftware.com, Marcel Molina Jr.] error_messages_for :account, :user, :subscription, :object_name => :account * Enhance documentation for setting headers in integration tests. Skip auto HTTP prepending when its already there. Closes #4079. [Rick Olson] * Documentation for AbstractRequest. Closes #4895. [Kevin Clark] * Refactor various InstanceTag instance method to class methods. Closes #4800. [Stefan Kaes] * Remove all remaining references to @params in the documentation. [Marcel Molina Jr.] * Add documentation for redirect_to :back's RedirectBackError exception. [Marcel Molina Jr.] * Update layout and content_for documentation to use yield rather than magic @content_for instance variables. [Marcel Molina Jr.] * Fix assert_redirected_to tests according to real-world usage. Also, don't fail if you add an extra :controller option: [Rick Olson] redirect_to :action => 'new' assert_redirected_to :controller => 'monkeys', :action => 'new' * Cache CgiRequest#request_parameters so that multiple calls don't re-parse multipart data. [Rick Olson] * Diff compared routing options. Allow #assert_recognizes to take a second arg as a hash to specify optional request method [Rick Olson] assert_recognizes({:controller => 'users', :action => 'index'}, 'users') assert_recognizes({:controller => 'users', :action => 'create'}, {:path => 'users', :method => :post}) * Diff compared options with #assert_redirected_to [Rick Olson] * Add support in routes for semicolon delimited "subpaths", like /books/:id;:action [Jamis Buck] * Change link_to_function and button_to_function to (optionally) take an update_page block instead of a JavaScript string. Closes #4804. [zraii@comcast.net, Sam Stephenson] * Fixed that remote_form_for can leave out the object parameter and default to the instance variable of the object_name, just like form_for [David Heinemeier Hansson] * Modify routing so that you can say :require => { :method => :post } for a route, and the route will never be selected unless the request method is POST. Only works for route recognition, not for route generation. [Jamis Buck] * Added :add_headers option to verify which merges a hash of name/value pairs into the response's headers hash if the prerequisites cannot be satisfied. [Sam Stephenson] ex. verify :only => :speak, :method => :post, :render => { :status => 405, :text => "Must be post" }, :add_headers => { "Allow" => "POST" } * Added ActionController.filter_parameter_logging that makes it easy to remove passwords, credit card numbers, and other sensitive information from being logged when a request is handled #1897 [jeremye@bsa.ca.gov] *1.13.3* (March 12th, 2007) * Apply [5709] to stable. * session_enabled? works with session :off. #6680 [Jonathan del Strother] * Performance: patch cgi/session to require digest/md5 once rather than per #create_new_id. [Stefan Kaes] *1.13.2* (February 5th, 2007) * Add much-needed html-scanner tests. Fixed CDATA parsing bug. [Rick Olson] * improve error message for Routing for named routes. [Rob Sanheim] * Added enhanced docs to routing assertions. [Rob Sanheim] * fix form_for example in ActionController::Resources documentation. [gnarg] * Add singleton resources from trunk [Rick Olson] * select :multiple => true suffixes the attribute name with [] unless already suffixed. #6977 [nik.kakelin, ben, julik] * Improve routes documentation. #7095 [zackchandler] * Resource member routes require :id, eliminating the ambiguous overlap with collection routes. #7229 [dkubb] * Fixed NumberHelper#number_with_delimiter to use "." always for splitting the original number, not the delimiter parameter #7389 [ceefour] * Autolinking recognizes trailing and embedded . , : ; #7354 [Jarkko Laine] * Make TextHelper::auto_link recognize URLs with colons in path correctly, fixes #7268. [imajes] * Improved auto_link to match more valid urls correctly [Tobias Lütke] *1.13.1* (January 18th, 2007) * Fixed content-type bug in Prototype [sam] *1.13.0* (January 16th, 2007) * Modernize cookie testing code, and increase coverage (Heckle++) #7101 [Kevin Clark] * Heckling ActionController::Resources::Resource revealed that set_prefixes didn't break when :name_prefix was munged. #7081 [Kevin Clark] * Update to Prototype 1.5.0. [Sam Stephenson] * Allow exempt_from_layout :rhtml. #6742, #7026 [Dan Manges, Squeegy] * Fix parsing of array[] CGI parameters so extra empty values aren't included. #6252 [Nicholas Seckar, aiwilliams, brentrowland] * link_to_unless_current works with full URLs as well as paths. #6891 [Jarkko Laine, Manfred Stienstra, idrifter] * Fix HTML::Node to output double quotes instead of single quotes. Closes #6845 [mitreandy] * Fix no method error with error_messages_on. Closes #6935 [nik.wakelin Koz] * Slight doc tweak to the ActionView::Helpers::PrototypeHelper#replace docs. Closes #6922 [Steven Bristol] * Slight doc tweak to #prepend_filter. Closes #6493 [Jeremy Voorhis] * Add more extensive documentation to the AssetTagHelper. Closes #6452 [Bob Silva] * Clean up multiple calls to #stringify_keys in TagHelper, add better documentation and testing for TagHelper. Closes #6394 [Bob Silva] * [DOCS] fix reference to ActionController::Macros::AutoComplete for #text_field_with_auto_complete. Closes #2578 [Jan Prill] * Make sure html_document is reset between integration test requests. [ctm] * Set session to an empty hash if :new_session => false and no session cookie or param is present. CGI::Session was raising an unrescued ArgumentError. [Josh Susser] * Fix assert_redirected_to bug where redirecting from a nested to to a top-level controller incorrectly added the current controller's nesting. Closes #6128. [Rick Olson] * Ensure render :json => ... skips the layout. #6808 [Josh Peek] * Silence log_error deprecation warnings from inspecting deprecated instance variables. [Nate Wiger] * Only cache GET requests with a 200 OK response. #6514, #6743 [RSL, anamba] * Correctly report which filter halted the chain. #6699 [Martin Emde] * respond_to recognizes JSON. render :json => @person.to_json automatically sets the content type and takes a :callback option to specify a client-side function to call using the rendered JSON as an argument. #4185 [Scott Raymond, eventualbuddha] # application/json response with body 'Element.show({:name: "David"})' respond_to do |format| format.json { render :json => { :name => "David" }.to_json, :callback => 'Element.show' } end * Makes :discard_year work without breaking multi-attribute parsing in AR. #1260, #3800 [sean@ardismg.com, jmartin@desertflood.com, stephen@touset.org, Bob Silva] * Adds html id attribute to date helper elements. #1050, #1382 [mortonda@dgrmm.net, David North, Bob Silva] * Add :index and @auto_index capability to model driven date/time selects. #847, #2655 [moriq, Doug Fales, Bob Silva] * Add :order to datetime_select, select_datetime, and select_date. #1427 [Timothee Peignier, Patrick Lenz, Bob Silva] * Added time_select to work with time values in models. Update scaffolding. #2489, #2833 [Justin Palmer, Andre Caum, Bob Silva] * Added :include_seconds to select_datetime, datetime_select and time_select. #2998 [csn, Bob Silva] * All date/datetime selects can now accept an array of month names with :use_month_names. Allows for localization. #363 [tomasj, Bob Silva] * Adds :time_separator to select_time and :date_separator to select_datetime. Preserves BC. #3811 [Bob Silva] * @response.redirect_url works with 201 Created responses: just return headers['Location'] rather than checking the response status. [Jeremy Kemper] * Fixed that HEAD should return the proper Content-Length header (that is, actually use @body.size, not just 0) [David Heinemeier Hansson] * Added GET-masquarading for HEAD, so request.method will return :get even for HEADs. This will help anyone relying on case request.method to automatically work with HEAD and map.resources will also allow HEADs to all GET actions. Rails automatically throws away the response content in a reply to HEAD, so you don't even need to worry about that. If you, for whatever reason, still need to distinguish between GET and HEAD in some edge case, you can use Request#head? and even Request.headers["REQUEST_METHOD"] for get the "real" answer. Closes #6694 [David Heinemeier Hansson] *1.13.0 RC1* (r5619, November 22nd, 2006) * Update Routing to complain when :controller is not specified by a route. Closes #6669. [Nicholas Seckar] * Ensure render_to_string cleans up after itself when an exception is raised. #6658 [rsanheim] * Update to Prototype and script.aculo.us [5579]. [Sam Stephenson, Thomas Fuchs] * simple_format helper doesn't choke on nil. #6644 [jerry426] * Reuse named route helper module between Routing reloads. Use remove_method to delete named route methods after each load. Since the module is never collected, this fixes a significant memory leak. [Nicholas Seckar] * Deprecate standalone components. [Jeremy Kemper] * Always clear model associations from session. #4795 [sd@notso.net, andylien@gmail.com] * Remove JavaScriptLiteral in favor of ActiveSupport::JSON::Variable. [Sam Stephenson] * Sync ActionController::StatusCodes::STATUS_CODES with http://www.iana.org/assignments/http-status-codes. #6586 [dkubb] * Multipart form values may have a content type without being treated as uploaded files if they do not provide a filename. #6401 [Andreas Schwarz, Jeremy Kemper] * assert_response supports symbolic status codes. #6569 [Kevin Clark] assert_response :ok assert_response :not_found assert_response :forbidden * Cache parsed query parameters. #6559 [Stefan Kaes] * Deprecate JavaScriptHelper#update_element_function, which is superseeded by RJS [Thomas Fuchs] * Fix invalid test fixture exposed by stricter Ruby 1.8.5 multipart parsing. #6524 [Bob Silva] * Set ActionView::Base.default_form_builder once rather than passing the :builder option to every form or overriding the form helper methods. [Jeremy Kemper] * Deprecate expire_matched_fragments. Use expire_fragment instead. #6535 [Bob Silva] * Deprecate start_form_tag and end_form_tag. Use form_tag / '' from now on. [Rick Olson] * Added block-usage to PrototypeHelper#form_remote_tag, document block-usage of FormTagHelper#form_tag [Rick Olson] * Add a 0 margin/padding div around the hidden _method input tag that form_tag outputs. [Rick Olson] * Added block-usage to TagHelper#content_tag [David Heinemeier Hansson]. Example: <% content_tag :div, :class => "strong" %> Hello world! <% end %> Will output:
Hello world!
* Deprecated UrlHelper#link_to_image and UrlHelper#link_to :post => true #6409 [Bob Silva] * Upgraded NumberHelper with number_to_phone support international formats to comply with ITU E.123 by supporting area codes with less than 3 digits, added precision argument to number_to_human_size (defaults to 1) #6421 [Bob Silva] * Fixed that setting RAILS_ASSET_ID to "" should not add a trailing slash after assets #6454 [Bob Silva/chrismear] * Force *_url named routes to show the host in ActionView [Rick Olson] <%= url_for ... %> # no host <%= foo_path %> # no host <%= foo_url %> # host! * Add support for converting blocks into function arguments to JavaScriptGenerator#call and JavaScriptProxy#call. [Sam Stephenson] * Add JavaScriptGenerator#literal for wrapping a string in an object whose #to_json is the string itself. [Sam Stephenson] * Add <%= escape_once html %> to escape html while leaving any currently escaped entities alone. Fix button_to double-escaping issue. [Rick Olson] * Fix double-escaped entities, such as &amp;, &#123;, etc. [Rick Olson] * Fix routing to correctly determine when generation fails. Closes #6300. [psross]. * Fix broken assert_generates when extra keys are being checked. [Jamis Buck] * Replace KCODE checks with String#chars for truncate. Closes #6385 [Manfred Stienstra] * Make page caching respect the format of the resource that is being requested even if the current route is the default route so that, e.g. posts.rss is not transformed by url_for to '/' and subsequently cached as '/index.html' when it should be cached as '/posts.rss'. [Marcel Molina Jr.] * Use String#chars in TextHelper::excerpt. Closes #6386 [Manfred Stienstra] * Fix relative URL root matching problems. [Mark Imbriaco] * Fix filter skipping in controller subclasses. #5949, #6297, #6299 [Martin Emde] * render_text may optionally append to the response body. render_javascript appends by default. This allows you to chain multiple render :update calls by setting @performed_render = false between them (awaiting a better public API). [Jeremy Kemper] * Rename test assertion to prevent shadowing. Closes #6306. [psross] * Fixed that NumberHelper#number_to_delimiter should respect precision of higher than two digits #6231 [Philip Hallstrom] * Fixed that FormHelper#radio_button didn't respect an :id being passed in #6266 [evansj] * Added an html_options hash parameter to javascript_tag() and update_page_tag() helpers #6311 [tzaharia]. Example: update_page_tag :defer => 'true' { |page| ... } Gives: Which is needed for dealing with the IE6 DOM when it's not yet fully loaded. * Fixed that rescue template path shouldn't be hardcoded, then it's easier to hook in your own #6295 [Mike Naberezny] * Fixed escaping of backslashes in JavaScriptHelper#escape_javascript #6302 [sven@c3d2.de] * Fixed that some 500 rescues would cause 500's themselves because the response had not yet been generated #6329 [cmselmer] * respond_to :html doesn't assume .rhtml. #6281 [Hampton Catlin] * Fixed some deprecation warnings in ActionPack [Rick Olson] * assert_select_rjs decodes escaped unicode chars since the Javascript generators encode them. #6240 [japgolly] * Deprecation: @cookies, @headers, @request, @response will be removed after 1.2. Use the corresponding method instead. [Jeremy Kemper] * Make the :status parameter expand to the default message for that status code if it is an integer. Also support symbol statuses. [Jamis Buck]. Examples: head :status => 404 # expands to "404 Not Found" head :status => :not_found # expands to "404 Not Found" head :status => :created # expands to "201 Created" * Add head(options = {}) for responses that have no body. [Jamis Buck]. Examples: head :status => 404 # return an empty response with a 404 status head :location => person_path(@person), :status => 201 * Fix bug that kept any before_filter except the first one from being able to halt the before_filter chain. [Rick Olson] * strip_links is case-insensitive. #6285 [tagoh, Bob Silva] * Clear the cache of possible controllers whenever Routes are reloaded. [Nicholas Seckar] * Filters overhaul including meantime filter support using around filters + blocks. #5949 [Martin Emde, Roman Le Negrate, Stefan Kaes, Jeremy Kemper] * Update CGI process to allow sessions to contain namespaced models. Closes #4638. [dfelstead@site5.com] * Fix routing to respect user provided requirements and defaults when assigning default routing options (such as :action => 'index'). Closes #5950. [Nicholas Seckar] * Rescue Errno::ECONNRESET to handle an unexpectedly closed socket connection. Improves SCGI reliability. #3368, #6226 [sdsykes, fhanshaw@vesaria.com] * Added that respond_to blocks will automatically set the content type to be the same as is requested [David Heinemeier Hansson]. Examples: respond_to do |format| format.html { render :text => "I'm being sent as text/html" } format.rss { render :text => "I'm being sent as application/rss+xml" } format.atom { render :text => "I'm being sent as application/xml", :content_type => Mime::XML } end * Added utf-8 as the default charset for all renders. You can change this default using ActionController::Base.default_charset=(encoding) [David Heinemeier Hansson] * Added proper getters and setters for content type and charset [David Heinemeier Hansson]. Example of what we used to do: response.headers["Content-Type"] = "application/atom+xml; charset=utf-8" ...now: response.content_type = Mime::ATOM response.charset = "utf-8" * Declare file extensions exempt from layouts. #6219 [brandon] Example: ActionController::Base.exempt_from_layout 'rpdf' * Add chained replace/update support for assert_select_rjs [Rick Olson] Given RJS like... page['test1'].replace "
foo
" page['test2'].replace_html "
foo
" Test it with... assert_select_rjs :chained_replace assert_select_rjs :chained_replace, "test1" assert_select_rjs :chained_replace_html assert_select_rjs :chained_replace_html, "test2" * Load helpers in alphabetical order for consistency. Resolve cyclic javascript_helper dependency. #6132, #6178 [choonkeat@gmail.com] * Skip params with empty names, such as the &=Save query string from . #2569 [Manfred Stienstra, raphinou@yahoo.com] * Fix assert_tag so that :content => "foo" does not match substrings, but only exact strings. Use :content => /foo/ to match substrings. #2799 [Eric Hodel] * Update JavaScriptGenerator#show/hide/toggle/remove to new Prototype syntax for multiple ids, #6068 [petermichaux@gmail.com] * Update UrlWriter to support :only_path. [Nicholas Seckar, Dave Thomas] * Fixed JavaScriptHelper#link_to_function and JavaScriptHelper#button_to_function to have the script argument be optional [David Heinemeier Hansson]. So what used to require a nil, like this: link_to("Hider", nil, :class => "hider_link") { |p| p[:something].hide } ...can be written like this: link_to("Hider", :class => "hider_link") { |p| p[:something].hide } * Added access to nested attributes in RJS #4548 [richcollins@gmail.com]. Examples: page['foo']['style'] # => $('foo').style; page['foo']['style']['color'] # => $('blank_slate').style.color; page['foo']['style']['color'] = 'red' # => $('blank_slate').style.color = 'red'; page['foo']['style'].color = 'red' # => $('blank_slate').style.color = 'red'; * Fixed that AssetTagHelper#image_tag and others using compute_public_path should not modify the incoming source argument (closes #5102) [eule@space.ch] * Deprecated the auto-appending of .png to AssetTagHelper#image_tag calls that doesn't have an extension [David Heinemeier Hansson] * Fixed FormOptionsHelper#select to respect :selected value #5813 * Fixed TextHelper#simple_format to deal with multiple single returns within a single paragraph #5835 [moriq@moriq.com] * Fixed TextHelper#pluralize to handle 1 as a string #5909 [rails@bencurtis.com] * Improved resolution of DateHelper#distance_of_time_in_words for better precision #5994 [Bob Silva] * Changed that uncaught exceptions raised any where in the application will cause RAILS_ROOT/public/500.html to be read and shown instead of just the static "Application error (Rails)" [David Heinemeier Hansson] * Added deprecation language for pagination which will become a plugin by Rails 2.0 [David Heinemeier Hansson] * Added deprecation language for in_place_editor and auto_complete_field that both pieces will become plugins by Rails 2.0 [David Heinemeier Hansson] * Deprecated all of ActionController::Dependencies. All dependency loading is now handled from Active Support [David Heinemeier Hansson] * Added assert_select* for CSS selector-based testing (deprecates assert_tag) #5936 [assaf.arkin@gmail.com] * radio_button_tag generates unique id attributes. #3353 [Bob Silva, somekool@gmail.com] * strip_tags passes through blank args such as nil or "". #2229, #6702 [duncan@whomwah.com, dharana] * Cleanup assert_tag :children counting. #2181 [jamie@bravenet.com] * button_to accepts :method so you can PUT and DELETE with it. #6005 [Dan Webb] * Update sanitize text helper to strip plaintext tags, and . [Rick Olson] * Add routing tests to assert that RoutingError is raised when conditions aren't met. Closes #6016 [Nathan Witmer] * Make auto_link parse a greater subset of valid url formats. [Jamis Buck] * Integration tests: headers beginning with X aren't excluded from the HTTP_ prefix, so X-Requested-With becomes HTTP_X_REQUESTED_WITH as expected. [Mike Clark] * Switch to using FormEncodedPairParser for parsing request parameters. [Nicholas Seckar, David Heinemeier Hansson] * respond_to .html now always renders #{action_name}.rhtml so that registered custom template handlers do not override it in priority. Custom mime types require a block and throw proper error now. [Tobias Lütke] * Deprecation: test deprecated instance vars in partials. [Jeremy Kemper] * Add UrlWriter to allow writing urls from Mailers and scripts. [Nicholas Seckar] * Relax Routing's anchor pattern warning; it was preventing use of [^/] inside restrictions. [Nicholas Seckar] * Add controller_paths variable to Routing. [Nicholas Seckar] * Fix assert_redirected_to issue with named routes for module controllers. [Rick Olson] * Tweak RoutingError message to show option diffs, not just missing named route significant keys. [Rick Olson] * Invoke method_missing directly on hidden actions. Closes #3030. [Nicholas Seckar] * Add RoutingError exception when RouteSet fails to generate a path from a Named Route. [Rick Olson] * Replace Reloadable with Reloadable::Deprecated. [Nicholas Seckar] * Deprecation: check whether instance variables have been monkeyed with before assigning them to deprecation proxies. Raises a RuntimeError if so. [Jeremy Kemper] * Add support for the param_name parameter to the auto_complete_field helper. #5026 [david.a.williams@gmail.com] * Deprecation! @params, @session, @flash will be removed after 1.2. Use the corresponding instance methods instead. You'll get printed warnings during tests and logged warnings in dev mode when you access either instance variable directly. [Jeremy Kemper] * Make Routing noisy when an anchor regexp is assigned to a segment. #5674 [François Beausoleil] * Added months and years to the resolution of DateHelper#distance_of_time_in_words, such that "60 days ago" becomes "2 months ago" #5611 [pjhyett@gmail.com] * Make controller_path available as an instance method. #5724 [jmckible@gmail.com] * Update query parser to support adjacent hashes. [Nicholas Seckar] * Make action caching aware of different formats for the same action so that, e.g. foo.xml is cached separately from foo.html. Implicitly set content type when reading in cached content with mime revealing extensions so the entire onous isn't on the webserver. [Marcel Molina Jr.] * Restrict Request Method hacking with ?_method to POST requests. [Rick Olson] * Fixed the new_#{resource}_url route and added named route tests for Simply Restful. [Rick Olson] * Added map.resources from the Simply Restful plugin [David Heinemeier Hansson]. Examples (the API has changed to use plurals!): map.resources :messages map.resources :messages, :comments map.resources :messages, :new => { :preview => :post } * Fixed that integration simulation of XHRs should set Accept header as well [Edward Frederick] * TestRequest#reset_session should restore a TestSession, not a hash [Michael Koziarski] * Don't search a load-path of '.' for controller files [Jamis Buck] * Update integration.rb to require test_process explicitly instead of via Dependencies. [Nicholas Seckar] * Fixed that you can still access the flash after the flash has been reset in reset_session. Closes #5584 [lmarlow] * Allow form_for and fields_for to work with indexed form inputs. [Jeremy Kemper, Matt Lyon] <% form_for 'post[]', @post do |f| -%> <% end -%> * Remove leak in development mode by replacing define_method with module_eval. [Nicholas Seckar] * Provide support for decimal columns to form helpers. Closes #5672. [Dave Thomas] * Pass :id => nil or :class => nil to error_messages_for to supress that html attribute. #3586 [olivier_ansaldi@yahoo.com] * Reset @html_document between requests so assert_tag works. #4810 [Jarkko Laine, easleydp@gmail.com] * Integration tests behave well with render_component. #4632 [edward.frederick@revolution.com, dev.rubyonrails@maxdunn.com] * Added exception handling of missing layouts #5373 [chris@ozmm.org] * Fixed that real files and symlinks should be treated the same when compiling templates #5438 [zachary@panandscan.com] * Fixed that the flash should be reset when reset_session is called #5584 [Shugo Maeda] * Added special case for "1 Byte" in NumberHelper#number_to_human_size #5593 [murpyh@rubychan.de] * Fixed proper form-encoded parameter parsing for requests with "Content-Type: application/x-www-form-urlencoded; charset=utf-8" (note the presence of a charset directive) [David Heinemeier Hansson] * Add route_name_path method to generate only the path for a named routes. For example, map.person will add person_path. [Nicholas Seckar] * Avoid naming collision among compiled view methods. [Jeremy Kemper] * Fix CGI extensions when they expect string but get nil in Windows. Closes #5276 [Mislav Marohnić] * Determine the correct template_root for deeply nested components. #2841 [s.brink@web.de] * Fix that routes with *path segments in the recall can generate URLs. [Rick Olson] * Fix strip_links so that it doesn't hang on multiline tags [Jamis Buck] * Remove problematic control chars in rescue template. #5316 [Stefan Kaes] * Make sure passed routing options are not mutated by routing code. #5314 [Blair Zajac] * Make sure changing the controller from foo/bar to bing/bang does not change relative to foo. [Jamis Buck] * Escape the path before routing recognition. #3671 * Make sure :id and friends are unescaped properly. #5275 [me@julik.nl] * Rewind readable CGI params so others may reread them (such as CGI::Session when passing the session id in a multipart form). #210 [mklame@atxeu.com, matthew@walker.wattle.id.au] * Added Mime::TEXT (text/plain) and Mime::ICS (text/calendar) as new default types [David Heinemeier Hansson] * Added Mime::Type.register(string, symbol, synonyms = []) for adding new custom mime types [David Heinemeier Hansson]. Example: Mime::Type.register("image/gif", :gif) * Added support for Mime objects in render :content_type option [David Heinemeier Hansson]. Example: render :text => some_atom, :content_type => Mime::ATOM * Add :status option to send_data and send_file. Defaults to '200 OK'. #5243 [Manfred Stienstra ] * Routing rewrite. Simpler, faster, easier to understand. The published API for config/routes.rb is unchanged, but nearly everything else is different, so expect breakage in plugins and libs that try to fiddle with routes. [Nicholas Seckar, Jamis Buck] map.connect '/foo/:id', :controller => '...', :action => '...' map.connect '/foo/:id.:format', :controller => '...', :action => '...' map.connect '/foo/:id', ..., :conditions => { :method => :get } * Cope with missing content type and length headers. Parse parameters from multipart and urlencoded request bodies only. [Jeremy Kemper] * Accept multipart PUT parameters. #5235 [guy.naor@famundo.com] * Added interrogation of params[:format] to determine Accept type. If :format is specified and matches a declared extension, like "rss" or "xml", that mime type will be put in front of the accept handler. This means you can link to the same action from different extensions and use that fact to determine output [David Heinemeier Hansson]. Example: class WeblogController < ActionController::Base def index @posts = Post.find :all respond_to do |format| format.html format.xml { render :xml => @posts.to_xml } format.rss { render :action => "feed.rxml" } end end end # returns HTML when requested by a browser, since the browser # has the HTML mimetype at the top of its priority list Accept: text/html GET /weblog # returns the XML Accept: application/xml GET /weblog # returns the HTML Accept: application/xml GET /weblog.html # returns the XML Accept: text/html GET /weblog.xml All this relies on the fact that you have a route that includes .:format. * Expanded :method option in FormTagHelper#form_tag, FormHelper#form_for, PrototypeHelper#remote_form_for, PrototypeHelper#remote_form_tag, and PrototypeHelper#link_to_remote to allow for verbs other than GET and POST by automatically creating a hidden form field named _method, which will simulate the other verbs over post [David Heinemeier Hansson] * Added :method option to UrlHelper#link_to, which allows for using other verbs than GET for the link. This replaces the :post option, which is now deprecated. Example: link_to "Destroy", person_url(:id => person), :method => :delete [David Heinemeier Hansson] * follow_redirect doesn't complain about being redirected to the same controller. #5153 [dymo@mk.ukrtelecom.ua] * Add layout attribute to response object with the name of the layout that was rendered, or nil if none rendered. [Kevin Clark] * Fix NoMethodError when parsing params like &&. [Adam Greenfield] * form.text_area handles the :size option just like the original text_area (:size => '60x10' becomes cols="60" rows="10"). [Jeremy Kemper] * Excise ingrown code from FormOptionsHelper#options_for_select. #5008 [anonymous] * Small fix in routing to allow dynamic routes (broken after [4242]) [Rick Olson] map.connect '*path', :controller => 'files', :action => 'show' * Use #flush between switching from #write to #syswrite. Closes #4907. [Blair Zajac ] * Allow error_messages_for to report errors for multiple objects, as well as support for customizing the name of the object in the error summary header. Closes #4186. [andrew@redlinesoftware.com, Marcel Molina Jr.] error_messages_for :account, :user, :subscription, :object_name => :account * Fix assert_redirected_to tests according to real-world usage. Also, don't fail if you add an extra :controller option: [Rick Olson] redirect_to :action => 'new' assert_redirected_to :controller => 'monkeys', :action => 'new' * Diff compared routing options. Allow #assert_recognizes to take a second arg as a hash to specify optional request method [Rick Olson] assert_recognizes({:controller => 'users', :action => 'index'}, 'users') assert_recognizes({:controller => 'users', :action => 'create'}, {:path => 'users', :method => :post}) * Diff compared options with #assert_redirected_to [Rick Olson] * Add support in routes for semicolon delimited "subpaths", like /books/:id;:action [Jamis Buck] * Change link_to_function and button_to_function to (optionally) take an update_page block instead of a JavaScript string. Closes #4804. [zraii@comcast.net, Sam Stephenson] * Modify routing so that you can say :require => { :method => :post } for a route, and the route will never be selected unless the request method is POST. Only works for route recognition, not for route generation. [Jamis Buck] * Added :add_headers option to verify which merges a hash of name/value pairs into the response's headers hash if the prerequisites cannot be satisfied. [Sam Stephenson] ex. verify :only => :speak, :method => :post, :render => { :status => 405, :text => "Must be post" }, :add_headers => { "Allow" => "POST" } *1.12.5* (August 10th, 2006) * Updated security fix *1.12.4* (August 8th, 2006) * Cache CgiRequest#request_parameters so that multiple calls don't re-parse multipart data. [Rick Olson] * Fixed that remote_form_for can leave out the object parameter and default to the instance variable of the object_name, just like form_for [David Heinemeier Hansson] * Added ActionController.filter_parameter_logging that makes it easy to remove passwords, credit card numbers, and other sensitive information from being logged when a request is handled. #1897 [jeremye@bsa.ca.gov] * Fixed that real files and symlinks should be treated the same when compiling templates. #5438 [zachary@panandscan.com] * Add :status option to send_data and send_file. Defaults to '200 OK'. #5243 [Manfred Stienstra ] * Update documentation for erb trim syntax. #5651 [matt@mattmargolis.net] * Short documentation to mention use of Mime::Type.register. #5710 [choonkeat@gmail.com] *1.12.3* (June 28th, 2006) * Fix broken traverse_to_controller. We now: Look for a _controller.rb file under RAILS_ROOT to load. If we find it, we require_dependency it and return the controller it defined. (If none was defined we stop looking.) If we don't find it, we look for a .rb file under RAILS_ROOT to load. If we find it, and it loads a constant we keep looking. Otherwise we check to see if a directory of the same name exists, and if it does we create a module for it. *1.12.2* (June 27th, 2006) * Refinement to avoid exceptions in traverse_to_controller. * (Hackish) Fix loading of arbitrary files in Ruby's load path by traverse_to_controller. [Nicholas Seckar] *1.12.1* (April 6th, 2006) * Fixed that template extensions would be cached development mode #4624 [Stefan Kaes] * Update to Prototype 1.5.0_rc0 [Sam Stephenson] * Honor skipping filters conditionally for only certain actions even when the parent class sets that filter to conditionally be executed only for the same actions. #4522 [Marcel Molina Jr.] * Delegate xml_http_request in integration tests to the session instance. [Jamis Buck] * Update the diagnostics template skip the useless '' text. [Nicholas Seckar] * CHANGED DEFAULT: Don't parse YAML input by default, but keep it available as an easy option [David Heinemeier Hansson] * Add additional autocompleter options [aballai, Thomas Fuchs] * Fixed fragment caching of binary data on Windows #4493 [bellis@deepthought.org] * Applied Prototype $() performance patches (#4465, #4477) and updated script.aculo.us [Sam Stephenson, Thomas Fuchs] * Added automated timestamping to AssetTagHelper methods for stylesheets, javascripts, and images when Action Controller is run under Rails [David Heinemeier Hansson]. Example: image_tag("rails.png") # => 'Rails' ...to avoid frequent stats (not a problem for most people), you can set RAILS_ASSET_ID in the ENV to avoid stats: ENV["RAILS_ASSET_ID"] = "2345" image_tag("rails.png") # => 'Rails' This can be used by deployment managers to set the asset id by application revision *1.12.0* (March 27th, 2006) * Add documentation for respond_to. [Jamis Buck] * Fixed require of bluecloth and redcloth when gems haven't been loaded #4446 [murphy@cYcnus.de] * Update to Prototype 1.5.0_pre1 [Sam Stephenson] * Change #form_for and #fields_for so that the second argument is not required [Dave Thomas] <% form_for :post, @post, :url => { :action => 'create' } do |f| -%> becomes... <% form_for :post, :url => { :action => 'create' } do |f| -%> * Update to script.aculo.us 1.6 [Thomas Fuchs] * Enable application/x-yaml processing by default [Jamis Buck] * Fix double url escaping of remote_function. Add :escape => false option to ActionView's url_for. [Nicholas Seckar] * Add :script option to in_place_editor to support evalScripts (closes #4194) [Cody Fauser] * Fix mixed case enumerable methods in the JavaScript Collection Proxy (closes #4314) [Cody Fauser] * Undo accidental escaping for mail_to; add regression test. [Nicholas Seckar] * Added nicer message for assert_redirected_to (closes #4294) [court3nay] assert_redirected_to :action => 'other_host', :only_path => false when it was expecting... redirected_to :action => 'other_host', :only_path => true, :host => 'other.test.host' gives the error message... response is not a redirection to all of the options supplied (redirection is <{:only_path=>false, :host=>"other.test.host", :action=>"other_host"}>), difference: <{:only_path=>"true", :host=>"other.test.host"}> * Change url_for to escape the resulting URLs when called from a view. [Nicholas Seckar, coffee2code] * Added easy support for testing file uploads with fixture_file_upload #4105 [turnip@turnipspatch.com]. Example: # Looks in Test::Unit::TestCase.fixture_path + '/files/spongebob.png' post :change_avatar, :avatar => fixture_file_upload('/files/spongebob.png', 'image/png') * Fixed UrlHelper#current_page? to behave even when url-escaped entities are present #3929 [jeremy@planetargon.com] * Add ability for relative_url_root to be specified via an environment variable RAILS_RELATIVE_URL_ROOT. [isaac@reuben.com, Nicholas Seckar] * Fixed link_to "somewhere", :post => true to produce valid XHTML by using the parentnode instead of document.body for the instant form #3007 [Bob Silva] * Added :function option to PrototypeHelper#observe_field/observe_form that allows you to call a function instead of submitting an ajax call as the trigger #4268 [jonathan@daikini.com] * Make Mime::Type.parse consider q values (if any) [Jamis Buck] * XML-formatted requests are typecast according to "type" attributes for :xml_simple [Jamis Buck] * Added protection against proxy setups treating requests as local even when they're not #3898 [Steve Purcell] * Added TestRequest#raw_post that simulate raw_post from CgiRequest #3042 [François Beausoleil] * Underscore dasherized keys in formatted requests [Jamis Buck] * Add MimeResponds::Responder#any for managing multiple types with identical responses [Jamis Buck] * Make the xml_http_request testing method set the HTTP_ACCEPT header [Jamis Buck] * Add Verification to scaffolds. Prevent destructive actions using GET [Michael Koziarski] * Avoid hitting the filesystem when using layouts by using a File.directory? cache. [Stefan Kaes, Nicholas Seckar] * Simplify ActionController::Base#controller_path [Nicholas Seckar] * Added simple alert() notifications for RJS exceptions when config.action_view.debug_rjs = true. [Sam Stephenson] * Added :content_type option to render, so you can change the content type on the fly [David Heinemeier Hansson]. Example: render :action => "atom.rxml", :content_type => "application/atom+xml" * CHANGED DEFAULT: The default content type for .rxml is now application/xml instead of type/xml, see http://www.xml.com/pub/a/2004/07/21/dive.html for reason [David Heinemeier Hansson] * Added option to render action/template/file of a specific extension (and here by template type). This means you can have multiple templates with the same name but a different extension [David Heinemeier Hansson]. Example: class WeblogController < ActionController::Base def index @posts = Post.find :all respond_to do |type| type.html # using defaults, which will render weblog/index.rhtml type.xml { render :action => "index.rxml" } type.js { render :action => "index.rjs" } end end end * Added better support for using the same actions to output for different sources depending on the Accept header [David Heinemeier Hansson]. Example: class WeblogController < ActionController::Base def create @post = Post.create(params[:post]) respond_to do |type| type.js { render } # renders create.rjs type.html { redirect_to :action => "index" } type.xml do headers["Location"] = url_for(:action => "show", :id => @post) render(:nothing, :status => "201 Created") end end end end * Added Base#render(:xml => xml) that works just like Base#render(:text => text), but sets the content-type to text/xml and the charset to UTF-8 [David Heinemeier Hansson] * Integration test's url_for now runs in the context of the last request (if any) so after post /products/show/1 url_for :action => 'new' will yield /product/new [Tobias Lütke] * Re-added mixed-in helper methods for the JavascriptGenerator. Moved JavascriptGenerators methods to a module that is mixed in after the helpers are added. Also fixed that variables set in the enumeration methods like #collect are set correctly. Documentation added for the enumeration methods [Rick Olson]. Examples: page.select('#items li').collect('items') do |element| element.hide end # => var items = $$('#items li').collect(function(value, index) { return value.hide(); }); * Added plugin support for parameter parsers, which allows for better support for REST web services. By default, posts submitted with the application/xml content type is handled by creating a XmlSimple hash with the same name as the root element of the submitted xml. More handlers can easily be registered like this: # Assign a new param parser to a new content type ActionController::Base.param_parsers['application/atom+xml'] = Proc.new do |data| node = REXML::Document.new(post) { node.root.name => node.root } end # Assign the default XmlSimple to a new content type ActionController::Base.param_parsers['application/backpack+xml'] = :xml_simple Default YAML web services were retired, ActionController::Base.param_parsers carries an example which shows how to get this functionality back. As part of this new plugin support, request.[formatted_post?, xml_post?, yaml_post? and post_format] were all deprecated in favor of request.content_type [Tobias Lütke] * Fixed Effect.Appear in effects.js to work with floats in Safari #3524, #3813, #3044 [Thomas Fuchs] * Fixed that default image extension was not appended when using a full URL with AssetTagHelper#image_tag #4032, #3728 [rubyonrails@beautifulpixel.com] * Added that page caching will only happen if the response code is less than 400 #4033 [g.bucher@teti.ch] * Add ActionController::IntegrationTest to allow high-level testing of the way the controllers and routes all work together [Jamis Buck] * Added support to AssetTagHelper#javascript_include_tag for having :defaults appear anywhere in the list, so you can now make one call ala javascript_include_tag(:defaults, "my_scripts") or javascript_include_tag("my_scripts", :defaults) depending on how you want the load order #3506 [Bob Silva] * Added support for visual effects scoped queues to the visual_effect helper #3530 [Abdur-Rahman Advany] * Added .rxml (and any non-rhtml template, really) supportfor CaptureHelper#content_for and CaptureHelper#capture #3287 [Brian Takita] * Added script.aculo.us drag and drop helpers to RJS [Thomas Fuchs]. Examples: page.draggable 'product-1' page.drop_receiving 'wastebasket', :url => { :action => 'delete' } page.sortable 'todolist', :url => { action => 'change_order' } * Fixed that form elements would strip the trailing [] from the first parameter #3545 [ruby@bobsilva.com] * During controller resolution, update the NameError suppression to check for the expected constant. [Nicholas Seckar] * Update script.aculo.us to V1.5.3 [Thomas Fuchs] * Added various InPlaceEditor options, #3746, #3891, #3896, #3906 [Bill Burcham, ruairi, sl33p3r] * Added :count option to pagination that'll make it possible for the ActiveRecord::Base.count call to using something else than * for the count. Especially important for count queries using DISTINCT #3839 [Stefan Kaes] * Update script.aculo.us to V1.5.2 [Thomas Fuchs] * Added element and collection proxies to RJS [David Heinemeier Hansson]. Examples: page['blank_slate'] # => $('blank_slate'); page['blank_slate'].show # => $('blank_slate').show(); page['blank_slate'].show('first').up # => $('blank_slate').show('first').up(); page.select('p') # => $$('p'); page.select('p.welcome b').first # => $$('p.welcome b').first(); page.select('p.welcome b').first.hide # => $$('p.welcome b').first().hide(); * Add JavaScriptGenerator#replace for replacing an element's "outer HTML". #3246 [tom@craz8.com, Sam Stephenson] * Remove over-engineered form_for code for a leaner implementation. [Nicholas Seckar] * Document form_for's :html option. [Nicholas Seckar] * Major components cleanup and speedup. #3527 [Stefan Kaes] * Fix problems with pagination and :include. [Kevin Clark] * Add ActiveRecordTestCase for testing AR integration. [Kevin Clark] * Add Unit Tests for pagination [Kevin Clark] * Add :html option for specifying form tag options in form_for. [Sam Stephenson] * Replace dubious controller parent class in filter docs. #3655, #3722 [info@rhalff.com, eigentone@gmail.com] * Don't interpret the :value option on text_area as an html attribute. Set the text_area's value. #3752 [gabriel@gironda.org] * Fix remote_form_for creates a non-ajax form. [Rick Olson] * Don't let arbitrary classes match as controllers -- a potentially dangerous bug. [Nicholas Seckar] * Fix Routing tests. Fix routing where failing to match a controller would prevent the rest of routes from being attempted. [Nicholas Seckar] * Add :builder => option to form_for and friends. [Nicholas Seckar, Rick Olson] * Fix controller resolution to avoid accidentally inheriting a controller from a parent module. [Nicholas Seckar] * Set sweeper's @controller to nil after a request so that the controller may be collected between requests. [Nicholas Seckar] * Subclasses of ActionController::Caching::Sweeper should be Reloadable. [Rick Olson] * Document the :xhr option for verifications. #3666 [leeo] * Added :only and :except controls to skip_before/after_filter just like for when you add filters [David Heinemeier Hansson] * Ensure that the instance variables are copied to the template when performing render :update. [Nicholas Seckar] * Add the ability to call JavaScriptGenerator methods from helpers called in update blocks. [Sam Stephenson] Example: module ApplicationHelper def update_time page.replace_html 'time', Time.now.to_s(:db) page.visual_effect :highlight, 'time' end end class UserController < ApplicationController def poll render :update { |page| page.update_time } end end * Add render(:update) to ActionView::Base. [Sam Stephenson] * Fix render(:update) to not render layouts. [Sam Stephenson] * Fixed that SSL would not correctly be detected when running lighttpd/fcgi behind lighttpd w/mod_proxy #3548 [Steve Purcell] * Added the possibility to specify atomatic expiration for the memcachd session container #3571 [Stefan Kaes] * Change layout discovery to take into account the change in semantics with File.join and nil arguments. [Marcel Molina Jr.] * Raise a RedirectBackError if redirect_to :back is called when there's no HTTP_REFERER defined #3049 [Kevin Clark] * Treat timestamps like datetimes for scaffolding purposes #3388 [Maik Schmidt] * Fix IE bug with link_to "something", :post => true #3443 [Justin Palmer] * Extract Test::Unit::TestCase test process behavior into an ActionController::TestProcess module. [Sam Stephenson] * Pass along blocks from render_to_string to render. [Sam Stephenson] * Add render :update for inline RJS. [Sam Stephenson] Example: class UserController < ApplicationController def refresh render :update do |page| page.replace_html 'user_list', :partial => 'user', :collection => @users page.visual_effect :highlight, 'user_list' end end end * allow nil objects for error_messages_for [Michael Koziarski] * Refactor human_size to exclude decimal place if it is zero. [Marcel Molina Jr.] * Update to Prototype 1.5.0_pre0 [Sam Stephenson] * Automatically discover layouts when a controller is namespaced. #2199, #3424 [me@jonnii.com rails@jeffcole.net Marcel Molina Jr.] * Add support for multiple proxy servers to CgiRequest#host [gaetanot@comcast.net] * Documentation typo fix. #2367 [Blair Zajac] * Remove Upload Progress. #2871 [Sean Treadway] * Fix typo in function name mapping in auto_complete_field. #2929 #3446 [doppler@gmail.com phil.ross@gmail.com] * Allow auto-discovery of third party template library layouts. [Marcel Molina Jr.] * Have the form builder output radio button, not check box, when calling the radio button helper. #3331 [LouisStAmour@gmail.com] * Added assignment of the Autocompleter object created by JavaScriptMacroHelper#auto_complete_field to a local javascript variables [David Heinemeier Hansson] * Added :on option for PrototypeHelper#observe_field that allows you to specify a different callback hook to have the observer trigger on [David Heinemeier Hansson] * Added JavaScriptHelper#button_to_function that works just like JavaScriptHelper#link_to_function but uses a button instead of a href [David Heinemeier Hansson] * Added that JavaScriptHelper#link_to_function will honor existing :onclick definitions when adding the function call [David Heinemeier Hansson] * Added :disable_with option to FormTagHelper#submit_tag to allow for easily disabled submit buttons with different text [David Heinemeier Hansson] * Make auto_link handle nil by returning quickly if blank? [Scott Barron] * Make auto_link match urls with a port number specified. [Marcel Molina Jr.] * Added support for toggling visual effects to ScriptaculousHelper::visual_effect, #3323. [Thomas Fuchs] * Update to script.aculo.us to 1.5.0 rev. 3343 [Thomas Fuchs] * Added :select option for JavaScriptMacroHelper#auto_complete_field that makes it easier to only use part of the auto-complete suggestion as the value for insertion [Thomas Fuchs] * Added delayed execution of Javascript from within RJS #3264 [devslashnull@gmail.com]. Example: page.delay(20) do page.visual_effect :fade, 'notice' end * Add session ID to default logging, but remove the verbose description of every step [David Heinemeier Hansson] * Add the following RJS methods: [Sam Stephenson] * alert - Displays an alert() dialog * redirect_to - Changes window.location.href to simulate a browser redirect * call - Calls a JavaScript function * assign - Assigns to a JavaScript variable * << - Inserts an arbitrary JavaScript string * Fix incorrect documentation for form_for [Nicholas Seckar] * Don't include a layout when rendering an rjs template using render's :template option. [Marcel Molina Jr.] *1.1.2* (December 13th, 2005) * Become part of Rails 1.0 * Update to script.aculo.us 1.5.0 final (equals 1.5.0_rc6) [Thomas Fuchs] * Update to Prototype 1.4.0 final [Sam Stephenson] * Added form_remote_for (form_for meets form_remote_tag) [David Heinemeier Hansson] * Update to script.aculo.us 1.5.0_rc6 * More robust relative url root discovery for SCGI compatibility. This solves the 'SCGI routes problem' -- you no longer need to prefix all your routes with the name of the SCGI mountpoint. #3070 [Dave Ringoen] * Fix docs for text_area_tag. #3083. [Christopher Cotton] * Change form_for and fields_for method signatures to take object name and object as separate arguments rather than as a Hash. [David Heinemeier Hansson] * Introduce :selected option to the select helper. Allows you to specify a selection other than the current value of object.method. Specify :selected => nil to leave all options unselected. #2991 [Jonathan Viney ] * Initialize @optional in routing code to avoid warnings about uninitialized access to an instance variable. [Nicholas Seckar] * Make ActionController's render honor the :locals option when rendering a :file. #1665. [Emanuel Borsboom, Marcel Molina Jr.] * Allow assert_tag(:conditions) to match the empty string when a tag has no children. Closes #2959. [Jamis Buck] * Update html-scanner to handle CDATA sections better. Closes #2970. [Jamis Buck] * Don't put flash in session if sessions are disabled. [Jeremy Kemper] * Strip out trailing &_= for raw post bodies. Closes #2868. [Sam Stephenson] * Pass multiple arguments to Element.show and Element.hide in JavaScriptGenerator instead of using iterators. [Sam Stephenson] * Improve expire_fragment documentation. #2966 [court3nay] * Correct docs for automatic layout assignment. #2610. [Charles M. Gerungan] * Always create new AR sessions rather than trying too hard to avoid database traffic. #2731 [Jeremy Kemper] * Update to Prototype 1.4.0_rc4. Closes #2943 (old Array.prototype.reverse behavior can be obtained by passing false as an argument). [Sam Stephenson] * Use Element.update('id', 'html') instead of $('id').innerHTML = 'html' in JavaScriptGenerator#replace_html so that script tags are evaluated. [Sam Stephenson] * Make rjs templates always implicitly skip out on layouts. [Marcel Molina Jr.] * Correct length for the truncate text helper. #2913 [Stefan Kaes] * Update to Prototype 1.4.0_rc3. Closes #1893, #2505, #2550, #2748, #2783. [Sam Stephenson] * Add support for new rjs templates which wrap an update_page block. [Marcel Molina Jr.] * Rename Version constant to VERSION. #2802 [Marcel Molina Jr.] * Correct time_zone_options_for_select docs. #2892 [pudeyo@rpi.com] * Remove the unused, slow response_dump and session_dump variables from error pages. #1222 [lmarlow] * Performance tweaks: use Set instead of Array to speed up prototype helper include? calls. Avoid logging code if logger is nil. Inline commonly-called template presence checks. #2880, #2881, #2882, #2883 [Stefan Kaes] * MemCache store may be given multiple addresses. #2869 [Ryan Carver ] * Handle cookie parsing irregularity for certain Nokia phones. #2530 [zaitzow@gmail.com] * Added PrototypeHelper::JavaScriptGenerator and PrototypeHelper#update_page for easily modifying multiple elements in an Ajax response. [Sam Stephenson] Example: update_page do |page| page.insert_html :bottom, 'list', '
  • Last item
  • ' page.visual_effect :highlight, 'list' page.hide 'status-indicator', 'cancel-link' end generates the following JavaScript: new Insertion.Bottom("list", "
  • Last item
  • "); new Effect.Highlight("list"); ["status-indicator", "cancel-link"].each(Element.hide); * Refactored JavaScriptHelper into PrototypeHelper and ScriptaculousHelper [Sam Stephenson] * Update to latest script.aculo.us version (as of [3031]) * Updated docs for in_place_editor, fixes a couple bugs and offers extended support for external controls [Justin Palmer] * Update documentation for render :file. #2858 [Tom Werner] * Only include builtin filters whose filenames match /^[a-z][a-z_]*_helper.rb$/ to avoid including operating system metadata such as ._foo_helper.rb. #2855 [court3nay] * Added FormHelper#form_for and FormHelper#fields_for that makes it easier to work with forms for single objects also if they don't reside in instance variables [David Heinemeier Hansson]. Examples: <% form_for :person, @person, :url => { :action => "update" } do |f| %> First name: <%= f.text_field :first_name %> Last name : <%= f.text_field :last_name %> Biography : <%= f.text_area :biography %> Admin? : <%= f.check_box :admin %> <% end %> <% form_for :person, person, :url => { :action => "update" } do |person_form| %> First name: <%= person_form.text_field :first_name %> Last name : <%= person_form.text_field :last_name %> <% fields_for :permission => person.permission do |permission_fields| %> Admin? : <%= permission_fields.check_box :admin %> <% end %> <% end %> * options_for_select allows any objects which respond_to? :first and :last rather than restricting to Array and Range. #2824 [Jacob Robbins , Jeremy Kemper] * The auto_link text helper accepts an optional block to format the link text for each url and email address. Example: auto_link(post.body) { |text| truncate(text, 10) } [Jeremy Kemper] * assert_tag uses exact matches for string conditions, instead of partial matches. Use regex to do partial matches. #2799 [Jamis Buck] * CGI::Session::ActiveRecordStore.data_column_name = 'foobar' to use a different session data column than the 'data' default. [nbpwie102@sneakemail.com] * Do not raise an exception when default helper is missing; log a debug message instead. It's nice to delete empty helpers. [Jeremy Kemper] * Controllers with acronyms in their names (e.g. PDFController) require the correct default helper (PDFHelper in file pdf_helper.rb). #2262 [jeff@opendbms.com] *1.11.0* (November 7th, 2005) * Added request as instance method to views, so you can do <%= request.env["HTTP_REFERER"] %>, just like you can already access response, session, and the likes [David Heinemeier Hansson] * Fix conflict with assert_tag and Glue gem #2255 [david.felstead@gmail.com] * Add documentation to assert_tag indicating that it only works with well-formed XHTML #1937, #2570 [Jamis Buck] * Added action_pack.rb stub so that ActionPack::Version loads properly [Sam Stephenson] * Added short-hand to assert_tag so assert_tag :tag => "span" can be written as assert_tag "span" [David Heinemeier Hansson] * Added skip_before_filter/skip_after_filter for easier control of the filter chain in inheritance hierachies [David Heinemeier Hansson]. Example: class ApplicationController < ActionController::Base before_filter :authenticate end class WeblogController < ApplicationController # will run the :authenticate filter end class SignupController < ActionController::Base # will not run the :authenticate filter skip_before_filter :authenticate end * Added redirect_to :back as a short-hand for redirect_to(request.env["HTTP_REFERER"]) [David Heinemeier Hansson] * Change javascript_include_tag :defaults to not use script.aculo.us loader, which facilitates the use of plugins for future script.aculo.us and third party javascript extensions, and provide register_javascript_include_default for plugins to specify additional JavaScript files to load. Removed slider.js and builder.js from actionpack. [Thomas Fuchs] * Fix problem where redirecting components can cause an infinite loop [Rick Olson] * Added support for the queue option on visual_effect [Thomas Fuchs] * Update script.aculo.us to V1.5_rc4 [Thomas Fuchs] * Fix that render :text didn't interpolate instance variables #2629, #2626 [Stefan Kaes] * Fix line number detection and escape RAILS_ROOT in backtrace Regexp [Nicholas Seckar] * Fixed document.getElementsByClassName from Prototype to be speedy again [Sam Stephenson] * Recognize ./#{RAILS_ROOT} as RAILS_ROOT in error traces [Nicholas Seckar] * Remove ARStore session fingerprinting [Nicholas Seckar] * Fix obscure bug in ARStore [Nicholas Seckar] * Added TextHelper#strip_tags for removing HTML tags from a string (using HTMLTokenizer) #2229 [marcin@junkheap.net] * Added a reader for flash.now, so it's possible to do stuff like flash.now[:alert] ||= 'New if not set' #2422 [Caio Chassot] *1.10.2* (October 26th, 2005) * Reset template variables after using render_to_string [Stefan Kaes] * Expose the session model backing CGI::Session * Abbreviate RAILS_ROOT in traces *1.10.1* (October 19th, 2005) * Update error trace templates [Nicholas Seckar] * Stop showing generated routing code in application traces [Nicholas Seckar] *1.10.0* (October 16th, 2005) * Make string-keys locals assigns optional. Add documentation describing depreciated state [Stefan Kaes] * Improve line number detection for template errors [Nicholas Seckar] * Update/clean up documentation (rdoc) * Upgrade to Prototype 1.4.0_rc0 [Sam Stephenson] * Added assert_vaild. Reports the proper AR error messages as fail message when the passed record is invalid [Tobias Lütke] * Add temporary support for passing locals to render using string keys [Nicholas Seckar] * Clean up error pages by providing better backtraces [Nicholas Seckar] * Raise an exception if an attempt is made to insert more session data into the ActiveRecordStore data column than the column can hold. #2234. [justin@textdrive.com] * Removed references to assertions.rb from actionpack assert's backtraces. Makes error reports in functional unit tests much less noisy. [Tobias Lütke] * Updated and clarified documentation for JavaScriptHelper to be more concise about the various options for including the JavaScript libs. [Thomas Fuchs] * Hide "Retry with Breakpoint" button on error pages until feature is functional. [David Heinemeier Hansson] * Fix Request#host_with_port to use the standard port when Rails is behind a proxy. [Nicholas Seckar] * Escape query strings in the href attribute of URLs created by url_helper. #2333 [Michael Schuerig ] * Improved line number reporting for template errors [Nicholas Seckar] * Added :locals support for render :inline #2463 [mdabney@cavoksolutions.com] * Unset the X-Requested-With header when using the xhr wrapper in functional tests so that future requests aren't accidentally xhr'ed #2352 [me@julik.nl, Sam Stephenson] * Unescape paths before writing cache to file system. #1877. [Damien Pollet] * Wrap javascript_tag contents in a CDATA section and add a cdata_section method to TagHelper #1691 [Michael Schuerig, Sam Stephenson] * Misc doc fixes (typos/grammar/etc). #2445. [coffee2code] * Speed improvement for session_options. #2287. [Stefan Kaes] * Make cacheing binary files friendly with Windows. #1975. [Rich Olson] * Convert boolean form options form the tag_helper. #809. [Michael Schuerig ] * Fixed that an instance variable with the same name as a partial should be implicitly passed as the partial :object #2269 [court3nay] * Update Prototype to V1.4.0_pre11, script.aculo.us to [2502] [Thomas Fuchs] * Make assert_tag :children count appropriately. Closes #2181. [jamie@bravenet.com] * Forced newer versions of RedCloth to use hard breaks [David Heinemeier Hansson] * Added new scriptaculous options for auto_complete_field #2343 [Manfred Stienstra] * Don't prepend the asset host if the string is already a fully-qualified URL * Updated to script.aculo.us V1.5.0_rc2 and Prototype to V1.4.0_pre7 [Thomas Fuchs] * Undo condition change made in [2345] to prevent normal parameters arriving as StringIO. * Tolerate consecutive delimiters in query parameters. #2295 [darashi@gmail.com] * Streamline render process, code cleaning. Closes #2294. [skae] * Keep flash after components are rendered. #2291 [Rick Olson, Scott] * Shorten IE file upload path to filename only to match other browsers. #1507 [court3nay] * Fix open/save dialog in IE not opening files send with send_file/send_data, #2279 [Thomas Fuchs] * Fixed that auto_discovery_link_tag couldn't take a string as the URL [David Heinemeier Hansson] * Fixed problem with send_file and WEBrick using stdout #1812 [David Heinemeier Hansson] * Optimized tag_options to not sort keys, which is no longer necessary when assert_dom_equal and friend is available #1995 [skae] * Added assert_dom_equal and assert_dom_not_equal to compare tags generated by the helpers in an order-indifferent manner #1995 [skae] * Fixed that Request#domain caused an exception if the domain header wasn't set in the original http request #1795 [Michael Koziarski] * Make the truncate() helper multi-byte safe (assuming $KCODE has been set to something other than "NONE") #2103 * Add routing tests from #1945 [ben@groovie.org] * Add a routing test case covering #2101 [Nicholas Seckar] * Cache relative_url_root for all webservers, not just Apache #2193 [skae] * Speed up cookie use by decreasing string copying #2194 [skae] * Fixed access to "Host" header with requests made by crappy old HTTP/1.0 clients #2124 [Marcel Molina Jr.] * Added easy assignment of fragment cache store through use of symbols for included stores (old way still works too) Before: ActionController::Base.fragment_cache_store = ActionController::Base::Caching::Fragments::FileStore.new("/path/to/cache/directory") After: ActionController::Base.fragment_cache_store = :file_store, "/path/to/cache/directory" * Added ActionController::Base.session_store=, session_store, and session_options to make it easier to tweak the session options (instead of going straight to ActionController::CgiRequest::DEFAULT_SESSION_OPTIONS) * Added TextHelper#cycle to cycle over an array of values on each hit (useful for alternating row colors etc) #2154 [dave-ml@dribin.org] * Ensure that request.path never returns nil. Closes #1675 [Nicholas Seckar] * Add ability to specify Route Regexps for controllers. Closes #1917. [Sebastian Kanthak] * Provide Named Route's hash methods as helper methods. Closes #1744. [Nicholas Seckar, Steve Purcell] * Added :multipart option to ActiveRecordHelper#form to make it possible to add file input fields #2034 [jstirk@oobleyboo.com] * Moved auto-completion and in-place editing into the Macros module and their helper counterparts into JavaScriptMacrosHelper * Added in-place editing support in the spirit of auto complete with ActionController::Base.in_place_edit_for, JavascriptHelper#in_place_editor_field, and Javascript support from script.aculo.us #2038 [Jon Tirsen] * Added :disabled option to all data selects that'll make the elements inaccessible for change #2167, #253 [eigentone] * Fixed that TextHelper#auto_link_urls would include punctuation in the links #2166, #1671 [eigentone] * Fixed that number_to_currency(1000, {:precision => 0})) should return "$1,000", instead of "$1,000." #2122 [sd@notso.net] * Allow link_to_remote to use any DOM-element as the parent of the form elements to be submitted #2137 [erik@ruby-lang.nl]. Example: <%= link_to_remote 'Save', :update => "row023", :submit => "row023", :url => {:action => 'save_row'} %> * Fixed that render :partial would fail when :object was a Hash (due to backwards compatibility issues) #2148 [Sam Stephenson] * Fixed JavascriptHelper#auto_complete_for to only include unique items #2153 [Thomas Fuchs] * Fixed all AssetHelper methods to work with relative paths, such that javascript_include_tag('stdlib/standard') will look in /javascripts/stdlib/standard instead of '/stdlib/standard/' #1963 * Avoid extending view instance with helper modules each request. Closes #1979 * Performance improvements to CGI methods. Closes #1980 [Stefan Kaes] * Added :post option to UrlHelper#link_to that makes it possible to do POST requests through normal ahref links using Javascript * Fixed overwrite_params * Added ActionController::Base.benchmark and ActionController::Base.silence to allow for easy benchmarking and turning off the log * Updated vendor copy of html-scanner to support better xml parsing * Added :popup option to UrlHelper#link_to #1996 [gabriel.gironda@gmail.com]. Examples: link_to "Help", { :action => "help" }, :popup => true link_to "Busy loop", { :action => "busy" }, :popup => ['new_window', 'height=300,width=600'] * Drop trailing \000 if present on RAW_POST_DATA (works around bug in Safari Ajax implementation) #918 * Fix observe_field to fall back to event-based observation if frequency <= 0 #1916 [Michael Schubert] * Allow use of the :with option for submit_to_remote #1936 [jon@instance-design.co.uk] * AbstractRequest#domain returns nil when host is an ip address #2012 [Kevin Clark] * ActionController documentation update #2051 [François Beausoleil] * Yield @content_for_ variables to templates #2058 [Sam Stephenson] * Make rendering an empty partial collection behave like :nothing => true #2080 [Sam Stephenson] * Add option to specify the singular name used by pagination. * Use string key to obtain action value. Allows indifferent hashes to be disabled. * Added ActionView::Base.cache_template_loading back. * Rewrote compiled templates to decrease code complexity. Removed template load caching in favour of compiled caching. Fixed template error messages. [Nicholas Seckar] * Fix Routing to handle :some_param => nil better. [Nicholas Seckar, Luminas] * Add support for :include with pagination (subject to existing constraints for :include with :limit and :offset) #1478 [Michael Schubert] * Prevent the benchmark module from blowing up if a non-HTTP/1.1 request is processed * Added :use_short_month option to select_month helper to show month names as abbreviations * Make link_to escape the javascript in the confirm option #1964 [nicolas.pouillard@gmail.com] * Make assert_redirected_to properly check URL's passed as strings #1910 [Scott Barron] * Make sure :layout => false is always used when rendering inside a layout * Use raise instead of assert_not_nil in Test::Unit::TestCase#process to ensure that the test variables (controller, request, response) have been set * Make sure assigns are built for every request when testing #1866 * Allow remote_addr to be queried on TestRequest #1668 * Fixed bug when a partial render was passing a local with the same name as the partial * Improved performance of test app req/sec with ~10% refactoring the render method #1823 [Stefan Kaes] * Improved performance of test app req/sec with 5-30% through a series of Action Pack optimizations #1811 [Stefan Kaes] * Changed caching/expiration/hit to report using the DEBUG log level and errors to use the ERROR log level instead of both using INFO * Added support for per-action session management #1763 * Improved rendering speed on complicated templates by up to 100% (the more complex the templates, the higher the speedup) #1234 [Stefan Kaes]. This did necessasitate a change to the internals of ActionView#render_template that now has four parameters. Developers of custom view handlers (like Amrita) need to update for that. * Added options hash as third argument to FormHelper#input, so you can do input('person', 'zip', :size=>10) #1719 [jeremye@bsa.ca.gov] * Added Base#expires_in(seconds)/Base#expires_now to control HTTP content cache headers #1755 [Thomas Fuchs] * Fixed line number reporting for Builder template errors #1753 [piotr] * Fixed assert_routing so that testing controllers in modules works as expected [Nicholas Seckar, Rick Olson] * Fixed bug with :success/:failure callbacks for the JavaScriptHelper methods #1730 [court3nay/Thomas Fuchs] * Added named_route method to RouteSet instances so that RouteSet instance methods do not prevent certain names from being used. [Nicholas Seckar] * Fixed routes so that routes which do not specify :action in the path or in the requirements have a default of :action => 'index', In addition, fixed url generation so that :action => 'index' does not need to be provided for such urls. [Nicholas Seckar, Markjuh] * Worked around a Safari bug where it wouldn't pass headers through if the response was zero length by having render :nothing return ' ' instead of '' * Fixed Request#subdomains to handle "foo.foo.com" correctly *1.9.1* (11 July, 2005) * Fixed that auto_complete_for didn't force the input string to lower case even as the db comparison was * Fixed that Action View should always use the included Builder, never attempt to require the gem, to ensure compatibility * Added that nil options are not included in tags, so tag("p", :ignore => nil) now returns

    not

    but that tag("p", :ignore => "") still includes it #1465 [Michael Schuerig] * Fixed that UrlHelper#link_to_unless/link_to_if used html_escape on the name if no link was to be applied. This is unnecessary and breaks its use with images #1649 [joergd@pobox.com] * Improved error message for DoubleRenderError * Fixed routing to allow for testing of *path components #1650 [Nicholas Seckar] * Added :handle as an option to sortable_element to restrict the drag handle to a given class #1642 [thejohnny] * Added a bunch of script.aculo.us features #1644, #1677, #1695 [Thomas Fuchs] * Effect.ScrollTo, to smoothly scroll the page to an element * Better Firefox flickering handling on SlideUp/SlideDown * Removed a possible memory leak in IE with draggables * Added support for cancelling dragging my hitting ESC * Added capability to remove draggables/droppables and redeclare sortables in dragdrop.js (this makes it possible to call sortable_element on the same element more than once, e.g. in AJAX returns that modify the sortable element. all current sortable 'stuff' on the element will be discarded and the sortable will be rebuilt) * Always reset background color on Effect.Highlight; this make change backwards-compatibility, to be sure include style="background-color:(target-color)" on your elements or else elements will fall back to their CSS rules (which is a good thing in most circumstances) * Removed circular references from element to prevent memory leaks (still not completely gone in IE) * Changes to class extension in effects.js * Make Effect.Highlight restore any previously set background color when finishing (makes effect work with CSS classes that set a background color) * Fixed myriads of memory leaks in IE and Gecko-based browsers [David Zülke] * Added incremental and local autocompleting and loads of documentation to controls.js [Ivan Krstic] * Extended the auto_complete_field helper to accept tokens option * Changed object extension mechanism to favor Object.extend to make script.aculo.us easily adaptable to support 3rd party libs like IE7.js [David Zülke] * Fixed that named routes didn't use the default values for action and possible other parameters #1534 [Nicholas Seckar] * Fixed JavascriptHelper#visual_effect to use camelize such that :blind_up will work #1639 [pelletierm@eastmedia.net] * Fixed that a SessionRestoreError was thrown if a model object was placed in the session that wasn't available to all controllers. This means that it's no longer necessary to use the 'model :post' work-around in ApplicationController to have a Post model in your session. *1.9.0* (6 July, 2005) * Added logging of the request URI in the benchmark statement (makes it easy to grep for slow actions) * Added javascript_include_tag :defaults shortcut that'll include all the default javascripts included with Action Pack (prototype, effects, controls, dragdrop) * Cache several controller variables that are expensive to calculate #1229 [Stefan Kaes] * The session class backing CGI::Session::ActiveRecordStore may be replaced with any class that duck-types with a subset of Active Record. See docs for details #1238 [Stefan Kaes] * Fixed that hashes was not working properly when passed by GET to lighttpd #849 [Nicholas Seckar] * Fixed assert_template nil will be true when no template was rendered #1565 [maceywj@telus.net] * Added :prompt option to FormOptions#select (and the users of it, like FormOptions#select_country etc) to create "Please select" style descriptors #1181 [Michael Schuerig] * Added JavascriptHelper#update_element_function, which returns a Javascript function (or expression) that'll update a DOM element according to the options passed #933 [mortonda@dgrmm.net]. Examples: <%= update_element_function("products", :action => :insert, :position => :bottom, :content => "

    New product!

    ") %> <% update_element_function("products", :action => :replace, :binding => binding) do %>

    Product 1

    Product 2

    <% end %> * Added :field_name option to DateHelper#select_(year|month|day) to deviate from the year/month/day defaults #1266 [Marcel Molina Jr.] * Added JavascriptHelper#draggable_element and JavascriptHelper#drop_receiving_element to facilitate easy dragging and dropping through the script.aculo.us libraries #1578 [Thomas Fuchs] * Added that UrlHelper#mail_to will now also encode the default link title #749 [f.svehla@gmail.com] * Removed the default option of wrap=virtual on FormHelper#text_area to ensure XHTML compatibility #1300 [thomas@columbus.rr.com] * Adds the ability to include XML CDATA tags using Builder #1563 [Josh Knowles]. Example: xml.cdata! "some text" # => * Added evaluation of