discourse/spec/controllers
Ian Christian Myers b61e10f9ad All parameters for #create in PostsController pass through strong_parameters.
We are now explicitly whitelisting all parameters for Post creation. A nice side-effect is that it cleans up the #create action in PostsController. We can now trust that all parameters entering PostCreator are of a safe scalar type.
2013-06-07 01:29:25 -07:00
..
admin Enabled strong_parameters across all models/controllers. 2013-06-06 00:30:59 -07:00
application_controller_spec.rb FIX: [security bug] XHR check bypass 2013-04-30 02:34:19 +02:00
categories_controller_spec.rb Implemented strong_parameters for Category/CategoriesController. 2013-06-04 23:45:25 -07:00
clicks_controller_spec.rb Enabled strong_parameters across all models/controllers. 2013-06-06 00:30:59 -07:00
draft_controller_spec.rb remove trailing whitespaces ❤️ 2013-02-26 07:31:35 +03:00
education_controller_spec.rb Replace MultisiteI18n hack with SiteContent and admin editing. 2013-04-05 16:48:15 -04:00
email_controller_spec.rb remove trailing whitespaces ❤️ 2013-02-26 07:31:35 +03:00
invites_controller_spec.rb Implemented strong_parameters for Invite/InvitesController. 2013-06-05 00:04:03 -07:00
list_controller_spec.rb work in progress, live unread and new counts 2013-05-30 16:49:57 +10:00
notifications_controller_spec.rb remove trailing whitespaces ❤️ 2013-02-26 07:31:35 +03:00
omniauth_callbacks_controller_spec.rb Disable OmniAuth account creation if 'invite only' 2013-06-05 11:11:02 -07:00
onebox_controller_spec.rb Fixes regression with video embeds 2013-03-21 20:53:12 -04:00
post_actions_controller_spec.rb Implemented strong_parameters for PostAction/PostActionsController. 2013-06-05 00:23:51 -07:00
posts_controller_spec.rb All parameters for #create in PostsController pass through strong_parameters. 2013-06-07 01:29:25 -07:00
request_access_controller_spec.rb remove trailing whitespaces ❤️ 2013-02-26 07:31:35 +03:00
robots_txt_controller_spec.rb Remove unusued site_settings, show checkbox in UI for boolean values, remove restrict_access 2013-03-01 14:27:41 -05:00
search_controller_spec.rb Use search context for filtering search results by current category or user 2013-05-24 14:04:26 -04:00
session_controller_spec.rb Test correct login behavior when pending approval 2013-06-06 18:36:16 -07:00
static_controller_spec.rb Redirect to root after login if no path provided 2013-06-04 16:10:10 -07:00
topics_controller_spec.rb Store when a topic was first set to auto-close and report that amount of time when it closes. And do some refactoring. 2013-06-06 17:04:21 -04:00
uploads_controller_spec.rb Implemented strong_parameters for Upload/UploadsController. 2013-06-05 00:55:55 -07:00
user_actions_controller_spec.rb introduce strong_parameters 2013-05-27 11:06:09 +10:00
users_controller_spec.rb Show 'waiting approval' and don't send email 2013-06-06 18:36:16 -07:00