mirror of https://github.com/rails/rails
parent
a9a6423fd6
commit
71c7fd1013
|
@ -285,7 +285,7 @@ module ActionController #:nodoc:
|
|||
# e.g. <tt>index.html.erb</tt>. If no template is available, the behavior
|
||||
# depends on the selected format:
|
||||
#
|
||||
# * for an html response - if the request method is +get+, an exception
|
||||
# * for an HTML response - if the request method is +get+, an exception
|
||||
# is raised but for other requests such as +post+ the response
|
||||
# depends on whether the resource has any validation errors (i.e.
|
||||
# assuming that an attempt has been made to save the resource,
|
||||
|
@ -334,12 +334,12 @@ module ActionController #:nodoc:
|
|||
#
|
||||
# As outlined above, the +resources+ argument passed to +respond_with+
|
||||
# can play two roles. It can be used to generate the redirect url
|
||||
# for successful html requests (e.g. for +create+ actions when
|
||||
# no template exists), while for formats other than html and JavaScript
|
||||
# for successful HTML requests (e.g. for +create+ actions when
|
||||
# no template exists), while for formats other than HTML and JavaScript
|
||||
# it is the object that gets rendered, by being converted directly to the
|
||||
# required format (again assuming no template exists).
|
||||
#
|
||||
# For redirecting successful html requests, +respond_with+ also supports
|
||||
# For redirecting successful HTML requests, +respond_with+ also supports
|
||||
# the use of nested resources, which are supplied in the same way as
|
||||
# in <code>form_for</code> and <code>polymorphic_url</code>. For example -
|
||||
#
|
||||
|
@ -351,7 +351,7 @@ module ActionController #:nodoc:
|
|||
# end
|
||||
#
|
||||
# This would cause +respond_with+ to redirect to <code>project_task_url</code>
|
||||
# instead of <code>task_url</code>. For request formats other than html or
|
||||
# instead of <code>task_url</code>. For request formats other than HTML or
|
||||
# JavaScript, if multiple resources are passed in this way, it is the last
|
||||
# one specified that is rendered.
|
||||
#
|
||||
|
@ -384,9 +384,9 @@ module ActionController #:nodoc:
|
|||
#
|
||||
# Two additional options are relevant specifically to +respond_with+ -
|
||||
# 1. <tt>:location</tt> - overwrites the default redirect location used after
|
||||
# a successful html +post+ request.
|
||||
# a successful HTML +post+ request.
|
||||
# 2. <tt>:action</tt> - overwrites the default render action used after an
|
||||
# unsuccessful html +post+ request.
|
||||
# unsuccessful HTML +post+ request.
|
||||
def respond_with(*resources, &block)
|
||||
if self.class.mimes_for_respond_to.empty?
|
||||
raise "In order to use respond_with, first you need to declare the " \
|
||||
|
|
|
@ -9,7 +9,7 @@ module ActionController #:nodoc:
|
|||
end
|
||||
|
||||
# Controller actions are protected from Cross-Site Request Forgery (CSRF) attacks
|
||||
# by including a token in the rendered html for your application. This token is
|
||||
# by including a token in the rendered HTML for your application. This token is
|
||||
# stored as a random string in the session, to which an attacker does not have
|
||||
# access. When a request reaches your application, \Rails verifies the received
|
||||
# token with the token in the session. Only HTML and JavaScript requests are checked,
|
||||
|
@ -44,7 +44,7 @@ module ActionController #:nodoc:
|
|||
#
|
||||
# The token parameter is named <tt>authenticity_token</tt> by default. The name and
|
||||
# value of this token must be added to every layout that renders forms by including
|
||||
# <tt>csrf_meta_tags</tt> in the html +head+.
|
||||
# <tt>csrf_meta_tags</tt> in the HTML +head+.
|
||||
#
|
||||
# Learn more about CSRF attacks and securing your application in the
|
||||
# {Ruby on Rails Security Guide}[http://guides.rubyonrails.org/security.html].
|
||||
|
|
|
@ -1,5 +1,5 @@
|
|||
module ActionDispatch
|
||||
# When called, this middleware renders an error page. By default if an html
|
||||
# When called, this middleware renders an error page. By default if an HTML
|
||||
# response is expected it will render static error pages from the `/public`
|
||||
# directory. For example when this middleware receives a 500 response it will
|
||||
# render the template found in `/public/500.html`.
|
||||
|
|
|
@ -218,7 +218,7 @@ module ActionView
|
|||
tag("img", options)
|
||||
end
|
||||
|
||||
# Returns a string suitable for an html image tag alt attribute.
|
||||
# Returns a string suitable for an HTML image tag alt attribute.
|
||||
# The +src+ argument is meant to be an image file path.
|
||||
# The method removes the basename of the file path and the digest,
|
||||
# if any. It also removes hyphens and underscores from file names and
|
||||
|
@ -239,7 +239,7 @@ module ActionView
|
|||
File.basename(src, '.*').sub(/-[[:xdigit:]]{32}\z/, '').tr('-_', ' ').capitalize
|
||||
end
|
||||
|
||||
# Returns an html video tag for the +sources+. If +sources+ is a string,
|
||||
# Returns an HTML video tag for the +sources+. If +sources+ is a string,
|
||||
# a single video tag will be returned. If +sources+ is an array, a video
|
||||
# tag with nested source tags for each source will be returned. The
|
||||
# +sources+ can be full paths or files that exists in your public videos
|
||||
|
|
|
@ -330,7 +330,7 @@ module ActionView
|
|||
Tags::DatetimeSelect.new(object_name, method, self, options, html_options).render
|
||||
end
|
||||
|
||||
# Returns a set of html select-tags (one for year, month, day, hour, minute, and second) pre-selected with the
|
||||
# Returns a set of HTML select-tags (one for year, month, day, hour, minute, and second) pre-selected with the
|
||||
# +datetime+. It's also possible to explicitly set the order of the tags using the <tt>:order</tt> option with
|
||||
# an array of symbols <tt>:year</tt>, <tt>:month</tt> and <tt>:day</tt> in the desired order. If you do not
|
||||
# supply a Symbol, it will be appended onto the <tt>:order</tt> passed in. You can also add
|
||||
|
@ -379,7 +379,7 @@ module ActionView
|
|||
DateTimeSelector.new(datetime, options, html_options).select_datetime
|
||||
end
|
||||
|
||||
# Returns a set of html select-tags (one for year, month, and day) pre-selected with the +date+.
|
||||
# Returns a set of HTML select-tags (one for year, month, and day) pre-selected with the +date+.
|
||||
# It's possible to explicitly set the order of the tags using the <tt>:order</tt> option with an array of
|
||||
# symbols <tt>:year</tt>, <tt>:month</tt> and <tt>:day</tt> in the desired order.
|
||||
# If the array passed to the <tt>:order</tt> option does not contain all the three symbols, all tags will be hidden.
|
||||
|
@ -418,7 +418,7 @@ module ActionView
|
|||
DateTimeSelector.new(date, options, html_options).select_date
|
||||
end
|
||||
|
||||
# Returns a set of html select-tags (one for hour and minute).
|
||||
# Returns a set of HTML select-tags (one for hour and minute).
|
||||
# You can set <tt>:time_separator</tt> key to format the output, and
|
||||
# the <tt>:include_seconds</tt> option to include an input for seconds.
|
||||
#
|
||||
|
@ -635,7 +635,7 @@ module ActionView
|
|||
DateTimeSelector.new(date, options, html_options).select_year
|
||||
end
|
||||
|
||||
# Returns an html time tag for the given date or time.
|
||||
# Returns an HTML time tag for the given date or time.
|
||||
#
|
||||
# time_tag Date.today # =>
|
||||
# <time datetime="2010-11-04">November 04, 2010</time>
|
||||
|
@ -914,7 +914,7 @@ module ActionView
|
|||
build_select(type, build_options(selected, options))
|
||||
end
|
||||
|
||||
# Build select option html from date value and options.
|
||||
# Build select option HTML from date value and options.
|
||||
# build_options(15, start: 1, end: 31)
|
||||
# => "<option value="1">1</option>
|
||||
# <option value="2">2</option>
|
||||
|
@ -954,7 +954,7 @@ module ActionView
|
|||
(select_options.join("\n") + "\n").html_safe
|
||||
end
|
||||
|
||||
# Builds select tag from date type and html select options.
|
||||
# Builds select tag from date type and HTML select options.
|
||||
# build_select(:month, "<option value="1">January</option>...")
|
||||
# => "<select id="post_written_on_2i" name="post[written_on(2i)]">
|
||||
# <option value="1">January</option>...
|
||||
|
|
|
@ -142,7 +142,7 @@ module ActionView
|
|||
# will get expanded to
|
||||
#
|
||||
# <%= text_field :person, :first_name %>
|
||||
# which results in an html <tt><input></tt> tag whose +name+ attribute is
|
||||
# which results in an HTML <tt><input></tt> tag whose +name+ attribute is
|
||||
# <tt>person[first_name]</tt>. This means that when the form is submitted,
|
||||
# the value entered by the user will be available in the controller as
|
||||
# <tt>params[:person][:first_name]</tt>.
|
||||
|
|
|
@ -314,7 +314,7 @@ module ActionView
|
|||
# # => <option>MasterCard</option>
|
||||
# # => <option selected="selected">Discover</option>
|
||||
#
|
||||
# You can optionally provide html attributes as the last element of the array.
|
||||
# You can optionally provide HTML attributes as the last element of the array.
|
||||
#
|
||||
# options_for_select([ "Denmark", ["USA", {class: 'bold'}], "Sweden" ], ["USA", "Sweden"])
|
||||
# # => <option value="Denmark">Denmark</option>
|
||||
|
@ -633,7 +633,7 @@ module ActionView
|
|||
# even use the label as wrapper, as in the example above.
|
||||
#
|
||||
# The builder methods <tt>label</tt> and <tt>radio_button</tt> also accept
|
||||
# extra html options:
|
||||
# extra HTML options:
|
||||
# collection_radio_buttons(:post, :author_id, Author.all, :id, :name_with_initial) do |b|
|
||||
# b.label(class: "radio_button") { b.radio_button(class: "radio_button") }
|
||||
# end
|
||||
|
@ -696,7 +696,7 @@ module ActionView
|
|||
# use the label as wrapper, as in the example above.
|
||||
#
|
||||
# The builder methods <tt>label</tt> and <tt>check_box</tt> also accept
|
||||
# extra html options:
|
||||
# extra HTML options:
|
||||
# collection_check_boxes(:post, :author_ids, Author.all, :id, :name_with_initial) do |b|
|
||||
# b.label(class: "check_box") { b.check_box(class: "check_box") }
|
||||
# end
|
||||
|
|
|
@ -17,10 +17,10 @@ module ActionView #:nodoc:
|
|||
stringish.to_s.html_safe
|
||||
end
|
||||
|
||||
# This method returns an html safe string similar to what <tt>Array#join</tt>
|
||||
# This method returns an HTML safe string similar to what <tt>Array#join</tt>
|
||||
# would return. The array is flattened, and all items, including
|
||||
# the supplied separator, are html escaped unless they are html
|
||||
# safe, and the returned string is marked as html safe.
|
||||
# the supplied separator, are HTML escaped unless they are HTML
|
||||
# safe, and the returned string is marked as HTML safe.
|
||||
#
|
||||
# safe_join(["<p>foo</p>".html_safe, "<p>bar</p>"], "<br />")
|
||||
# # => "<p>foo</p><br /><p>bar</p>"
|
||||
|
|
|
@ -14,8 +14,8 @@ module ActionView
|
|||
# * <tt>:text</tt> - Renders the text passed in out.
|
||||
# * <tt>:plain</tt> - Renders the text passed in out. Setting the content
|
||||
# type as <tt>text/plain</tt>.
|
||||
# * <tt>:html</tt> - Renders the html safe string passed in out, otherwise
|
||||
# performs html escape on the string first. Setting the content type as
|
||||
# * <tt>:html</tt> - Renders the HTML safe string passed in out, otherwise
|
||||
# performs HTML escape on the string first. Setting the content type as
|
||||
# <tt>text/html</tt>.
|
||||
# * <tt>:body</tt> - Renders the text passed in, and inherits the content
|
||||
# type of <tt>text/html</tt> from <tt>ActionDispatch::Response</tt>
|
||||
|
|
|
@ -8,7 +8,7 @@ module ActionView
|
|||
# These helper methods extend Action View making them callable within your template files.
|
||||
module SanitizeHelper
|
||||
extend ActiveSupport::Concern
|
||||
# This +sanitize+ helper will html encode all tags and strip all attributes that
|
||||
# This +sanitize+ helper will HTML encode all tags and strip all attributes that
|
||||
# aren't specifically allowed.
|
||||
#
|
||||
# It also strips href/src tags with invalid protocols, like javascript: especially.
|
||||
|
|
|
@ -91,7 +91,7 @@ module HTML
|
|||
sup dfn cite big small address hr br div span h1 h2 h3 h4 h5 h6 ul ol li dl dt dd abbr
|
||||
acronym a img blockquote del ins))
|
||||
|
||||
# Specifies the default Set of html attributes that the #sanitize helper will leave
|
||||
# Specifies the default Set of HTML attributes that the #sanitize helper will leave
|
||||
# in the allowed tag.
|
||||
self.allowed_attributes = Set.new(%w(href src width height alt cite datetime title class name xml:lang abbr))
|
||||
|
||||
|
|
|
@ -50,7 +50,7 @@ HTML
|
|||
when 'erb'
|
||||
'ruby; html-script: true'
|
||||
when 'html'
|
||||
'xml' # html is understood, but there are .xml rules in the CSS
|
||||
'xml' # HTML is understood, but there are .xml rules in the CSS
|
||||
else
|
||||
'plain'
|
||||
end
|
||||
|
|
|
@ -495,7 +495,7 @@ image_url("edit.png") # => http://www.example.com/assets/edit.png
|
|||
|
||||
#### image_tag
|
||||
|
||||
Returns an html image tag for the source. The source can be a full path or a file that exists in your `app/assets/images` directory.
|
||||
Returns an HTML image tag for the source. The source can be a full path or a file that exists in your `app/assets/images` directory.
|
||||
|
||||
```ruby
|
||||
image_tag("icon.png") # => <img src="/assets/icon.png" alt="Icon" />
|
||||
|
@ -503,7 +503,7 @@ image_tag("icon.png") # => <img src="/assets/icon.png" alt="Icon" />
|
|||
|
||||
#### javascript_include_tag
|
||||
|
||||
Returns an html script tag for each of the sources provided. You can pass in the filename (`.js` extension is optional) of JavaScript files that exist in your `app/assets/javascripts` directory for inclusion into the current page or you can pass the full path relative to your document root.
|
||||
Returns an HTML script tag for each of the sources provided. You can pass in the filename (`.js` extension is optional) of JavaScript files that exist in your `app/assets/javascripts` directory for inclusion into the current page or you can pass the full path relative to your document root.
|
||||
|
||||
```ruby
|
||||
javascript_include_tag "common" # => <script src="/assets/common.js"></script>
|
||||
|
@ -736,7 +736,7 @@ distance_of_time_in_words(Time.now, Time.now + 15.seconds, include_seconds: true
|
|||
|
||||
#### select_date
|
||||
|
||||
Returns a set of html select-tags (one for year, month, and day) pre-selected with the `date` provided.
|
||||
Returns a set of HTML select-tags (one for year, month, and day) pre-selected with the `date` provided.
|
||||
|
||||
```ruby
|
||||
# Generates a date select that defaults to the date provided (six days after today)
|
||||
|
@ -748,7 +748,7 @@ select_date()
|
|||
|
||||
#### select_datetime
|
||||
|
||||
Returns a set of html select-tags (one for year, month, day, hour, and minute) pre-selected with the `datetime` provided.
|
||||
Returns a set of HTML select-tags (one for year, month, day, hour, and minute) pre-selected with the `datetime` provided.
|
||||
|
||||
```ruby
|
||||
# Generates a datetime select that defaults to the datetime provided (four days after today)
|
||||
|
@ -808,7 +808,7 @@ select_second(Time.now + 16.minutes)
|
|||
|
||||
#### select_time
|
||||
|
||||
Returns a set of html select-tags (one for hour and minute).
|
||||
Returns a set of HTML select-tags (one for hour and minute).
|
||||
|
||||
```ruby
|
||||
# Generates a time select that defaults to the time provided
|
||||
|
@ -1526,7 +1526,7 @@ The SanitizeHelper module provides a set of methods for scrubbing text of undesi
|
|||
|
||||
#### sanitize
|
||||
|
||||
This sanitize helper will html encode all tags and strip all attributes that aren't specifically allowed.
|
||||
This sanitize helper will HTML encode all tags and strip all attributes that aren't specifically allowed.
|
||||
|
||||
```ruby
|
||||
sanitize @article.body
|
||||
|
|
|
@ -263,7 +263,7 @@ TIP: This is useful when you're rendering a small snippet of HTML code.
|
|||
However, you might want to consider moving it to a template file if the markup
|
||||
is complex.
|
||||
|
||||
NOTE: This option will escape HTML entities if the string is not html safe.
|
||||
NOTE: This option will escape HTML entities if the string is not HTML safe.
|
||||
|
||||
#### Rendering JSON
|
||||
|
||||
|
|
Loading…
Reference in New Issue