Commit Graph

1470 Commits

Author SHA1 Message Date
Rafael Mendonça França d880330405
Preparing for 4.1.16 release 2016-07-12 19:18:54 -03:00
Rafael Mendonça França 871d63e2c7
Preparing for 4.1.16.rc1 release 2016-07-01 23:13:18 -03:00
Rafael Mendonça França d5c4b82b64 Preparing for 4.1.15 release 2016-03-07 19:34:57 -03:00
Rafael Mendonça França 06d2bfd42a Preparing for 4.1.15.rc1 release 2016-03-01 15:41:59 -03:00
Rafael Mendonça França 4cffd33a96 Preparing for 4.1.14.2 release 2016-02-29 16:01:59 -03:00
Aaron Patterson 31ab3aa0e8 bumping version 2016-01-25 10:26:09 -08:00
Aaron Patterson 50d3d7d011 Eliminate instance level writers for class accessors
Instance level writers can have an impact on how the Active Model /
Record objects are saved.  Specifically, they can be used to bypass
validations.  This is a problem if mass assignment protection is
disabled and specific attributes are passed to the constructor.

Conflicts:
	activerecord/lib/active_record/scoping/default.rb
	activesupport/lib/active_support/callbacks.rb

CVE-2016-0753
2016-01-22 15:03:03 -08:00
Rafael Mendonça França e694ac5fbc Preparing for 4.1.14 release 2015-11-12 15:17:28 -02:00
Rafael Mendonça França 96c4b1a131 Preparing for 4.1.14.rc2 release 2015-11-05 00:53:25 -02:00
Rafael Mendonça França 23df880908 Update the gem versions 2015-10-30 17:55:48 -02:00
Rafael Mendonça França 7ecac3e9f8 Prepare to 4.1.14.rc1 2015-10-30 17:34:57 -02:00
Rafael Mendonça França 10ac0155b1 Preparing for 4.1.13 release 2015-08-24 14:57:52 -03:00
Rafael Mendonça França 099a9181fc Preparing for 4.1.13.rc1 release 2015-08-14 12:09:28 -03:00
Rafael Mendonça França adfda00f06 Preparing for 4.1.12 release 2015-06-25 18:24:01 -03:00
Rafael Mendonça França 68d3245496 Preparing for 4.1.12.rc1 release 2015-06-22 11:03:27 -03:00
Rafael Mendonça França 906311d0cd Merge branch '4-1-10-sec' into 4-1-stable 2015-06-16 17:17:50 -03:00
Rafael Mendonça França 260da06e6b Preparing for 4.1.11 release 2015-06-16 12:09:58 -03:00
Rafael Mendonça França 26b6fc6bb6 Merge branch '4-1-10' into 4-1-stable 2015-03-19 13:51:48 -03:00
Rafael Mendonça França 5496ec8aac Preparing for 4.1.10 release 2015-03-19 13:48:26 -03:00
Rafael Mendonça França 410f7d29e9 Preparing for 4.1.10.rc4 release 2015-03-12 18:31:03 -03:00
Rafael Mendonça França 77e324b59e Preparing for 4.1.10.rc3 release 2015-03-02 18:38:13 -03:00
Rafael Mendonça França 08217de911 Preparing for 4.1.10.rc2 release 2015-02-25 19:20:53 -03:00
Rafael Mendonça França 17bc8d2dbe Merge pull request #19055 from ianks/model_name.to_json
activemodel: make .model_name json encodable
2015-02-24 15:06:33 -03:00
Rafael Mendonça França a698862cbc Preparing for 4.1.10.rc1 release 2015-02-20 19:50:05 -02:00
Rafael Mendonça França 5d9f3cf272 Preparing for 4.1.9 release 2015-01-06 13:00:36 -03:00
Rafael Mendonça França 116695b258 Preparing for 4.1.9.rc1 release 2015-01-01 22:09:46 -03:00
Rafael Mendonça França f38c922cc5 Sync changelog 2014-11-19 17:25:06 -02:00
Aaron Patterson b32babc4b0 bumping version for relesase 2014-11-16 11:42:07 -08:00
Aaron Patterson 6fe2572af1 bumping version to 4.1.7 2014-10-29 12:00:59 -07:00
Rafael Mendonça França 24027162db Preparing for 4.1.6 release 2014-09-11 14:24:13 -03:00
Rafael Mendonça França 57d65e3b28 Preparing for 4.1.6.rc2 release 2014-09-08 15:10:13 -03:00
Rafael Mendonça França c3f578c4b8 Preparing for 4.1.6.rc1 release 2014-08-19 14:45:44 -03:00
Rafael Mendonça França 9c297ce936 Merge branch '4-1-5' into 4-1-stable
Conflicts:
	actionmailer/CHANGELOG.md
	actionview/CHANGELOG.md
	activerecord/CHANGELOG.md
	activesupport/CHANGELOG.md
	railties/CHANGELOG.md
2014-08-18 14:05:48 -03:00
Rafael Mendonça França 9bb76261d3 Preparing for 4.1.5 release 2014-08-18 13:50:06 -03:00
Rafael Mendonça França 9456990b14 Check attributes passed to create_with and where
If the request parameters are passed to create_with and where they can
be used to do mass assignment when used in combination with
Relation#create.

Fixes CVE-2014-3514
2014-08-18 13:47:25 -03:00
Yves Senn a7da19acad Merge pull request #16319 from Domon/fix-each-validator-example
Fix example code of EachValidator [ci skip]
2014-07-28 15:20:25 +02:00
Rafael Mendonça França 7c4bfe1c95 Preparing for 4.1.4 release 2014-07-02 15:30:18 -03:00
Rafael Mendonça França dfa7a76de8 Preparing for 4.1.3 release 2014-07-02 13:00:25 -03:00
Rafael Mendonça França 14f635a066 Preparing for 4.1.2 release 2014-06-26 10:34:44 -03:00
Rafael Mendonça França 6ed0f63398 Preparing for 4.1.2.rc3 release 2014-06-23 14:26:31 -03:00
Rafael Mendonça França 5006b63ae3 Preparing for 4.1.2.rc2 release 2014-06-16 13:28:15 -03:00
Rafael Mendonça França fcb1afc245 Preparing for 4.1.2.rc1 release 2014-05-27 13:10:30 -03:00
Rafael Mendonça França c8ddb617bd Copy-edit at the CHANGELOGS [ci skip] 2014-05-20 19:23:40 -03:00
Rafael Mendonça França 561811fb00 Merge branch '4-1-sec' into 4-1-stable
Conflicts:
	actionmailer/CHANGELOG.md
	actionpack/CHANGELOG.md
	actionview/CHANGELOG.md
	activemodel/CHANGELOG.md
	activerecord/CHANGELOG.md
	activesupport/CHANGELOG.md
	guides/CHANGELOG.md
	railties/CHANGELOG.md
2014-05-06 13:34:57 -03:00
Rafael Mendonça França 254e8e2c97 Preparing for 4.1.1 release 2014-05-06 11:31:32 -03:00
Rafael Mendonça França 2a72514d2e Merge pull request #14783 from hakanensari/autoload-strict-validation-failed
Autoload ActiveModel::StrictValidationFailed
2014-04-17 14:43:51 -03:00
Rafael Mendonça França cf70674a18 Merge branch '4-1-0' into 4-1-stable
Conflicts:
	actionpack/CHANGELOG.md
	actionview/CHANGELOG.md
	activerecord/CHANGELOG.md
2014-04-08 16:41:10 -03:00
David Heinemeier Hansson f35f4ae0d4 Prepare for 4.1.0 final release 2014-04-08 20:59:28 +02:00
David Heinemeier Hansson 6b6f8b566e Prepare for rc2 release 2014-03-25 20:17:43 +01:00
Pavel Penkov 6dd0f68d17 Tests for indifferent access using full_messages_for. Closes #11916 2014-03-08 13:31:09 +01:00