nex3
Not a member
nex3's latest activity
Monday, August 30 2010
-
nex3 commented at 6:44 AMThis has been fixed by http://github.com/nex3/haml/commit/61a1de3ff75e98e92688f9dd2d121a3c.... The fix is released as part of Haml 3.0.18.
-
nex3 commented at 5:43 AMI just got home, and I'm now looking into this. I hope to release Haml 3.0.18 with a fix some time tonight.
Sunday, May 23 2010
-
- Tag changed from 2.3.6, xss to 2, xss
How does monkeypatching ERB create forwards compatibility? Rails 3 doesn't monkeypatch ERB. ERB isn't used for html-safety... that's all Erubis. What reason cou...
-
nex3 created the ticket at 11:59 AMIn 2.3.6, ERB is monkeypatched rather than subclassed to use
ActiveSupport::SafeBuffer. This breaks any libraries that are using ERB and expecting it to work wi...
-
nex3 created the ticket at 12:17 PMThe
#concatand#cachehelpers in Rails 2.3.6 calloutput_buffer#safe_concatrather than callingoutput_buffer#concatand passing in anhtml_safestring. This i...
-
nex3 created the ticket at 11:54 AMClosing form tags (
</form>) created via#form_foror#form_tagare not marked as HTML-safe, and so are rendered as</form>when XSS protection is enabled....
Thursday, November 05 2009
-
nex3 created the ticket at 1:49 AMSee http://gist.github.com/226606. Running error.rb produces a "no block given" error.
Monday, December 15 2008
-
nex3 commented at 6:50 PMThis shouldn't slow down the process very much at all. It doesn't have any effect if all your templates have recognized extensions, and even if it does hit
auto...
Tuesday, December 09 2008
-
nex3 created the ticket at 9:23 PMThis patch allows alternate template engines to be loaded without explicitly installing a plugin or requiring a gem. When an unrecognized template extension is ...
Thursday, May 01 2008
-
nex3 created the ticket at 9:38 PMWhen an error is raised in a partial template, it's only wrapped by TemplateError once it bubbles up to Base#render_file. This means that the Template object p...