Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

grosser

grosser

Not a member

grosser's latest activity

Thursday, October 14 2010
4069 Add plugin info / update / list as tracked_plugins does was updated in Ruby on Rails
  • grosser
    grosser commented at 12:12 PM

    Its not that important anymore since rails 3 / bundler shifted the focus to gems.
Friday, October 08 2010
5719 XSS hole in String % (with Hash) on 1.8 was updated in Ruby on Rails
  • grosser
    grosser commented at 5:56 PM

    that should have been one block...
  • grosser
    grosser commented at 5:55 PM

    I think rails should take care of all html_safe related methods, so they do not get spread out into multiple places.

    My idea for a patch:

    if ("%{x}".html_safe%...
  • grosser
    grosser commented at 2:24 PM

    The i18n gem loaded by rails adds the % method supporting hash to string.
    (This kind of replacement is often used when adding something into translations.)

    ree...
Wednesday, October 06 2010
5719 XSS hole in String % (with Hash) on 1.8 was updated in Ruby on Rails
  • grosser
    • Title changed from html_safe is not honored by String#% to XSS hole in String % (with Hash) on 1.8
    by grosser at 6:55 AM
3431 ActionMailer does not return correctly to respond_to? with deliver_ prefix was updated in Ruby on Rails
  • grosser
    • Title changed from ActionMailer does not return correctly to respond_to? to ActionMailer does not return correctly to respond_to? with deliver_ prefix
    by grosser at 6:53 AM
  • grosser
    • Tag changed from 2.3.4, actionmailer, rails to 2.3.9, actionmailer, rails
    by grosser at 6:51 AM

    still here in 2.3.9

    AccountMailer.respond_to?(:deliver_xxx)
 => #<MatchData "deliver_xxx" 1:"deliver" 2:"xxx">
Thursday, September 30 2010
5719 html_safe is not honored by String#% was updated in Ruby on Rails
  • grosser
    grosser commented at 2:22 PM

    ahh % with array is not affected

    ree-1.8.7-2010.01 > ("%s aa".html_safe % ['<script>x</script>']).html_safe?
 => false

    but % with hash is:

    ree-1.8.7-2010.01 ...
Tuesday, September 28 2010
5719 html_safe is not honored by String#% was created in Ruby on Rails
  • grosser
    grosser created the ticket at 7:31 AM 
    ("<a>%{x}</a>".html_safe % {:x=>'<script>y</script>'}).should ==
   "<a>&ltscript&gty&lt/script&gt</a>"
-> is <a><script>y</script></a>
-> is still html_safe?
    ...
Thursday, September 23 2010
59 When loading a plugin via rubygems, rake tasks aren't included was updated in Ruby on Rails
  • grosser
    grosser commented at 7:28 AM

    +1 for making it work without copy-pasting some railtie(that will likely have a different api in future rails version) into every gem.