Fix doc for #check_box [#6311 state:resolved]

Signed-off-by: Xavier Noria <fxn@hashref.com>
make TestCaseTest work for pre-1.9 rubies, too
scrub instance variables from test cases on teardown

this prevents test state from accumulating, resulting in leaked
objects and slow tests due to overactive GC.
rein in GC during tests by making them run (at most) once per second

this can provide a significant performance boost during testing, by
preventing the GC from running too frequently.
Revert "rein in GC during tests by making them run (at most) once per second"

This reverts commit a0c761dc6b3d840852be35af59b143e2016acf9d.
Revert "scrub instance variables from test cases on teardown"

This reverts commit b5cf2b4b82de877c07bb2cca02085d2b3ec195e0.
Revert "make TestCaseTest work for pre-1.9 rubies, too"

This reverts commit 8378a44ff9ea2f60a92af6dc45ac87b47e279fce.
fixing invalid yaml [#4418 state:resolved]

Signed-off-by: Jeremy Kemper <jeremy@bitsweat.net>
Be sure to javascript_escape the email address to prevent apostrophes inadvertently causing javascript errors.

This fixes CVE-2011-0446
Change the CSRF whitelisting to only apply to get requests

Unfortunately the previous method of browser detection and XHR whitelisting is unable to prevent requests issued from some Flash animations and Java applets.  To ease the work required to include the CSRF token in ajax requests rails now supports providing the token in a custom http header:

 X-CSRF-Token: ...

This fixes CVE-2011-0447
Prepare for the 2.3.11 release
rubygems 1.5.0 compatibility. Thanks Tim Serong
fix incorrect version in deprecation message

Signed-off-by: Santiago Pastorino <santiago@wyeworks.com>
Unit test that shows calling reset session twice results in an exception
Fixed bug 6440 by checking that destroy exists on the session
respect :expire_after option

- it was broken after
[commit](https://github.com/rails/rails/commit/e0eb8e9c65ededce64169948d4dd51b0079cdd10)
- there's also
[issue](https://rails.lighthouseapp.com/projects/8994/tickets/6634-railsrack-inconsistency-about-expires_afterexpires-cookie-option)

- also: maybe it worth making Rack understand :expire_after as we
duplicate same logic in [cookie_store](https://github.com/gmarik/rails/blob/v2.3.11/actionpack/lib/action_controller/session/cookie_store.rb#L114)

Signed-off-by: José Valim <jose.valim@gmail.com>
Fixing dynamic finders on associations to properly send arguments to the find_by_* method. Closes issue #330.

Commit fdfc8e3b9 introduced a bugfix to prevent additional values passed
to a dynamic find_or_create_by_x methods from confusing the finder.
This patch also broke the essential behavior of this method on an
association by incorrectly sending arguments to the find_by_x methods.
The finder method would always see its inputs as a single array of
values instead of individual arguments, almost guaranteeing that the
finder call would be incorrect, and that we'd always create a new
record instead.

This patch adds a splat operator to the parameter array we send along to
the dynamic finder so that it receives its inputs correctly, and
includes an additional test to ensure that repeated calls to
find_or_create_by_x only creates one new record.
Merged pull request #331 from daphonz/2-3-stable.

Dynamic find_or_create_by_x_and_y always creates new records in Rails 2.3.11 
Merged pull request #198 from robdimarco/2-3-stable.

Patch for issue 6440 - Session Reset undefined method `destroy' for {}:Hash 
Fix stupid emacsisms. Just makes things more readable.