1. 31 Jul, 2015 1 commit
  2. 29 Jul, 2015 1 commit
    • Address spec deprecation warnings and failures · c783b1fc
      * update aruba methods for in_current_dir and check_file_presence
      * switch rspec syntax from should to expect
      * configure raise_in_transactional_callbacks if AR >= 4.2
      * remove paperclip itself from Appraisal
      This also updates Travis to use the default bundler (to enable caching) and to build primary rubies first
      Dave Gynn committed
  3. 26 Jun, 2015 1 commit
  4. 19 Jun, 2015 3 commits
  5. 17 Jun, 2015 1 commit
  6. 05 Jun, 2015 2 commits
    • Fixes failing tests · 2e540f89
      Jon Yurek committed
    • Fix a possible security issue with spoofing · 9aee4112
      Thanks to MORI Shingo of DeNA Co., Ltd. for reporting this.
      
      There is an issue where if an HTML file is uploaded with a .html
      extension, but the content type is listed as being `image/jpeg`, this
      will bypass a validation checking for images. But it will also pass the
      spoof check, because a file named .html and containing actual HTML
      passes the spoof check.
      
      This change makes it so that we also check the supplied content type. So
      even if the file contains HTML and ends with .html, it doesn't match the
      content type of `image/jpeg` and so it fails.
      Jon Yurek committed
  7. 15 May, 2015 2 commits
  8. 30 Apr, 2015 4 commits
  9. 26 Apr, 2015 2 commits
  10. 24 Apr, 2015 4 commits
  11. 17 Apr, 2015 1 commit
  12. 15 Apr, 2015 1 commit
    • Fix for Errno::ENAMETOOLONG in Thumbnails · c81970d9
      * Uses Paperclip's Tempfile instead of Ruby's in Thumbnail
      * Also includes a test for TempfileFactory to be sure it does not revert to similar behavior
      * In the tests, give the OS some wiggle room in the Tempfile name to ensure the error does not occur before we are ready for it. The wiggle room is needed because the randomized part of the name has a variable number of characters.
      Sammy Larbi committed
  13. 25 Mar, 2015 1 commit
  14. 13 Mar, 2015 1 commit
  15. 06 Feb, 2015 6 commits
  16. 06 Jan, 2015 1 commit
    • Don't assume we have Rails.env if we have Rails · c46b40b9
      As referenced in #1739
      
      Just because the `Rails` constant is defined, it doesn't mean we're
      actually in a Rails app. Since there are people who use Paperclip
      outside of Rails, and there's no reason we shouldn't be able to run in
      those situations. This commit checks for `Rails.env` instead of just
      checking for `Rails` and assuming `Rails.env` works.
      Jon Yurek committed
  17. 19 Dec, 2014 1 commit
  18. 09 Dec, 2014 1 commit
    • Update cocaine dependency · 0f7380b3
      Cocaine changes how it returns the supplied path in 0.5.5. While this
      has no effect on the workings of Paperclip in a normal capacity, it does
      break the tests. This change fixes that and updates the cocaine
      dependency to 0.5.5.
      Jon Yurek committed
  19. 08 Dec, 2014 2 commits
  20. 05 Dec, 2014 4 commits