1. 09 Mar, 2018 1 commit
  2. 23 Jan, 2018 1 commit
    • Remove the automatic loading of URI Adapters · 80847b44
      Remove the URI adapters. Few people use them by default and they can
      allow insight into the internal networks of the server. If you want to
      enable them, add (for example) `Paperclip.DataUriAdapter.register` to
      your `config/initializers/paperclip.rb` file.
      
      This is related to CVE-2017-0889.
      
      Elsewhere fix CI: it's `s3.us-west-2` now, with a dot.
      Jon Yurek committed
  3. 18 Oct, 2017 1 commit
  4. 28 Sep, 2017 1 commit
  5. 01 Dec, 2016 1 commit
  6. 19 Aug, 2016 1 commit
  7. 24 Mar, 2016 1 commit
  8. 23 Mar, 2016 1 commit
  9. 21 Aug, 2015 1 commit
  10. 20 Aug, 2015 3 commits
  11. 29 Jul, 2015 1 commit
    • Address spec deprecation warnings and failures · c783b1fc
      * update aruba methods for in_current_dir and check_file_presence
      * switch rspec syntax from should to expect
      * configure raise_in_transactional_callbacks if AR >= 4.2
      * remove paperclip itself from Appraisal
      This also updates Travis to use the default bundler (to enable caching) and to build primary rubies first
      Dave Gynn committed
  12. 27 May, 2015 1 commit
  13. 15 May, 2015 1 commit
    • HasAttachedFile respects global settings · 2610cc32
      Normally, all of the settings would be set on `Attachment`, and they
      were `deep_merge`d fine. However, if you set the global
      
          config.paperclip_defaults = { :validate_media_type => false }
      
      then the `HasAttachedFile` class wouldn't pick up on it, because it only
      uses things that are defined in the class. This change makes it so that
      the default options are merged in to the ones that `HasAttachedFile`
      uses when it sets up the attachment.
      
      Fixes #1857
      Jon Yurek committed
  14. 29 Aug, 2014 1 commit
  15. 01 Jul, 2014 1 commit
  16. 20 Jun, 2014 1 commit
  17. 11 Mar, 2014 3 commits
    • Changes to get rbx passing · 743e2e00
      First off, sqlite3 needs to be exactly v1.3.8.
      Need to make sure both racc and rubysl are in the Gemfiles.
      RBX's File.join doesn't like nil at all.
      RBX also doesn't like to remove a constant that doesn't exist yet.
      Jon Yurek committed
    • Convert all of the tests from test/unit to RSpec · 1f3a7467
      This is a big one.
      
      This change converts all of the existing tests from test/unit to RSpec.
      It's been a long time coming, and was specifically prompted by the
      inability of minitest to work with Appraisal across the various Rails
      versions. Instead of ironing out that headache, converting to RSpec was
      preferable (after initial probing).
      
      Many assertions are still assertions and are housed in the Assertions
      module, but they should be converted as they get touched. Similarly,
      since we're touching all the tests/specs, we convert all the hashes from
      1.8 syntax to 1.9 syntax.
      Jon Yurek committed
  18. 31 Jan, 2014 1 commit
    • Raise unless content type or name validation · 38c51d6f
      It is now a requirement for attachments to do one of three things:
        1. Have a content_type validation (e.g. "image/*")
        2. Have a filename validation (e.g. *.png, *.gif)
        3. Explicitly *not* have one of those validations
      
      The intent is to make the default more secure, and you have to
      explicitly reject the security of a validation in order to not have one.
      Jon Yurek committed
  19. 31 Jul, 2013 2 commits
  20. 30 Jul, 2013 1 commit
  21. 23 Jul, 2013 1 commit
  22. 14 Jun, 2013 2 commits
  23. 24 May, 2013 2 commits
  24. 15 Jun, 2012 3 commits
  25. 31 May, 2012 2 commits
  26. 24 Apr, 2012 1 commit
  27. 04 Apr, 2012 1 commit
  28. 30 Mar, 2012 3 commits