Sam Stephenson
|
4174060d5b
|
prototype: Don't call evalResponse() when an Ajax response has no Content-type header. Closes #7827.
|
2007-04-24 03:34:30 +00:00 |
|
Sam Stephenson
|
fea6bc1a21
|
prototype: Automatically strip security delimiter comments from JSON strings before evaling them. The default delimiter is '/*-secure- ... */' or you can specify your own with the Prototype.JSONFilter regular expression. If you wrap your JSON response bodies in this delimiter on the server side, rogue external sites can't hijack potentially sensitive data via <script> tags. Closes #7910.
|
2007-04-24 03:31:14 +00:00 |
|
Sam Stephenson
|
225bf0e6ec
|
prototype: remove redundant conditional
|
2007-01-28 07:34:43 +00:00 |
|
Sam Stephenson
|
343eae8bfc
|
prototype: Add Form.Methods.request as a convenience method for serializing and submitting a form via Ajax.Request to the URL in the form's action attribute.
|
2007-01-28 07:30:04 +00:00 |
|
Sam Stephenson
|
5345085b33
|
prototype: Add String.prototype.startsWith, String.prototype.endsWith, and String.prototype.include. Closes #7075.
|
2007-01-27 18:45:54 +00:00 |
|
Sam Stephenson
|
bb4d189b37
|
prototype: Reorganize the source tree.
|
2007-01-18 22:24:27 +00:00 |