Sam Stephenson fea6bc1a21 prototype: Automatically strip security delimiter comments from JSON strings before evaling them. The default delimiter is '/*-secure- ... */' or you can specify your own with the Prototype.JSONFilter regular expression. If you wrap your JSON response bodies in this delimiter on the server side, rogue external sites can't hijack potentially sensitive data via <script> tags. Closes #7910.		2007-04-24 03:31:14 +00:00
..
fixtures	prototype: Add Form.Methods.request as a convenience method for serializing and submitting a form via Ajax.Request to the URL in the form's action attribute.	2007-01-28 07:30:04 +00:00
ajax.html	prototype: Reorganize the source tree.	2007-01-18 22:24:27 +00:00
array.html	prototype: Add extra spacing so Array#toJSON and Hash#toJSON generate YAML-loadable JSON. Closes #7883.	2007-04-24 02:50:52 +00:00
base.html	prototype: Add extra spacing so Array#toJSON and Hash#toJSON generate YAML-loadable JSON. Closes #7883.	2007-04-24 02:50:52 +00:00
dom.html	Trivial dom.html cleanups, dont do the hidden element getDimensions test for now	2007-04-18 16:30:40 +00:00
element_mixins.html	prototype: Reorganize the source tree.	2007-01-18 22:24:27 +00:00
enumerable.html	prototype: Remove support for "throw $continue" in Enumerable. Use "return" instead.	2007-01-18 22:59:23 +00:00
form.html	Fix Form.request for forms containing an input element with name="action". Closes #8063.	2007-04-17 17:41:22 +00:00
hash.html	prototype: Add extra spacing so Array#toJSON and Hash#toJSON generate YAML-loadable JSON. Closes #7883.	2007-04-24 02:50:52 +00:00
position.html	prototype: Reorganize the source tree.	2007-01-18 22:24:27 +00:00
range.html	prototype: Reorganize the source tree.	2007-01-18 22:24:27 +00:00
selector.html	Fix Selector issues with :not and attribute selector double quotes, fixes #7901. [Andrew Dupont]	2007-03-27 18:20:35 +00:00
string.html	prototype: Automatically strip security delimiter comments from JSON strings before evaling them. The default delimiter is '/*-secure- ... */' or you can specify your own with the Prototype.JSONFilter regular expression. If you wrap your JSON response bodies in this delimiter on the server side, rogue external sites can't hijack potentially sensitive data via <script> tags. Closes #7910.	2007-04-24 03:31:14 +00:00
unit_tests.html	Make Hash.toQueryString serialize undefined values. Ensure consistency with String.prototype.toQueryParams. Closes #7806. [Mislav Marohnic]	2007-03-27 20:55:56 +00:00