diff options
| author | Michael Merickel <michael@merickel.org> | 2015-03-05 10:27:12 -0600 |
|---|---|---|
| committer | Michael Merickel <michael@merickel.org> | 2015-03-05 10:27:12 -0600 |
| commit | 17997b33190056919395bda336f531a3b8bce057 (patch) | |
| tree | 7d4d08797c36d3579c373418f754a084fd6123b0 /CHANGES.txt | |
| parent | af810c54fa9829096085f0ca601030c4fb74b5c7 (diff) | |
| parent | ec46918c86d4b1e82a1555ed488d453c65663549 (diff) | |
| download | pyramid-17997b33190056919395bda336f531a3b8bce057.tar.gz pyramid-17997b33190056919395bda336f531a3b8bce057.tar.bz2 pyramid-17997b33190056919395bda336f531a3b8bce057.zip | |
Merge pull request #1575 from Pylons/fix.shared-view-renderer
clone a new RendererHelper per request
Diffstat (limited to 'CHANGES.txt')
| -rw-r--r-- | CHANGES.txt | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/CHANGES.txt b/CHANGES.txt index 9b10c0831..b7a8f4764 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -169,6 +169,13 @@ Bug Fixes - Prevent "parameters to load are deprecated" ``DeprecationWarning`` from setuptools>=11.3. See https://github.com/Pylons/pyramid/pull/1541 +- Avoiding sharing the ``IRenderer`` objects across threads when attached to + a view using the `renderer=` argument. These renderers were instantiated + at time of first render and shared between requests, causing potentially + subtle effects like `pyramid.reload_templates = true` failing to work + in `pyramid_mako`. See https://github.com/Pylons/pyramid/pull/1575 + and https://github.com/Pylons/pyramid/issues/1268 + - Avoiding timing attacks against CSRF tokens. See https://github.com/Pylons/pyramid/pull/1574 |