pyramid - Pyramid web framework (fork of https://github.com/Pylons/pyramid).

Age	Commit message (Collapse)	Author
2016-04-16	Merge pull request #2506 from stevepiercy/master	Steve Piercy
	replace nose with pytest, clean up
2016-04-16	Merge pull request #2507 from stevepiercy/master	Steve Piercy
	replace ps1con with doscon for lexer and syntax highlighting
2016-04-16	Merge pull request #2508 from stevepiercy/1.7-branch	Steve Piercy
	Merge pull request #2505 from stevepiercy/docs/quick-tour-gotcher-nose
2016-04-16	Merge pull request #2505 from stevepiercy/docs/quick-tour-gotcher-nose	Steve Piercy
	Docs/quick tour gotcher nose
2016-04-16	prep 1.7a1	Michael Merickel

2016-04-16	drop py27-only features at least temporarily	Michael Merickel
	call me nostalgic
2016-04-16	add docs and backward incompatibility notices for #2501	Michael Merickel

2016-04-16	fix format string to work on py26	Michael Merickel

2016-04-16	Merge pull request #2501 from dstufft/check-origin-csrf	Michael Merickel
	In addition to CSRF token, verify the origin too
2016-04-16	In addition to CSRF token, verify the origin too	Donald Stufft
	Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes.
2016-04-15	Update CHANGES/whatsnew-1.7 for updated require_csrf	Bert JW Regeer

2016-04-15	Merge pull request #2500 from dstufft/improve-csrf	Bert JW Regeer
	Increase the protection provided by the CSRF checks
2016-04-15	Have Automatic CSRF on all unsafe HTTP methods	Donald Stufft
	Instead of only protecting against unsafe POST requests, have the automatic CSRF protect on all methods which are not defined as "safe" by RFC2616.
2016-04-15	Only Accept CSRF Tokens in headers or POST bodies	Donald Stufft
	Previously `check_csrf_token` would allow passing in a CSRF token in through a the URL of a request. However this is a security issue because a CSRF token must not be allowed to leak, and URLs regularly get copy/pasted or otherwise end up leaking to the outside world.
2016-04-15	link to router chapter	Michael Merickel

2016-04-15	link to alchemy pull request	Michael Merickel

2016-04-15	Merge pull request #2499 from stevepiercy/master	Steve Piercy
	remove 2.6 and 3.2, minor cleanup
2016-04-15	remove 2.6 and 3.2, minor cleanup	Steve Piercy

2016-04-14	Merge pull request #2498 from stevepiercy/master	Steve Piercy
	editorial review and approval
2016-04-14	Merge remote-tracking branch 'upstream/master'	Steve Piercy
	Conflicts: docs/whatsnew-1.7.rst
2016-04-14	editorial review and approval	Steve Piercy

2016-04-15	link to HTTPException class	Michael Merickel

2016-04-15	snapshot the 1.6 changes into history	Michael Merickel

2016-04-15	1.7, not 1.6	Michael Merickel

2016-04-15	link the whatsnew-1.7	Michael Merickel

2016-04-15	first cut at whatsnew-1.7	Michael Merickel

2016-04-15	curate the changelog	Michael Merickel

2016-04-14	Merge pull request #2496 from Pylons/update/hashalg_authtkt	Michael Merickel
	Switch to sha512 in AuthTktAuthenticationPolicy
2016-04-14	Remove TODO item	Bert JW Regeer

2016-04-14	Update documentation	Bert JW Regeer

2016-04-14	Add CHANGES.txt entry, and re-organise	Bert JW Regeer

2016-04-14	Remove unused import	Bert JW Regeer

2016-04-14	Switch to sha512 in AuthTktAuthenticationPolicy	Bert JW Regeer

2016-04-14	Merge pull request #2494 from arianmaykon/fix-issue-2493	Steve Piercy
	Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths
2016-04-14	Merge pull request #2489 from Pylons/feature/json_exceptions	Michael Merickel
	Feature: JSON exceptions
2016-04-14	Merge branch 'master' into feature/json_exceptions	Bert JW Regeer

2016-04-14	Update CHANGES	Bert JW Regeer

2016-04-14	add a note in the todo about python 3.3	Michael Merickel

2016-04-14	Merge pull request #2491 from stevepiercy/feature.py33.deprecate	Michael Merickel
	- Deprecated support for Python 3.3. See #2477
2016-04-14	Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths, also on Step 19 - ↵	Arian Maykon de Araújo Diógenes
	Database
2016-04-14	We don't use default_match, so remove it	Bert JW Regeer

2016-04-14	Update test to verify the default is text/html	Bert JW Regeer

2016-04-14	Make text/html the preferred server return	Bert JW Regeer
	This matches the original code whereby it would return an HTML page if you sent an Accept header of /.
2016-04-13	update deprecation log entry	Steve Piercy

2016-04-13	Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths	Arian Maykon de Araújo Diógenes

2016-04-13	Merge pull request #2490 from stevepiercy/master	Steve Piercy
	- update Pyramid Request Processing Diagram.
2016-04-13	- nudge `BeforeTraversal`	Steve Piercy

2016-04-13	- Deprecated support for Python 3.3. See #2477	Steve Piercy

2016-04-13	- update Pyramid Request Processing Diagram.	Steve Piercy
	- Closes #2473. - See also #2413 and #2469.
2016-04-12	For / case, MIMEAccept picks first server offer	Bert JW Regeer
	This means that to make "text/plain" the default, we need to specifically make it the first thing we offer. For anything else, since the server offers are all weighted equally, the client order should be accepted.