summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2017-05-01fix url syntax yet againMichael Merickel
2017-05-01fix url syntaxMichael Merickel
2017-05-01prep 1.9a1Michael Merickel
2017-05-01add the license file to the wheel's dist-infoMichael Merickel
2017-05-01typoMichael Merickel
2017-05-01line length fixes in whatsnew-1.9Michael Merickel
2017-05-01add changelog for #2993Michael Merickel
2017-05-01fix rst syntaxMichael Merickel
2017-05-01link to plaster_pastedeployMichael Merickel
2017-05-01link to 1.9-branch in contributingMichael Merickel
2017-05-01switch readme to 1.9-branch badgesMichael Merickel
2017-05-01really add whatsnew-1.9Michael Merickel
2017-05-01update changelog and add whatsnew-1.9Michael Merickel
2017-04-30improve flow of changes for configurator threadlocalsMichael Merickel
2017-04-30move csrf changes to the "major features" sectionMichael Merickel
2017-04-30improve csrf changelog docsMichael Merickel
2017-04-30Merge pull request #2985 from mmerickel/plasterMichael Merickel
migrate pyramid to use plaster
2017-04-30Merge pull request #3020 from stevepiercy/masterSteve Piercy
standardize "non-standard"
2017-04-30standardize "non-standard"Steve Piercy
2017-04-30Merge pull request #3019 from mmerickel/fixes/csrf-decoupling-2854Michael Merickel
Decouple CSRF protection from the session machinery (replaced #2854)
2017-04-30Merge branch 'master' into pr/2854Michael Merickel
2017-04-30restore the ``ICSRFStoragePolicy.check_csrf_token`` apiMichael Merickel
2017-04-29add changelog for #2874Michael Merickel
2017-04-29Merge pull request #2874 from mmerickel/config-context-managerMichael Merickel
turn the Configurator into a context manager
2017-04-29final cleanup of csrf decoupling in #2854Michael Merickel
- Renamed `SessionCSRFStoragePolicy` to `LegacySessionCSRFStoragePolicy` for the version that uses the legacy `ISession.get_csrf_token` and `ISession.new_csrf_token` apis and set that as the default. - Added new `SessionCSRFStoragePolicy` that stores data in the session similar to how the `SessionAuthenticationPolicy` works. - `CookieCSRFStoragePolicy` did not properly return the newly generated token from `get_csrf_token` after calling `new_csrf_token`. It needed to cache the new value since the response callback does not affect the current request. - `CookieCSRFStoragePolicy` was not forwarding the `domain` value to the `CookieProfile` causing that setting to be ignored. - Removed `check_csrf_token` from the `ICSRFStoragePolicy` interface to simplify implementations of storage policies. - Added an introspectable item for the configured storage policy so that it appears on the debugtoolbar. - Added a change note on `ISession` that it no longer required the csrf methods. - Leave deprecated shims in ``pyramid.session`` for ``check_csrf_origin`` and ``check_csrf_token``.
2017-04-28Merge pull request #3017 from stevepiercy/masterSteve Piercy
update cookiecutter README.txt throughout docs
2017-04-28update cookiecutter README.txt throughout docsSteve Piercy
- https://github.com/Pylons/pyramid-cookiecutter-starter/pull/28 - https://github.com/Pylons/pyramid-cookiecutter-zodb/pull/7 - https://github.com/Pylons/pyramid-cookiecutter-alchemy/pull/8
2017-04-27Merge pull request #3016 from Natim/fix-rest-exampleBert JW Regeer
Fix underlined title.
2017-04-27Fix underlined title.Rémy HUBSCHER
2017-04-26Move CSRF storage policy registration out of PHASE_1 config and simplify ↵Matthew Wilkes
tests given previous improvements to CSRF.
2017-04-26Apply drafting changes to documentation.Matthew Wilkes
2017-04-24Merge pull request #3012 from stevepiercy/masterSteve Piercy
update user prompt for cookiecutter repo_name
2017-04-23update user prompt for cookiecutter repo_nameSteve Piercy
- refs: https://github.com/Pylons/pyramid-cookiecutter-starter/pull/27#issuecomment-296507821
2017-04-19Merge pull request #2995 from jeremy886/masterMichael Merickel
change cgi.escape to pyramid compat.escape
2017-04-19Merge pull request #3007 from jeremy886/patch-2Michael Merickel
Update CONTRIBUTORS.txt
2017-04-19Update CONTRIBUTORS.txtJeremy Chen
2017-04-17Merge pull request #3004 from stevepiercy/masterSteve Piercy
fix rst syntax for index entries
2017-04-17fix rst syntax for index entriesSteve Piercy
2017-04-16Merge pull request #3001 from whiteroses/fix-typoSteve Piercy
Fix typo in comment.
2017-04-16Fix typo in comment.Ira Lun
2017-04-16Add a new contributor.Aleph Melo
2017-04-16Fix #2927 - Change to listen = localhost:6543.Aleph Melo
2017-04-15Merge pull request #2996 from whiteroses/fix-typoSteve Piercy
Fix a typo in a comment.
2017-04-15Fix a typo in a comment.Ira Lun
2017-04-15Update default.pyJeremy Chen
2017-04-15Update default.pyJeremy Chen
2017-04-15Update default.pyJeremy Chen
2017-04-15Update default.pyJeremy Chen
2017-04-15Merge remote-tracking branch 'Pylons/master'Jeremy Chen
2017-04-12add version tags on set_default_csrf_optionsMichael Merickel