| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-04-15 | Only Accept CSRF Tokens in headers or POST bodies | Donald Stufft | |
| Previously `check_csrf_token` would allow passing in a CSRF token in through a the URL of a request. However this is a security issue because a CSRF token must not be allowed to leak, and URLs regularly get copy/pasted or otherwise end up leaking to the outside world. | |||
| 2016-04-15 | link to router chapter | Michael Merickel | |
| 2016-04-15 | link to alchemy pull request | Michael Merickel | |
| 2016-04-15 | Merge pull request #2499 from stevepiercy/master | Steve Piercy | |
| remove 2.6 and 3.2, minor cleanup | |||
| 2016-04-15 | rewrap 79-col | Steve Piercy | |
| 2016-04-15 | remove 2.6 and 3.2, minor cleanup | Steve Piercy | |
| 2016-04-14 | Merge pull request #2498 from stevepiercy/master | Steve Piercy | |
| editorial review and approval | |||
| 2016-04-14 | Merge remote-tracking branch 'upstream/master' | Steve Piercy | |
| Conflicts: docs/whatsnew-1.7.rst | |||
| 2016-04-14 | editorial review and approval | Steve Piercy | |
| 2016-04-15 | link to HTTPException class | Michael Merickel | |
| 2016-04-15 | snapshot the 1.6 changes into history | Michael Merickel | |
| 2016-04-15 | 1.7, not 1.6 | Michael Merickel | |
| 2016-04-15 | link the whatsnew-1.7 | Michael Merickel | |
| 2016-04-15 | first cut at whatsnew-1.7 | Michael Merickel | |
| 2016-04-15 | curate the changelog | Michael Merickel | |
| 2016-04-14 | Merge pull request #2496 from Pylons/update/hashalg_authtkt | Michael Merickel | |
| Switch to sha512 in AuthTktAuthenticationPolicy | |||
| 2016-04-14 | Remove TODO item | Bert JW Regeer | |
| 2016-04-14 | Update documentation | Bert JW Regeer | |
| 2016-04-14 | Add CHANGES.txt entry, and re-organise | Bert JW Regeer | |
| 2016-04-14 | Remove unused import | Bert JW Regeer | |
| 2016-04-14 | Switch to sha512 in AuthTktAuthenticationPolicy | Bert JW Regeer | |
| 2016-04-14 | Merge pull request #2494 from arianmaykon/fix-issue-2493 | Steve Piercy | |
| Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths | |||
| 2016-04-14 | Merge pull request #2489 from Pylons/feature/json_exceptions | Michael Merickel | |
| Feature: JSON exceptions | |||
| 2016-04-14 | Merge branch 'master' into feature/json_exceptions | Bert JW Regeer | |
| 2016-04-14 | Update CHANGES | Bert JW Regeer | |
| 2016-04-14 | add a note in the todo about python 3.3 | Michael Merickel | |
| 2016-04-14 | Merge pull request #2491 from stevepiercy/feature.py33.deprecate | Michael Merickel | |
| - Deprecated support for Python 3.3. See #2477 | |||
| 2016-04-14 | Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths, also on Step 19 - ↵ | Arian Maykon de Araújo Diógenes | |
| Database | |||
| 2016-04-14 | We don't use default_match, so remove it | Bert JW Regeer | |
| 2016-04-14 | Update test to verify the default is text/html | Bert JW Regeer | |
| 2016-04-14 | Make text/html the preferred server return | Bert JW Regeer | |
| This matches the original code whereby it would return an HTML page if you sent an Accept header of */*. | |||
| 2016-04-13 | update deprecation log entry | Steve Piercy | |
| 2016-04-13 | Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths | Arian Maykon de Araújo Diógenes | |
| 2016-04-13 | Merge pull request #2490 from stevepiercy/master | Steve Piercy | |
| - update Pyramid Request Processing Diagram. | |||
| 2016-04-13 | - nudge `BeforeTraversal` | Steve Piercy | |
| 2016-04-13 | - Deprecated support for Python 3.3. See #2477 | Steve Piercy | |
| 2016-04-13 | - update Pyramid Request Processing Diagram. | Steve Piercy | |
| - Closes #2473. - See also #2413 and #2469. | |||
| 2016-04-12 | For */* case, MIMEAccept picks first server offer | Bert JW Regeer | |
| This means that to make "text/plain" the default, we need to specifically make it the first thing we offer. For anything else, since the server offers are all weighted equally, the client order should be accepted. | |||
| 2016-04-12 | PEP8 | Bert JW Regeer | |
| 2016-04-12 | Merge pull request #2413 from mmerickel/feature/require-csrf | Bert JW Regeer | |
| require_csrf to replace check_csrf | |||
| 2016-04-12 | We don't need to explicitly set charset for text/* | Bert JW Regeer | |
| application/json however doesn't have a charset, so we just specify that as UTF-8 for the purpose of encoding the bytes. | |||
| 2016-04-12 | Test that JSON responses are actually JSON | Bert JW Regeer | |
| We also test out the custom formatter that allows the user to change how the JSON is formatted for the exception. | |||
| 2016-04-12 | Add new tests to verify we get what we ask for | Bert JW Regeer | |
| This simply makes sure we get back the appropriate Content-Type based upon our Accept header. | |||
| 2016-04-12 | Update tests to verif Content-Type header | Bert JW Regeer | |
| 2016-04-12 | Explicit set Accept header to text/html | Bert JW Regeer | |
| The default is now text/plain, so explicitly set the accept header for what we want to accept. | |||
| 2016-04-12 | Use MIMEAccept not Accept | Bert JW Regeer | |
| Accept doesn't understand the notation of major/minor masks. | |||
| 2016-04-12 | Using WebOb's acceptparse find best mimetype to use | Bert JW Regeer | |
| We default to text/plain. | |||
| 2016-04-12 | Merge branch 'master' into feature/require-csrf | Michael Merickel | |
| 2016-04-12 | Merge pull request #2469 from Pylons/feature/BeforeTraversal | Michael Merickel | |
| Feature: BeforeTraversal | |||
| 2016-04-12 | Add CHANGES for BeforeTraversal | Bert JW Regeer | |
 |
index : pyramid | |
| Pyramid web framework (fork of https://github.com/Pylons/pyramid). | Daniel |
| summaryrefslogtreecommitdiff |