summaryrefslogtreecommitdiff
path: root/docs/api/session.rst
AgeCommit message (Collapse)Author
2016-04-16In addition to CSRF token, verify the origin tooDonald Stufft
Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes.
2015-11-23expose the PickleSerializerMichael Merickel
2013-10-19update the docsMichael Merickel
2012-09-19add check_csrf convenience functionChris McDonough
2010-11-02Insecure -> UnencryptedChris McDonough
2010-10-29- New API methods in ``pyramid.session``: ``signed_serialize`` andChris McDonough
``signed_deserialize``.
2010-10-28sessioning docsChris McDonough