| Age | Commit message (Expand) | Author |
| 2016-04-16 | In addition to CSRF token, verify the origin too | Donald Stufft |
| 2016-04-15 | Have Automatic CSRF on all unsafe HTTP methods | Donald Stufft |
| 2016-04-15 | Only Accept CSRF Tokens in headers or POST bodies | Donald Stufft |
| 2016-04-10 | cleanup some references in the docs | Michael Merickel |
| 2016-04-10 | deprecate the check_csrf predicate | Michael Merickel |
| 2016-04-10 | rewrite csrf checks to support a global setting to turn it on | Michael Merickel |
| 2015-10-16 | minor grammar, rewrap 79 cols | Steve Piercy |
| 2015-05-31 | - update testing and templating remarks | Steve Piercy |
| 2015-05-30 | Added notes on check_csrf view predicate. Also it is an add_view parameter, n... | Kiss György |
| 2015-01-07 | Provide a ref to check_csrf_token | Pavlo Kapyshin |
| 2015-01-07 | Fix rendering | Pavlo Kapyshin |
| 2014-02-10 | - Update list of session packages | Steve Piercy |
| 2013-10-19 | Merge branch 'master' into feature.signed-cookie-session | Michael Merickel |
| 2013-10-19 | update the docs | Michael Merickel |
| 2013-10-17 | fix documentation for csrf checking | Michael Merickel |
| 2013-10-02 | fix the docs build and get rid of stray references to Beaker | Chris McDonough |
| 2013-10-02 | Merge pull request #1138 from kpinc/doc_session | Chris McDonough |
| 2013-10-02 | Docs: sessions.rst: Sessions only work when the client cooperates. | Karl O. Pinc |
| 2013-10-02 | - Removed mention of ``pyramid_beaker`` from docs. Beaker is no longer | Chris McDonough |
| 2013-10-02 | Docs: sessions.rst: Explain example. | Karl O. Pinc |
| 2013-08-13 | Merge remote-tracking branch 'origin/master' into docs.gettingstarted | Paul Everitt |
| 2013-08-12 | All wrapped up, pre-merge. | Paul Everitt |
| 2013-08-06 | add redis session mention | Chris McDonough |
| 2013-06-04 | Add examples to narrative CSRF docs | Luke Cyca |
| 2013-06-02 | Edited narrative docs about CSRF | Luke Cyca |
| 2013-03-23 | no need to qualify Python interactive sessions | Tshepang Lekhonkhobe |
| 2013-01-29 | pluralize | Tshepang Lekhonkhobe |
| 2012-11-02 | explain csrf token stealing potentiality | Chris McDonough |
| 2012-06-19 | point at pyramid_beaker docs rather than its github page | Chris McDonough |
| 2011-07-20 | add more index markers | Chris McDonough |
| 2011-07-09 | Old sentence was grammatically incorrect, literally meant that the URL or but... | ejo |
| 2011-01-27 | module name contractions | Chris McDonough |
| 2011-01-08 | redocument relationship between get_csrf_token and new_csrf_token | Chris McDonough |
| 2011-01-06 | remove comment, it's more or less answered | Casey Duncan |
| 2011-01-06 | clarify by promoting parenthetical, add comment requesting some advice | Casey Duncan |
| 2011-01-06 | clarify | Casey Duncan |
| 2011-01-05 | add parens to method references | Casey Duncan |
| 2011-01-05 | forgot an important session feature in summary | Casey Duncan |
| 2011-01-05 | add summary paragraph to tie things together better | Casey Duncan |
| 2011-01-05 | incorporate return type and queue semantics into same paragraph | Casey Duncan |
| 2011-01-05 | clarify behavior of allow_duplicate | Casey Duncan |
| 2011-01-05 | remove redundant sentence | Casey Duncan |
| 2011-01-05 | add parens to method references | Casey Duncan |
| 2011-01-05 | don't need linenos for one line | Casey Duncan |
| 2011-01-05 | combine flash and csrf into sessions chapt | Casey Duncan |
| 2011-01-05 | reduce strength of assertion | Casey Duncan |
| 2011-01-05 | slight reword for better flow | Casey Duncan |
| 2010-12-22 | - Added flash messaging, as described in the "Flash Messaging" narrative | Chris McDonough |
| 2010-12-12 | fix sentence spacing | Casey Duncan |
| 2010-12-12 | clarify paragraph about when to call ISession.changed, uh huh, yeah | Casey Duncan |