| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-06-09 | fix up headline a bit | cewing | |
| 2016-06-09 | improve section title a bit more | cewing | |
| 2016-06-09 | emphasize that the views are yours | cewing | |
| 2016-06-09 | re-write the views section | cewing | |
| 2016-06-09 | updated extensions section | cewing | |
| 2016-06-09 | update the debugging sections | cewing | |
| 2016-06-09 | update the dynamic development section | cewing | |
| 2016-06-09 | fix static assets section | cewing | |
| 2016-06-09 | fix generated urls section | cewing | |
| 2016-06-09 | fix decorator configuration section | cewing | |
| 2016-06-09 | make title an action | cewing | |
| 2016-06-09 | rewrite what makes pyramid unique | cewing | |
| 2016-06-09 | simplify the statement of principles | cewing | |
| 2016-06-09 | clarify the framework sidebar | cewing | |
| 2016-06-09 | be assertive in claims | cewing | |
| 2016-06-09 | grammar, spelling, wrapping fix | Steve Piercy | |
| 2016-06-08 | Adding a warning discouraging use of __acl__ properties attributes | Julien MIOTTE | |
| 2016-05-09 | use new trypyramid.com page. whee! | Steve Piercy | |
| 2016-05-07 | update narr/project.rst with py.test and coverage defaults | Steve Piercy | |
| 2016-05-07 | wordsmith py.test and coverage configuration | Steve Piercy | |
| 2016-05-06 | doc: Update documentation for using ``py.test [--cov]`` for newly created ↵ | Vincent Férotin | |
| project with scaffolds. | |||
| 2016-04-25 | fix explanation of require_csrf | Michael Merickel | |
| 2016-04-24 | add sphinx doctests for hooks.rst | Steve Piercy | |
| 2016-04-24 | Allow Sphinx doctests to run and pass with `make doctest ↵ | Steve Piercy | |
| SPHINXBUILD=$VENV/bin/sphinx-build`. - TODO: two tests in `docs/narr/hooks.rst` | |||
| 2016-04-24 | update bad link | Steve Piercy | |
| 2016-04-23 | Fix all the stinky linkie rot via `make linkcheck ↵ | Steve Piercy | |
| SPHINXBUILD=$VENV/bin/sphinx-build`, but don't bother with HISTORY.txt or whatsnew-xx | |||
| 2016-04-19 | replace pyramid.require_default_csrf setting with ↵ | Michael Merickel | |
| config.set_default_csrf_options | |||
| 2016-04-17 | better explain view deriver options | Chris McDonough | |
| 2016-04-16 | Merge pull request #2507 from stevepiercy/master | Steve Piercy | |
| replace ps1con with doscon for lexer and syntax highlighting | |||
| 2016-04-16 | In addition to CSRF token, verify the origin too | Donald Stufft | |
| Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes. | |||
| 2016-04-15 | Have Automatic CSRF on all unsafe HTTP methods | Donald Stufft | |
| Instead of only protecting against unsafe POST requests, have the automatic CSRF protect on all methods which are not defined as "safe" by RFC2616. | |||
| 2016-04-15 | Only Accept CSRF Tokens in headers or POST bodies | Donald Stufft | |
| Previously `check_csrf_token` would allow passing in a CSRF token in through a the URL of a request. However this is a security issue because a CSRF token must not be allowed to leak, and URLs regularly get copy/pasted or otherwise end up leaking to the outside world. | |||
| 2016-04-12 | Merge branch 'master' into feature/require-csrf | Michael Merickel | |
| 2016-04-12 | Merge branch 'master' into feature/BeforeTraversal | Bert JW Regeer | |
| 2016-04-12 | Remove note about -Wd flag | Bert JW Regeer | |
| Since we no longer support Python 2.6, it becomes a requirement for all our supported Python versions, and thus the note is no longer required. | |||
| 2016-04-12 | Update introduction to testing | Bert JW Regeer | |
| It mentions that we use Jenkins, but our Travis is more open, and used for all commits, so add a reference to Travis as well. Also, remove Python 2.6 reference here. | |||
| 2016-04-12 | Replace Python 2.6 with 2.7 | Bert JW Regeer | |
| 2016-04-12 | - zap easy_install straggler | Steve Piercy | |
| 2016-04-12 | one does not simply "create a virtualenv". one should "create a virtual ↵ | Steve Piercy | |
| environment". - Fixes #2483 | |||
| 2016-04-12 | update testing.rst | Steve Piercy | |
| - replace nose with py.test - use pip - use literalinclude of MyProject/setup.py instead of copy-pasta | |||
| 2016-04-12 | - use an environment variable and venv. See ↵ | Steve Piercy | |
| https://github.com/Pylons/pyramid/pull/2468#discussion_r59311019 - rename stanza from `testing_extras` to `tests_require` - switch from nose to pytest | |||
| 2016-04-12 | - replace `python -m` with `python3 -m` | Steve Piercy | |
| 2016-04-12 | - replace `pyvenv` with `python3 -m venv` | Steve Piercy | |
| 2016-04-12 | - removed "now" per ↵ | Steve Piercy | |
| https://github.com/Pylons/pyramid/pull/2468#discussion_r59310317 | |||
| 2016-04-12 | - fix readme in narr/MyProject (used in project.rst and testing.rst) | Steve Piercy | |
| 2016-04-11 | Merge branch 'master' into docs/easy-install-to-pip.2104 | Michael Merickel | |
| 2016-04-11 | remove theme.min.css, it serves no purpose | Michael Merickel | |
| 2016-04-11 | - upgrade `BeforeTraversal` event in router.rst | Steve Piercy | |
| 2016-04-11 | - add trailing line ending | Steve Piercy | |
| 2016-04-11 | - update narr/project.rst to use pip instead of setup.py | Steve Piercy | |
| - update starter scaffold tests and setup.py (used in `narr/project.rst` and `narr/testing.rst`) - update links to documentation | |||
