summaryrefslogtreecommitdiff
path: root/docs/narr
AgeCommit message (Collapse)Author
2016-06-09fix up headline a bitcewing
2016-06-09improve section title a bit morecewing
2016-06-09emphasize that the views are yourscewing
2016-06-09re-write the views sectioncewing
2016-06-09updated extensions sectioncewing
2016-06-09update the debugging sectionscewing
2016-06-09update the dynamic development sectioncewing
2016-06-09fix static assets sectioncewing
2016-06-09fix generated urls sectioncewing
2016-06-09fix decorator configuration sectioncewing
2016-06-09make title an actioncewing
2016-06-09rewrite what makes pyramid uniquecewing
2016-06-09simplify the statement of principlescewing
2016-06-09clarify the framework sidebarcewing
2016-06-09be assertive in claimscewing
2016-06-09grammar, spelling, wrapping fixSteve Piercy
2016-06-08Adding a warning discouraging use of __acl__ properties attributesJulien MIOTTE
2016-05-09use new trypyramid.com page. whee!Steve Piercy
2016-05-07update narr/project.rst with py.test and coverage defaultsSteve Piercy
2016-05-07wordsmith py.test and coverage configurationSteve Piercy
2016-05-06doc: Update documentation for using ``py.test [--cov]`` for newly created ↵Vincent Férotin
project with scaffolds.
2016-04-25fix explanation of require_csrfMichael Merickel
2016-04-24add sphinx doctests for hooks.rstSteve Piercy
2016-04-24Allow Sphinx doctests to run and pass with `make doctest ↵Steve Piercy
SPHINXBUILD=$VENV/bin/sphinx-build`. - TODO: two tests in `docs/narr/hooks.rst`
2016-04-24update bad linkSteve Piercy
2016-04-23Fix all the stinky linkie rot via `make linkcheck ↵Steve Piercy
SPHINXBUILD=$VENV/bin/sphinx-build`, but don't bother with HISTORY.txt or whatsnew-xx
2016-04-19replace pyramid.require_default_csrf setting with ↵Michael Merickel
config.set_default_csrf_options
2016-04-17better explain view deriver optionsChris McDonough
2016-04-16Merge pull request #2507 from stevepiercy/masterSteve Piercy
replace ps1con with doscon for lexer and syntax highlighting
2016-04-16In addition to CSRF token, verify the origin tooDonald Stufft
Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes.
2016-04-15Have Automatic CSRF on all unsafe HTTP methodsDonald Stufft
Instead of only protecting against unsafe POST requests, have the automatic CSRF protect on all methods which are not defined as "safe" by RFC2616.
2016-04-15Only Accept CSRF Tokens in headers or POST bodiesDonald Stufft
Previously `check_csrf_token` would allow passing in a CSRF token in through a the URL of a request. However this is a security issue because a CSRF token must not be allowed to leak, and URLs regularly get copy/pasted or otherwise end up leaking to the outside world.
2016-04-12Merge branch 'master' into feature/require-csrfMichael Merickel
2016-04-12Merge branch 'master' into feature/BeforeTraversalBert JW Regeer
2016-04-12Remove note about -Wd flagBert JW Regeer
Since we no longer support Python 2.6, it becomes a requirement for all our supported Python versions, and thus the note is no longer required.
2016-04-12Update introduction to testingBert JW Regeer
It mentions that we use Jenkins, but our Travis is more open, and used for all commits, so add a reference to Travis as well. Also, remove Python 2.6 reference here.
2016-04-12Replace Python 2.6 with 2.7Bert JW Regeer
2016-04-12- zap easy_install stragglerSteve Piercy
2016-04-12one does not simply "create a virtualenv". one should "create a virtual ↵Steve Piercy
environment". - Fixes #2483
2016-04-12update testing.rstSteve Piercy
- replace nose with py.test - use pip - use literalinclude of MyProject/setup.py instead of copy-pasta
2016-04-12- use an environment variable and venv. See ↵Steve Piercy
https://github.com/Pylons/pyramid/pull/2468#discussion_r59311019 - rename stanza from `testing_extras` to `tests_require` - switch from nose to pytest
2016-04-12- replace `python -m` with `python3 -m`Steve Piercy
2016-04-12- replace `pyvenv` with `python3 -m venv`Steve Piercy
2016-04-12- removed "now" per ↵Steve Piercy
https://github.com/Pylons/pyramid/pull/2468#discussion_r59310317
2016-04-12- fix readme in narr/MyProject (used in project.rst and testing.rst)Steve Piercy
2016-04-11Merge branch 'master' into docs/easy-install-to-pip.2104Michael Merickel
2016-04-11remove theme.min.css, it serves no purposeMichael Merickel
2016-04-11- upgrade `BeforeTraversal` event in router.rstSteve Piercy
2016-04-11- add trailing line endingSteve Piercy
2016-04-11- update narr/project.rst to use pip instead of setup.pySteve Piercy
- update starter scaffold tests and setup.py (used in `narr/project.rst` and `narr/testing.rst`) - update links to documentation