pyramid - Pyramid web framework (fork of https://github.com/Pylons/pyramid).

Age	Commit message (Collapse)	Author
2016-04-16	Merge pull request #2505 from stevepiercy/docs/quick-tour-gotcher-nose	Steve Piercy
	Docs/quick tour gotcher nose
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup authorization.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup authentication.rst
2016-04-16	add docs and backward incompatibility notices for #2501	Michael Merickel

2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup databases.rst
2016-04-16	In addition to CSRF token, verify the origin too	Donald Stufft
	Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes.
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup forms.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup sessions.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup logging.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup more_view_classes.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup json.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup static_assets.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup jinja2.rst - add pyramid_jinja2 to requirements.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup routing.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup request_response.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup view_classes.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup templating.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup views.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup functional_testing.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose with pytest - cleanup unit_testing.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- cleanup debugtoolbar.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- cleanup ini.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- cleanup package.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- cleanup hello_world.rst
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- update pip and setuptools - moar cleanup
2016-04-16	quick_tutorial cleanup	Steve Piercy
	- replace nose and coverage with pytest and pytest-cov - update glossary and terms - use doscon lexer for Windows commands - refer to Pyramid Installation and put an end to copy-pasta - fix directory tree
2016-04-15	Update CHANGES/whatsnew-1.7 for updated require_csrf	Bert JW Regeer

2016-04-15	Have Automatic CSRF on all unsafe HTTP methods	Donald Stufft
	Instead of only protecting against unsafe POST requests, have the automatic CSRF protect on all methods which are not defined as "safe" by RFC2616.
2016-04-15	Only Accept CSRF Tokens in headers or POST bodies	Donald Stufft
	Previously `check_csrf_token` would allow passing in a CSRF token in through a the URL of a request. However this is a security issue because a CSRF token must not be allowed to leak, and URLs regularly get copy/pasted or otherwise end up leaking to the outside world.
2016-04-15	link to router chapter	Michael Merickel

2016-04-15	link to alchemy pull request	Michael Merickel

2016-04-15	rewrap 79-col	Steve Piercy

2016-04-14	Merge remote-tracking branch 'upstream/master'	Steve Piercy
	Conflicts: docs/whatsnew-1.7.rst
2016-04-14	editorial review and approval	Steve Piercy

2016-04-15	link to HTTPException class	Michael Merickel

2016-04-15	1.7, not 1.6	Michael Merickel

2016-04-15	link the whatsnew-1.7	Michael Merickel

2016-04-15	first cut at whatsnew-1.7	Michael Merickel

2016-04-14	Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths, also on Step 19 - ↵	Arian Maykon de Araújo Diógenes
	Database
2016-04-13	Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths	Arian Maykon de Araújo Diógenes

2016-04-13	- nudge `BeforeTraversal`	Steve Piercy

2016-04-13	- update Pyramid Request Processing Diagram.	Steve Piercy
	- Closes #2473. - See also #2413 and #2469.
2016-04-12	Merge branch 'master' into feature/require-csrf	Michael Merickel

2016-04-12	Merge branch 'master' into feature/BeforeTraversal	Bert JW Regeer

2016-04-12	Remove note about -Wd flag	Bert JW Regeer
	Since we no longer support Python 2.6, it becomes a requirement for all our supported Python versions, and thus the note is no longer required.
2016-04-12	Update introduction to testing	Bert JW Regeer
	It mentions that we use Jenkins, but our Travis is more open, and used for all commits, so add a reference to Travis as well. Also, remove Python 2.6 reference here.
2016-04-12	Replace Python 2.6 with 2.7	Bert JW Regeer

2016-04-12	- zap easy_install straggler	Steve Piercy

2016-04-12	- add mention of Windows and Python 3.3+ for virtual environments	Steve Piercy

2016-04-12	one does not simply "create a virtualenv". one should "create a virtual ↵	Steve Piercy
	environment". - Fixes #2483