summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2017-06-01use shortcut for github URL; update RELEASING.txtSteve Piercy
- refs: #3042
2017-05-22Also replace script tags appear everywhereFang-Pen Lin
2017-05-22Fix #2548, add SRI has for script tagsFang-Pen Lin
2017-05-17adjust emphasize-lines rangeSteve Piercy
2017-05-17remove bad path from python executableSteve Piercy
- Closes #3044
2017-05-12Merge branch 'master' into change-to-localhostSteve Piercy
2017-05-12update narrative docs to align with source codeSteve Piercy
- per https://github.com/Pylons/pyramid/pull/3000#issuecomment-294565854
2017-05-12Merge remote-tracking branch 'upstream/master'Steve Piercy
2017-05-12use httpsSteve Piercy
2017-05-09use new TLD for pytest-covSteve Piercy
2017-05-09Pytest changed their URL structureTres Seaver
2017-05-04line lengthMichael Merickel
2017-05-04add incompatibilities to whatsnewMichael Merickel
2017-05-01fix url syntax yet againMichael Merickel
2017-05-01fix url syntaxMichael Merickel
2017-05-01line length fixes in whatsnew-1.9Michael Merickel
2017-05-01add changelog for #2993Michael Merickel
2017-05-01fix rst syntaxMichael Merickel
2017-05-01link to plaster_pastedeployMichael Merickel
2017-05-01really add whatsnew-1.9Michael Merickel
2017-05-01update changelog and add whatsnew-1.9Michael Merickel
2017-04-30Merge pull request #2985 from mmerickel/plasterMichael Merickel
migrate pyramid to use plaster
2017-04-30standardize "non-standard"Steve Piercy
2017-04-30Merge branch 'master' into pr/2854Michael Merickel
2017-04-29final cleanup of csrf decoupling in #2854Michael Merickel
- Renamed `SessionCSRFStoragePolicy` to `LegacySessionCSRFStoragePolicy` for the version that uses the legacy `ISession.get_csrf_token` and `ISession.new_csrf_token` apis and set that as the default. - Added new `SessionCSRFStoragePolicy` that stores data in the session similar to how the `SessionAuthenticationPolicy` works. - `CookieCSRFStoragePolicy` did not properly return the newly generated token from `get_csrf_token` after calling `new_csrf_token`. It needed to cache the new value since the response callback does not affect the current request. - `CookieCSRFStoragePolicy` was not forwarding the `domain` value to the `CookieProfile` causing that setting to be ignored. - Removed `check_csrf_token` from the `ICSRFStoragePolicy` interface to simplify implementations of storage policies. - Added an introspectable item for the configured storage policy so that it appears on the debugtoolbar. - Added a change note on `ISession` that it no longer required the csrf methods. - Leave deprecated shims in ``pyramid.session`` for ``check_csrf_origin`` and ``check_csrf_token``.
2017-04-28update cookiecutter README.txt throughout docsSteve Piercy
- https://github.com/Pylons/pyramid-cookiecutter-starter/pull/28 - https://github.com/Pylons/pyramid-cookiecutter-zodb/pull/7 - https://github.com/Pylons/pyramid-cookiecutter-alchemy/pull/8
2017-04-27Fix underlined title.Rémy HUBSCHER
2017-04-26Move CSRF storage policy registration out of PHASE_1 config and simplify ↵Matthew Wilkes
tests given previous improvements to CSRF.
2017-04-26Apply drafting changes to documentation.Matthew Wilkes
2017-04-23update user prompt for cookiecutter repo_nameSteve Piercy
- refs: https://github.com/Pylons/pyramid-cookiecutter-starter/pull/27#issuecomment-296507821
2017-04-19Merge pull request #2995 from jeremy886/masterMichael Merickel
change cgi.escape to pyramid compat.escape
2017-04-17fix rst syntax for index entriesSteve Piercy
2017-04-16Fix #2927 - Change to listen = localhost:6543.Aleph Melo
2017-04-15Update default.pyJeremy Chen
2017-04-15Update default.pyJeremy Chen
2017-04-15Update default.pyJeremy Chen
2017-04-15Update default.pyJeremy Chen
2017-04-15Merge remote-tracking branch 'Pylons/master'Jeremy Chen
2017-04-12forward port some history changes from 1.8-branchMichael Merickel
2017-04-12Use the webob CookieProfile in the Cookie implementation, rename some ↵Matthew Wilkes
implemenations based on feedback, split CSRF implementation and option configuration and make the csrf token function exposed as a system default rather than a renderer event.
2017-04-12Rename implementation to ICSRFStoragePolicyMatthew Wilkes
2017-04-12Fix tests and documentation in various places, and feedback following reviewJure Cerjak
regarding naming of variables and code cleanup.
2017-04-12Create a new ICSRF implementation for getting CSRF tokens, split out from ↵Matthew Wilkes
the session machinery. Adds configuration of this to the csrf_options configurator commands. Make the default implementation a fallback to the old one. Documentation patches for new best practices given updates CSRF implementation.
2017-04-10add execution policy to pyramid request processing diagramsSteve Piercy
2017-04-10replace deprecated cgi.escape() with html.escape()Jeremy Chen
As suggested by https://docs.python.org/3.6/library/cgi.html cgi.escape() Deprecated since version 3.2: This function is unsafe because quote is false by default, and therefore deprecated. Use html.escape() instead.
2017-04-08grammar fixSteve Piercy
2017-03-31add some simple notes about plaster in the narrative docsMichael Merickel
2017-03-29rewrite low-level pyramid config functions to use plasterMichael Merickel
2017-03-14add Mako to options for pyramid-cookiecutter-starterSteve Piercy
2017-03-10add Chameleon as option to pyramid-cookiecutter-starterSteve Piercy