summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2016-04-17update RELEASING.txt with version terms, extra stepSteve Piercy
update conf.py with clearer comments and prep for rolldown for 1.6
2016-04-16replace ps1con with doscon for lexerSteve Piercy
2016-04-16Merge remote-tracking branch 'upstream/master'Steve Piercy
2016-04-16missed yer nose!Steve Piercy
2016-04-16replace nose with pytest, clean upSteve Piercy
2016-04-16Merge pull request #2505 from stevepiercy/docs/quick-tour-gotcher-noseSteve Piercy
Docs/quick tour gotcher nose
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup authorization.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup authentication.rst
2016-04-16add docs and backward incompatibility notices for #2501Michael Merickel
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup databases.rst
2016-04-16In addition to CSRF token, verify the origin tooDonald Stufft
Add an additional layer of protection against CSRF by verifying the actual origin of the request in addition to the CSRF token. We only do this check on sites hosted behind HTTPS because only HTTPS sites have evidence to show that the Referrer header is not being spuriously removed by random middleware boxes.
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup forms.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup sessions.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup logging.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup more_view_classes.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup json.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup static_assets.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup jinja2.rst - add pyramid_jinja2 to requirements.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup routing.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup request_response.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup view_classes.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup templating.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup views.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup functional_testing.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose with pytest - cleanup unit_testing.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- cleanup debugtoolbar.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- cleanup ini.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- cleanup package.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- cleanup hello_world.rst
2016-04-16quick_tutorial cleanupSteve Piercy
- update pip and setuptools - moar cleanup
2016-04-16quick_tutorial cleanupSteve Piercy
- replace nose and coverage with pytest and pytest-cov - update glossary and terms - use doscon lexer for Windows commands - refer to Pyramid Installation and put an end to copy-pasta - fix directory tree
2016-04-15Update CHANGES/whatsnew-1.7 for updated require_csrfBert JW Regeer
2016-04-15Have Automatic CSRF on all unsafe HTTP methodsDonald Stufft
Instead of only protecting against unsafe POST requests, have the automatic CSRF protect on all methods which are not defined as "safe" by RFC2616.
2016-04-15Only Accept CSRF Tokens in headers or POST bodiesDonald Stufft
Previously `check_csrf_token` would allow passing in a CSRF token in through a the URL of a request. However this is a security issue because a CSRF token must not be allowed to leak, and URLs regularly get copy/pasted or otherwise end up leaking to the outside world.
2016-04-15link to router chapterMichael Merickel
2016-04-15link to alchemy pull requestMichael Merickel
2016-04-15rewrap 79-colSteve Piercy
2016-04-14Merge remote-tracking branch 'upstream/master'Steve Piercy
Conflicts: docs/whatsnew-1.7.rst
2016-04-14editorial review and approvalSteve Piercy
2016-04-15link to HTTPException classMichael Merickel
2016-04-151.7, not 1.6Michael Merickel
2016-04-15link the whatsnew-1.7Michael Merickel
2016-04-15first cut at whatsnew-1.7Michael Merickel
2016-04-14Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS Paths, also on Step 19 - ↵Arian Maykon de Araújo Diógenes
Database
2016-04-13Issue #2493: Fixing Quick Tutorial Step 18 - CSS/JS PathsArian Maykon de Araújo Diógenes
2016-04-13- nudge `BeforeTraversal`Steve Piercy
2016-04-13- update Pyramid Request Processing Diagram.Steve Piercy
- Closes #2473. - See also #2413 and #2469.
2016-04-12Merge branch 'master' into feature/require-csrfMichael Merickel
2016-04-12Merge branch 'master' into feature/BeforeTraversalBert JW Regeer
2016-04-12Remove note about -Wd flagBert JW Regeer
Since we no longer support Python 2.6, it becomes a requirement for all our supported Python versions, and thus the note is no longer required.