summaryrefslogtreecommitdiff
path: root/pyramid
AgeCommit message (Collapse)Author
2017-06-27rename view_config argmuent category to _categorytosh
2017-06-27documentation updatestosh
link to relevant venusian docs improved grammer
2017-06-26documentation for view_config category argumenttosh
2017-06-26add support for custom category in view_config decoratortosh
2017-06-26change http://docs.pylonsproject.org to httpsSteve Piercy
- use correct URL for code style - use correct Pyramid version for zodb wiki src file template
2017-06-19Merge pull request #3086 from mmerickel/set-execution-contextMichael Merickel
add a router.request_context context manager
2017-06-18document changes and add testsMichael Merickel
2017-06-18Merge branch 'master' into pr/3034Michael Merickel
2017-06-18configure resource_url to use the same logicMichael Merickel
2017-06-18Merge pull request #3088 from drnextgis/quote_viaMichael Merickel
quote_via urlencode argument
2017-06-18document and test p.encode.urlencode(quote_via=...)Michael Merickel
2017-06-17add a router.request_context context managerMichael Merickel
the request context is to be used by execution policies to push/pop threadlocals and access the created request
2017-06-15remove trailing slashSteve Piercy
2017-06-15Use HTTPS for pylonsproject.orgSteve Piercy
2017-06-15quote_via urlencode argumentdrnextgis
2017-06-15add a reraise argument to request.invoke_exception_viewMichael Merickel
2017-06-14fix p.security.ACLPermitsResult to subclass p.security.PermitsResultMichael Merickel
The ``IAuthorizationPolicy`` is expected to return an instance of ``PermitsResult`` and the ``ACLPermitsResult`` now subclasses this to form a consistent class hierarchy. Similarly the ``ACLDenied`` subclasses ``Denied`` and ``ACLAllowed`` subclasses ``Allowed`` for consistency.
2017-06-12typoMichael Merickel
2017-06-12apply request extensions within invoke_subrequest itselfMichael Merickel
2017-06-10Merge pull request #3059 from chrismorales/pyramid_tm_3052Steve Piercy
set pyramid_tm.explicit_manager in the configuration
2017-06-09Fix forbidden_view for BasicAuthAuthenticationPolicy (#3066)Volker Diels-Grabsch
2017-06-08Merge pull request #3074 from Pylons/3073-all_permissions_list-iterabilityMichael Merickel
Ensure that instances of 'AllPermissionsList' are iterable.
2017-06-07add versionadded directive for invoke_exception_viewMichael Merickel
2017-06-05Ensure that instances of 'AllPermissionsList' are iterable.Tres Seaver
Closes #3073.
2017-06-05Merge pull request #3060 from Pylons/push_threadlocals_exception_viewMichael Merickel
When invoking an exception view, push the new threadlocals
2017-06-05Always push the threadlocalsBert JW Regeer
2017-05-23Merge pull request #3061 from Pylons/render-last-exceptionBert JW Regeer
allow the execution policy to perform a last-ditch effort to render an exception view
2017-05-23Make coverage happy againBert JW Regeer
2017-05-23When invoking an exception view, push the new threadlocalsBert JW Regeer
This way when calling the threadlocal get_current_request() you get the same request object as the one that was passed to the view.
2017-05-23allow the execution policy to perform a last-ditch effort to render an ↵Michael Merickel
exception view
2017-05-23Merge branch 'master' of https://github.com/Pylons/pyramid into pyramid_tm_3052Chris Morales
2017-05-23pyramid_tm.explicit_manager set in the configuration.Chris Morales
2017-05-22Fix #2548, add SRI has for script tagsFang-Pen Lin
2017-05-22Load difflib on-demand so that it won’t take message proactivelyFang-Pen Lin
2017-05-22Fix #1603, add closest predicate name in error messageFang-Pen Lin
2017-05-22Add test for closest predicate error messageFang-Pen Lin
2017-05-12Merge branch 'master' into change-to-localhostSteve Piercy
2017-05-06pep8 fixrussellballestrini
modified: pyramid/url.py
2017-05-06make adjustments to make tests pass.russellballestrini
modified: pyramid/url.py
2017-05-06Update url.py | Refactor parse_url_overridesRussell Ballestrini
Refactor parse_url_overrides: * pop values with default if key is missing * change conditionals to test for truth * prevent throwing an exception if passing keyword with default value * test if anchor starts with '#' before blindly adding it
2017-05-04add changelog for #3031Michael Merickel
2017-05-03normalize excview tween to use ``request.invoke_exception_view``Michael Merickel
``request.exception`` and ``request.exc_info`` are set to the exception used to render the response but they are reset to their original values if no response could be rendered minor incompatibility in that ``request.response`` is restored after the excview tween but should not be an issue because a response is returned thus request.response should be ignored by anyone who cares.
2017-05-02clean request.exception if the excview fails to handle the errorMichael Merickel
request.exception is only not None if the response was generated by the excview fixes #3027
2017-04-30Merge pull request #2985 from mmerickel/plasterMichael Merickel
migrate pyramid to use plaster
2017-04-30standardize "non-standard"Steve Piercy
2017-04-30Merge branch 'master' into pr/2854Michael Merickel
2017-04-30restore the ``ICSRFStoragePolicy.check_csrf_token`` apiMichael Merickel
2017-04-29Merge pull request #2874 from mmerickel/config-context-managerMichael Merickel
turn the Configurator into a context manager
2017-04-29final cleanup of csrf decoupling in #2854Michael Merickel
- Renamed `SessionCSRFStoragePolicy` to `LegacySessionCSRFStoragePolicy` for the version that uses the legacy `ISession.get_csrf_token` and `ISession.new_csrf_token` apis and set that as the default. - Added new `SessionCSRFStoragePolicy` that stores data in the session similar to how the `SessionAuthenticationPolicy` works. - `CookieCSRFStoragePolicy` did not properly return the newly generated token from `get_csrf_token` after calling `new_csrf_token`. It needed to cache the new value since the response callback does not affect the current request. - `CookieCSRFStoragePolicy` was not forwarding the `domain` value to the `CookieProfile` causing that setting to be ignored. - Removed `check_csrf_token` from the `ICSRFStoragePolicy` interface to simplify implementations of storage policies. - Added an introspectable item for the configured storage policy so that it appears on the debugtoolbar. - Added a change note on `ISession` that it no longer required the csrf methods. - Leave deprecated shims in ``pyramid.session`` for ``check_csrf_origin`` and ``check_csrf_token``.
2017-04-26Move CSRF storage policy registration out of PHASE_1 config and simplify ↵Matthew Wilkes
tests given previous improvements to CSRF.