| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-06-27 | rename view_config argmuent category to _category | tosh | |
| 2017-06-27 | documentation updates | tosh | |
| link to relevant venusian docs improved grammer | |||
| 2017-06-26 | documentation for view_config category argument | tosh | |
| 2017-06-26 | add support for custom category in view_config decorator | tosh | |
| 2017-06-26 | change http://docs.pylonsproject.org to https | Steve Piercy | |
| - use correct URL for code style - use correct Pyramid version for zodb wiki src file template | |||
| 2017-06-19 | Merge pull request #3086 from mmerickel/set-execution-context | Michael Merickel | |
| add a router.request_context context manager | |||
| 2017-06-18 | document changes and add tests | Michael Merickel | |
| 2017-06-18 | Merge branch 'master' into pr/3034 | Michael Merickel | |
| 2017-06-18 | configure resource_url to use the same logic | Michael Merickel | |
| 2017-06-18 | Merge pull request #3088 from drnextgis/quote_via | Michael Merickel | |
| quote_via urlencode argument | |||
| 2017-06-18 | document and test p.encode.urlencode(quote_via=...) | Michael Merickel | |
| 2017-06-17 | add a router.request_context context manager | Michael Merickel | |
| the request context is to be used by execution policies to push/pop threadlocals and access the created request | |||
| 2017-06-15 | remove trailing slash | Steve Piercy | |
| 2017-06-15 | Use HTTPS for pylonsproject.org | Steve Piercy | |
| 2017-06-15 | quote_via urlencode argument | drnextgis | |
| 2017-06-15 | add a reraise argument to request.invoke_exception_view | Michael Merickel | |
| 2017-06-14 | fix p.security.ACLPermitsResult to subclass p.security.PermitsResult | Michael Merickel | |
| The ``IAuthorizationPolicy`` is expected to return an instance of ``PermitsResult`` and the ``ACLPermitsResult`` now subclasses this to form a consistent class hierarchy. Similarly the ``ACLDenied`` subclasses ``Denied`` and ``ACLAllowed`` subclasses ``Allowed`` for consistency. | |||
| 2017-06-12 | typo | Michael Merickel | |
| 2017-06-12 | apply request extensions within invoke_subrequest itself | Michael Merickel | |
| 2017-06-10 | Merge pull request #3059 from chrismorales/pyramid_tm_3052 | Steve Piercy | |
| set pyramid_tm.explicit_manager in the configuration | |||
| 2017-06-09 | Fix forbidden_view for BasicAuthAuthenticationPolicy (#3066) | Volker Diels-Grabsch | |
| 2017-06-08 | Merge pull request #3074 from Pylons/3073-all_permissions_list-iterability | Michael Merickel | |
| Ensure that instances of 'AllPermissionsList' are iterable. | |||
| 2017-06-07 | add versionadded directive for invoke_exception_view | Michael Merickel | |
| 2017-06-05 | Ensure that instances of 'AllPermissionsList' are iterable. | Tres Seaver | |
| Closes #3073. | |||
| 2017-06-05 | Merge pull request #3060 from Pylons/push_threadlocals_exception_view | Michael Merickel | |
| When invoking an exception view, push the new threadlocals | |||
| 2017-06-05 | Always push the threadlocals | Bert JW Regeer | |
| 2017-05-23 | Merge pull request #3061 from Pylons/render-last-exception | Bert JW Regeer | |
| allow the execution policy to perform a last-ditch effort to render an exception view | |||
| 2017-05-23 | Make coverage happy again | Bert JW Regeer | |
| 2017-05-23 | When invoking an exception view, push the new threadlocals | Bert JW Regeer | |
| This way when calling the threadlocal get_current_request() you get the same request object as the one that was passed to the view. | |||
| 2017-05-23 | allow the execution policy to perform a last-ditch effort to render an ↵ | Michael Merickel | |
| exception view | |||
| 2017-05-23 | Merge branch 'master' of https://github.com/Pylons/pyramid into pyramid_tm_3052 | Chris Morales | |
| 2017-05-23 | pyramid_tm.explicit_manager set in the configuration. | Chris Morales | |
| 2017-05-22 | Fix #2548, add SRI has for script tags | Fang-Pen Lin | |
| 2017-05-22 | Load difflib on-demand so that it won’t take message proactively | Fang-Pen Lin | |
| 2017-05-22 | Fix #1603, add closest predicate name in error message | Fang-Pen Lin | |
| 2017-05-22 | Add test for closest predicate error message | Fang-Pen Lin | |
| 2017-05-12 | Merge branch 'master' into change-to-localhost | Steve Piercy | |
| 2017-05-06 | pep8 fix | russellballestrini | |
| modified: pyramid/url.py | |||
| 2017-05-06 | make adjustments to make tests pass. | russellballestrini | |
| modified: pyramid/url.py | |||
| 2017-05-06 | Update url.py | Refactor parse_url_overrides | Russell Ballestrini | |
| Refactor parse_url_overrides: * pop values with default if key is missing * change conditionals to test for truth * prevent throwing an exception if passing keyword with default value * test if anchor starts with '#' before blindly adding it | |||
| 2017-05-04 | add changelog for #3031 | Michael Merickel | |
| 2017-05-03 | normalize excview tween to use ``request.invoke_exception_view`` | Michael Merickel | |
| ``request.exception`` and ``request.exc_info`` are set to the exception used to render the response but they are reset to their original values if no response could be rendered minor incompatibility in that ``request.response`` is restored after the excview tween but should not be an issue because a response is returned thus request.response should be ignored by anyone who cares. | |||
| 2017-05-02 | clean request.exception if the excview fails to handle the error | Michael Merickel | |
| request.exception is only not None if the response was generated by the excview fixes #3027 | |||
| 2017-04-30 | Merge pull request #2985 from mmerickel/plaster | Michael Merickel | |
| migrate pyramid to use plaster | |||
| 2017-04-30 | standardize "non-standard" | Steve Piercy | |
| 2017-04-30 | Merge branch 'master' into pr/2854 | Michael Merickel | |
| 2017-04-30 | restore the ``ICSRFStoragePolicy.check_csrf_token`` api | Michael Merickel | |
| 2017-04-29 | Merge pull request #2874 from mmerickel/config-context-manager | Michael Merickel | |
| turn the Configurator into a context manager | |||
| 2017-04-29 | final cleanup of csrf decoupling in #2854 | Michael Merickel | |
| - Renamed `SessionCSRFStoragePolicy` to `LegacySessionCSRFStoragePolicy` for the version that uses the legacy `ISession.get_csrf_token` and `ISession.new_csrf_token` apis and set that as the default. - Added new `SessionCSRFStoragePolicy` that stores data in the session similar to how the `SessionAuthenticationPolicy` works. - `CookieCSRFStoragePolicy` did not properly return the newly generated token from `get_csrf_token` after calling `new_csrf_token`. It needed to cache the new value since the response callback does not affect the current request. - `CookieCSRFStoragePolicy` was not forwarding the `domain` value to the `CookieProfile` causing that setting to be ignored. - Removed `check_csrf_token` from the `ICSRFStoragePolicy` interface to simplify implementations of storage policies. - Added an introspectable item for the configured storage policy so that it appears on the debugtoolbar. - Added a change note on `ISession` that it no longer required the csrf methods. - Leave deprecated shims in ``pyramid.session`` for ``check_csrf_origin`` and ``check_csrf_token``. | |||
| 2017-04-26 | Move CSRF storage policy registration out of PHASE_1 config and simplify ↵ | Matthew Wilkes | |
| tests given previous improvements to CSRF. | |||
