summaryrefslogtreecommitdiff
path: root/pyramid
AgeCommit message (Collapse)Author
2017-04-30Merge pull request #2985 from mmerickel/plasterMichael Merickel
migrate pyramid to use plaster
2017-04-30standardize "non-standard"Steve Piercy
2017-04-30Merge branch 'master' into pr/2854Michael Merickel
2017-04-30restore the ``ICSRFStoragePolicy.check_csrf_token`` apiMichael Merickel
2017-04-29Merge pull request #2874 from mmerickel/config-context-managerMichael Merickel
turn the Configurator into a context manager
2017-04-29final cleanup of csrf decoupling in #2854Michael Merickel
- Renamed `SessionCSRFStoragePolicy` to `LegacySessionCSRFStoragePolicy` for the version that uses the legacy `ISession.get_csrf_token` and `ISession.new_csrf_token` apis and set that as the default. - Added new `SessionCSRFStoragePolicy` that stores data in the session similar to how the `SessionAuthenticationPolicy` works. - `CookieCSRFStoragePolicy` did not properly return the newly generated token from `get_csrf_token` after calling `new_csrf_token`. It needed to cache the new value since the response callback does not affect the current request. - `CookieCSRFStoragePolicy` was not forwarding the `domain` value to the `CookieProfile` causing that setting to be ignored. - Removed `check_csrf_token` from the `ICSRFStoragePolicy` interface to simplify implementations of storage policies. - Added an introspectable item for the configured storage policy so that it appears on the debugtoolbar. - Added a change note on `ISession` that it no longer required the csrf methods. - Leave deprecated shims in ``pyramid.session`` for ``check_csrf_origin`` and ``check_csrf_token``.
2017-04-26Move CSRF storage policy registration out of PHASE_1 config and simplify ↵Matthew Wilkes
tests given previous improvements to CSRF.
2017-04-26Apply drafting changes to documentation.Matthew Wilkes
2017-04-16Fix typo in comment.Ira Lun
2017-04-15Fix a typo in a comment.Ira Lun
2017-04-12add version tags on set_default_csrf_optionsMichael Merickel
2017-04-12docs syntax fixMichael Merickel
2017-04-12Use the webob CookieProfile in the Cookie implementation, rename some ↵Matthew Wilkes
implemenations based on feedback, split CSRF implementation and option configuration and make the csrf token function exposed as a system default rather than a renderer event.
2017-04-12Fix a bug where people that didn't configure CSRF protection but did ↵Matthew Wilkes
configure a session and set explicit checks would see an exception
2017-04-12Rename implementation to ICSRFStoragePolicyMatthew Wilkes
2017-04-12Fix tests and documentation in various places, and feedback following reviewJure Cerjak
regarding naming of variables and code cleanup.
2017-04-12Create a new ICSRF implementation for getting CSRF tokens, split out from ↵Matthew Wilkes
the session machinery. Adds configuration of this to the csrf_options configurator commands. Make the default implementation a fallback to the old one. Documentation patches for new best practices given updates CSRF implementation.
2017-04-02turn the Configurator into a context managerMichael Merickel
fixes #2872
2017-04-02push the threadlocal registry while config.include executesMichael Merickel
2017-04-02add a failing test checking whether the threadlocal registry is active ↵Michael Merickel
during config.include
2017-03-29update pserveMichael Merickel
2017-03-29update pshellMichael Merickel
2017-03-29update prequest, proutes, ptweens and pviewsMichael Merickel
Also ensure that each script is invoking setup_logging.
2017-03-29rewrite low-level pyramid config functions to use plasterMichael Merickel
2017-03-28support opening the browser via pserve.open_url config settingMichael Merickel
2017-03-28require "open_url" setting in order to know what browser to openMichael Merickel
Parsing the port from the server section could be brought back but it would be a fallback that depends on finding a "port" variable in the [server:server_name] section of the config.
2017-03-12update twitter handleSteve Piercy
2017-03-05Merge pull request #2962 from Natim/2961-hupper-call-brokenMichael Merickel
Pserve --reload does not keep worker arguments. Fixes #2961
2017-03-03@mmerickel review.Rémy HUBSCHER
2017-03-02Reverted useless changes in tests.Kirill Kuzminykh
2017-03-02Reverted couple useless fixes of memory leaks.Kirill Kuzminykh
2017-03-01The memory leaks test skipped for platform 'pypy'.Kirill Kuzminykh
2017-03-01Fixed several reference cycles to prevent memory leaks. Added simple test ↵Kirill Kuzminykh
for detect memory leaks after application closing.
2017-02-27Rewrite test without mock.Rémy HUBSCHER
2017-02-25add an IExecutionPolicy that can wrap the routerMichael Merickel
2017-02-20Add test.Rémy HUBSCHER
2017-02-20Make sure PServeCommand kwargs are passed to the hupper worker.Rémy HUBSCHER
2017-02-20Niceties.Rémy HUBSCHER
2017-02-17It is actually a good thing that this line is not called.Rémy HUBSCHER
2017-02-17Settings should not alter the initial dict.Rémy HUBSCHER
2017-02-17Add a failing test.Rémy HUBSCHER
2017-02-09Merge pull request #2951 from Pylons/bugfix/httpexception__str__Bert JW Regeer
Bugfix: pyramid.httpexception.HTTPException.__str __
2017-02-09Make code more readable by using namedtuple attributedrnextgis
2017-02-06stringify self.detail in case it is not a stringBert JW Regeer
2017-02-06Test to verify that httpexc.detail may be non-strBert JW Regeer
2017-01-28scaffold starter now uses Jinja2Steve Piercy
- Closes misplaced issue https://github.com/Pylons/pyramid-cookiecutter-starter/issues/13
2017-01-24restore the registry signature and add tests to show whyMichael Merickel
fixes #2916
2017-01-17add ``override`` option to ``add_translation_dirs``Michael Merickel
fixes #1474
2017-01-17fix the add_translation_dirs documentation to reflect the current implMichael Merickel
fixes #1473
2017-01-16avoid doing lookup in loopMichael Merickel