| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-05-23 | pyramid_tm.explicit_manager set in the configuration. | Chris Morales | |
| 2017-05-22 | Load difflib on-demand so that it won’t take message proactively | Fang-Pen Lin | |
| 2017-05-22 | Fix #1603, add closest predicate name in error message | Fang-Pen Lin | |
| 2017-05-22 | Add test for closest predicate error message | Fang-Pen Lin | |
| 2017-05-12 | Merge branch 'master' into change-to-localhost | Steve Piercy | |
| 2017-05-04 | add changelog for #3031 | Michael Merickel | |
| 2017-05-03 | normalize excview tween to use ``request.invoke_exception_view`` | Michael Merickel | |
| ``request.exception`` and ``request.exc_info`` are set to the exception used to render the response but they are reset to their original values if no response could be rendered minor incompatibility in that ``request.response`` is restored after the excview tween but should not be an issue because a response is returned thus request.response should be ignored by anyone who cares. | |||
| 2017-05-02 | clean request.exception if the excview fails to handle the error | Michael Merickel | |
| request.exception is only not None if the response was generated by the excview fixes #3027 | |||
| 2017-04-30 | Merge pull request #2985 from mmerickel/plaster | Michael Merickel | |
| migrate pyramid to use plaster | |||
| 2017-04-30 | standardize "non-standard" | Steve Piercy | |
| 2017-04-30 | Merge branch 'master' into pr/2854 | Michael Merickel | |
| 2017-04-30 | restore the ``ICSRFStoragePolicy.check_csrf_token`` api | Michael Merickel | |
| 2017-04-29 | Merge pull request #2874 from mmerickel/config-context-manager | Michael Merickel | |
| turn the Configurator into a context manager | |||
| 2017-04-29 | final cleanup of csrf decoupling in #2854 | Michael Merickel | |
| - Renamed `SessionCSRFStoragePolicy` to `LegacySessionCSRFStoragePolicy` for the version that uses the legacy `ISession.get_csrf_token` and `ISession.new_csrf_token` apis and set that as the default. - Added new `SessionCSRFStoragePolicy` that stores data in the session similar to how the `SessionAuthenticationPolicy` works. - `CookieCSRFStoragePolicy` did not properly return the newly generated token from `get_csrf_token` after calling `new_csrf_token`. It needed to cache the new value since the response callback does not affect the current request. - `CookieCSRFStoragePolicy` was not forwarding the `domain` value to the `CookieProfile` causing that setting to be ignored. - Removed `check_csrf_token` from the `ICSRFStoragePolicy` interface to simplify implementations of storage policies. - Added an introspectable item for the configured storage policy so that it appears on the debugtoolbar. - Added a change note on `ISession` that it no longer required the csrf methods. - Leave deprecated shims in ``pyramid.session`` for ``check_csrf_origin`` and ``check_csrf_token``. | |||
| 2017-04-26 | Move CSRF storage policy registration out of PHASE_1 config and simplify ↵ | Matthew Wilkes | |
| tests given previous improvements to CSRF. | |||
| 2017-04-26 | Apply drafting changes to documentation. | Matthew Wilkes | |
| 2017-04-16 | Fix typo in comment. | Ira Lun | |
| 2017-04-16 | Fix #2927 - Change to listen = localhost:6543. | Aleph Melo | |
| 2017-04-15 | Fix a typo in a comment. | Ira Lun | |
| 2017-04-12 | add version tags on set_default_csrf_options | Michael Merickel | |
| 2017-04-12 | docs syntax fix | Michael Merickel | |
| 2017-04-12 | Use the webob CookieProfile in the Cookie implementation, rename some ↵ | Matthew Wilkes | |
| implemenations based on feedback, split CSRF implementation and option configuration and make the csrf token function exposed as a system default rather than a renderer event. | |||
| 2017-04-12 | Fix a bug where people that didn't configure CSRF protection but did ↵ | Matthew Wilkes | |
| configure a session and set explicit checks would see an exception | |||
| 2017-04-12 | Rename implementation to ICSRFStoragePolicy | Matthew Wilkes | |
| 2017-04-12 | Fix tests and documentation in various places, and feedback following review | Jure Cerjak | |
| regarding naming of variables and code cleanup. | |||
| 2017-04-12 | Create a new ICSRF implementation for getting CSRF tokens, split out from ↵ | Matthew Wilkes | |
| the session machinery. Adds configuration of this to the csrf_options configurator commands. Make the default implementation a fallback to the old one. Documentation patches for new best practices given updates CSRF implementation. | |||
| 2017-04-02 | turn the Configurator into a context manager | Michael Merickel | |
| fixes #2872 | |||
| 2017-04-02 | push the threadlocal registry while config.include executes | Michael Merickel | |
| 2017-04-02 | add a failing test checking whether the threadlocal registry is active ↵ | Michael Merickel | |
| during config.include | |||
| 2017-03-29 | update pserve | Michael Merickel | |
| 2017-03-29 | update pshell | Michael Merickel | |
| 2017-03-29 | update prequest, proutes, ptweens and pviews | Michael Merickel | |
| Also ensure that each script is invoking setup_logging. | |||
| 2017-03-29 | rewrite low-level pyramid config functions to use plaster | Michael Merickel | |
| 2017-03-28 | support opening the browser via pserve.open_url config setting | Michael Merickel | |
| 2017-03-28 | require "open_url" setting in order to know what browser to open | Michael Merickel | |
| Parsing the port from the server section could be brought back but it would be a fallback that depends on finding a "port" variable in the [server:server_name] section of the config. | |||
| 2017-03-12 | update twitter handle | Steve Piercy | |
| 2017-03-05 | Merge pull request #2962 from Natim/2961-hupper-call-broken | Michael Merickel | |
| Pserve --reload does not keep worker arguments. Fixes #2961 | |||
| 2017-03-03 | @mmerickel review. | Rémy HUBSCHER | |
| 2017-03-02 | Reverted useless changes in tests. | Kirill Kuzminykh | |
| 2017-03-02 | Reverted couple useless fixes of memory leaks. | Kirill Kuzminykh | |
| 2017-03-01 | The memory leaks test skipped for platform 'pypy'. | Kirill Kuzminykh | |
| 2017-03-01 | Fixed several reference cycles to prevent memory leaks. Added simple test ↵ | Kirill Kuzminykh | |
| for detect memory leaks after application closing. | |||
| 2017-02-27 | Rewrite test without mock. | Rémy HUBSCHER | |
| 2017-02-25 | add an IExecutionPolicy that can wrap the router | Michael Merickel | |
| 2017-02-20 | Add test. | Rémy HUBSCHER | |
| 2017-02-20 | Make sure PServeCommand kwargs are passed to the hupper worker. | Rémy HUBSCHER | |
| 2017-02-20 | Niceties. | Rémy HUBSCHER | |
| 2017-02-17 | It is actually a good thing that this line is not called. | Rémy HUBSCHER | |
| 2017-02-17 | Settings should not alter the initial dict. | Rémy HUBSCHER | |
| 2017-02-17 | Add a failing test. | Rémy HUBSCHER | |
 |
index : pyramid | |
| Pyramid web framework (fork of https://github.com/Pylons/pyramid). | Daniel |
| summaryrefslogtreecommitdiff |