summaryrefslogtreecommitdiff
path: root/pyramid
AgeCommit message (Collapse)Author
2015-10-14Merge pull request #1976 from bertjwregeer/fix/python3.5Michael Merickel
Fix python 3.5 support
2015-10-14Merge pull request #1929 from jessedhillon/better-pshell-env-helpMichael Merickel
populate pshell's env_help with docstring of values
2015-10-14Merge pull request #1907 from mnaberez/circus-as-pserve-daemonize-replacementMichael Merickel
Mention Circus as a pserve --daemon replacement. Refs #1554, #1641
2015-10-11No cover a branchBert JW Regeer
2015-10-11Fix Python 3.5 supportBert JW Regeer
Python 3.5 inserts an extra stackframe when calling extract_traceback, this adds in a check to see if the last frame is this extra frame, and if so removes it. This doesn't affect any other version of Python.
2015-10-11fix broken testMichael Merickel
2015-10-11fix broken sortMichael Merickel
2015-10-11order shells alphabetically instead of prioritizing ipython/bpythonMichael Merickel
2015-10-11Merge pull request #1891 from sontek/use_entry_points_for_shellsMichael Merickel
Use entry points for pshell
2015-10-11removed default fall through when passed a specific shellJohn Anderson
2015-10-07populate pshell's env_help with docstring of valuesJesse Dhillon
2015-10-01Mention Circus as a pserve --daemon replacement. Refs #1554, #1641Mike Naberezny
2015-09-13fix broken testsMichael Merickel
2015-09-13deprecate pserve daemonizationMichael Merickel
2015-09-06Use entry points for pshellJohn Anderson
2015-08-31fix difference between py2 and py3 with base64.b64decodeMichael Merickel
2015-08-31Merge branch 'fixes/cookie_values' of bertjwregeer/pyramid into pull.1866Michael Merickel
2015-08-03base64 encode cookie valuesBert JW Regeer
This way they are valid according to the RFC, and newer versions of WebOb won't complain.
2015-08-03Fix Pyramid against WebOb >=1.5.0Bert JW Regeer
Due to changes in WebOb we may no longer create a Response() object with an invalid status (i.e. 'None None'). For the top-level HTTPException if it is not correctly overriden in child classes then we now use '520 Unknown Error'. While not an official RFC error, this has been used by Microsoft's Azure as well as CloudFlare to signify an error that doesn't have a more appropriate error message.
2015-06-11use input_ from p.compat, renamed optionIgor Stroh
- Use pyramid.compat.input_ instead of manually checking for python version and chosing the appropriate input/raw_input function - Renamed--force-conflicting-name option to --ignore-conflicting-name - Display invalid scaffold names in a sorted manner
2015-06-10added py2.6 compatibility, removed test for 'site'Igor Stroh
- Made sure str.format() calls are py2.6 compatible - Removed test_scaffolds/test_init.py#test_pre_site since the check is handled in pcreate script
2015-06-10make sure user input is py2.x/py3 compatibleIgor Stroh
- Use input() in python3 and raw_input in python 2.x - Remoced unused local variables
2015-06-10removed unused exceptionsIgor Stroh
2015-06-10handle conflicting project names gracefully, fixes: #1357Igor Stroh
- Check for importable packages/modules with the same name as the package to be created - Added --force-conflicting-name option to enforce the use of a conflicting package - Added appropriate tests
2015-06-09Merge pull request #1836 from Pylons/fix-1832-masterTres Seaver
Return concrete classes from 'pyramid.httpexceptions.exception_response'
2015-06-09Return concrete classes from 'pyramid.httpexceptions.exception_response'.Tres Seaver
The base classes are not appropriate for 400 and 500 status codes. See: #1832
2015-06-05We explicitly pass in the interfaces provided by the request asChris McDonough
request_iface to _call_view; we don't want _call_view to use request.request_iface, because render_view_to_response and friends are pretty much limited to finding views that are not views associated with routes, and the only thing request.request_iface is used for is to find route-based views. The render_view_to_response API is (and always has been) a stepchild API reserved for use of those who actually use traversal. Doing this fixes an infinite recursion bug introduced in Pyramid 1.6a1, and causes the render_view* APIs to behave as they did in 1.5 and previous. We should probably provide some sort of different API that would allow people to find views for routes. Fixes #1643.
2015-05-27add an example decorator showing a response being used unconditionallyMichael Merickel
2015-05-24update theme CSS files for wiki tutorialsSteve Piercy
2015-05-24cache bust tokenSteve Piercy
2015-04-26allow dots in the jsonp callback and prefix content with a commentMichael Merickel
The comment prefix should potential exploints from flash plugins (See CVE-2014-4671 "Rosetta Flash").
2015-04-20update development.ini in scaffolds to listen on 127.0.0.1Michael Merickel
2015-04-19Merge pull request #1627 from bertjwregeer/security/jsonpMichael Merickel
Add some validation for the JSONP callback
2015-04-19Merge branch 'pr/1571'Michael Merickel
2015-04-17default response_callback and finished_callback to an empty deque instead of ↵Michael Merickel
None fixes #1600
2015-04-15Restore request.response if renderer raises exceptionJeff Dairiki
This fixes two bugs in the ``temporary_response`` context manager: - ``Request.response`` should be restored even if the renderer raises an exception - If ``request.response`` is initially set to ``None``, it should be restored to ``None`` (rather than deleted). References: #1563
2015-04-15Add tests for temporary_response context managerJeff Dairiki
These tests test for, among other things, the nits described in comments on #1563, namely: - ``Request.response`` should be restored even if the renderer raises an exception - If ``request.response`` is initially set to ``None``, it should be restored to ``None`` (rather than deleted). (Some of these tests currently fail.)
2015-04-14Add some validation for the JSONP callbackBert JW Regeer
The callback variable could be used to arbitrarily inject javascript into the response object. This validates that the callback doesn't begin with a number and is standard US ASCII characters, because trying to make sure the JavaScript function name is actually valid would require parsing JavaScript itself...
2015-04-13Ignore more pep8 checks and add to travisJohn Anderson
2015-04-13Merge branch 'master' of https://github.com/Pylons/pyramid into start_pep8John Anderson
Conflicts: pyramid/view.py
2015-04-13make it possible to run scaffold functests using toxChris McDonough
2015-04-12omg how embarrassing, forgot to run tests before merging the request ↵Chris McDonough
subclass fix branch
2015-04-12merge master back into this PR branchChris McDonough
2015-04-06Merge branch 'fix.view-lookup'Chris McDonough
2015-04-06change excview_tween to use _call_view instead of adapters.lookup; ↵Chris McDonough
parameterize _call_view and _find_views to cope
2015-04-06add comment about not changing view_execution_permitted use of .lookup for ↵Chris McDonough
view finding
2015-04-06convert render_view_to_response to use _call_viewChris McDonough
2015-04-06break out _call_view into separate importable callable for use in scriptsChris McDonough
2015-04-06use _find_views instead of lookup in proutesChris McDonough
2015-04-06unused importsChris McDonough