aboutsummaryrefslogtreecommitdiffstats
path: root/mediagoblin/meddleware/csrf.py
Commit message (Collapse)AuthorAgeFilesLines
* Improve error message wording (#564)Sebastian Spaeth2013-01-141-4/+8
| | | | | Improve error message wording if no csf cookie could be detected. Also, make the error text translatable.
* Convert return HttpException to raise HttpExceptionSebastian Spaeth2012-12-231-2/+2
| | | | | | controllers (view function) raise HttpException's and do not return them. Signed-off-by: Sebastian Spaeth <Sebastian@SSpaeth.de>
* Transition webob.HttpForbidden to webob's exceptions ForbiddenSebastian Spaeth2012-12-211-5/+7
| | | | Also the BadRequest exception.
* Replaced all request.POST with request.form, ...Joar Wandborg2012-09-291-1/+1
| | | | | - Fixed error handling in OAuth plugin - Changed request.POST file fields to request.files
* Fix problems from pyflakes outputWill Kahn-Greene2012-06-031-2/+1
|
* Added logging to meddleware.csrfJoar Wandborg2012-05-131-0/+5
|
* It's 2012 all up in hereChristopher Allan Webber2012-02-021-1/+1
|
* Bug #685: only provide CSRF token if it existsElrond2011-12-031-0/+3
| | | | | | | | | | | | | This was suggested by Nathan Yergler in the bug logs. Just implementing it. - Let render_csrf_form_token return None, if the CSRF_TOKEN is not available in the environ, because the process_request part of the meddleware has not yet run. - In render_template: If the returned value from above is None, then do not add the csrf_token to the templates context.
* Issue 680 Allow decorating views to prevent CSRF protection.Nathan Yergler2011-11-261-3/+12
|
* Issue 680: Dispatch meddleware request processing post-routingNathan Yergler2011-11-261-1/+1
|
* Add base class for MeddlewareElrond2011-11-251-4/+2
| | | | | | | | | | Created a BaseMeddleware which all Meddleware should derive from. This is not strictly needed, but will greatly help. The base class has the common __init__ of all the other Meddlwares and fall backs for all hooks. That way a new Meddlware only needs to override what it actually wants to implement.
* Rename MediaGoblin middleware to meddleware to avoid confusion w/ wsgi ↵Christopher Allan Webber2011-11-251-0/+132
middleware hehehehehe, "meddleware"