aboutsummaryrefslogtreecommitdiffstats
path: root/mediagoblin/middleware
Commit message (Collapse)AuthorAgeFilesLines
* Rename MediaGoblin middleware to meddleware to avoid confusion w/ wsgi ↵Christopher Allan Webber2011-11-253-179/+0
| | | | | | middleware hehehehehe, "meddleware"
* Merge remote-tracking branch 'remotes/nyergler/pep8-ification'Christopher Allan Webber2011-11-131-0/+1
|\ | | | | | | | | | | | | | | Conflicts: mediagoblin/db/migrations.py mediagoblin/db/models.py mediagoblin/user_pages/views.py mediagoblin/util.py
| * Whitespace and formatting cleanup.Nathan Yergler2011-10-011-0/+1
| | | | | | | | | | | | | | * Removed trailing whitespace * Line length < 80 where possible * Honor conventions on number of blank lines * Honor conventions about spaces around :, =
* | Issue 653: This time for sure!Nathan Yergler2011-11-131-1/+1
| |
* | Issue 653: Handle the case where request.vary is NoneNathan Yergler2011-11-131-1/+1
| |
* | Issue 653: Don't throw exception if response has no vary header.Nathan Yergler2011-11-131-1/+1
| |
* | Some mostly cosmetic changes to CSRFElrond2011-10-141-9/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove max_age - A session cookie is better, because it's a session thing, really. * Call the cookie mediagoblin_csrftoken, much clearer. * Use the SCRIPT_NAME for the path of the cookie, so that the cookie is sent back to the right place only. Alternatively the path= parameter could be removed, so that it defaults to '/'. * call the randomness function only once, instead of twice. 64 bits should be enough. If really more bits are needed, increase the number. * Just give the number as cookie. No point in md5 and hexdigest in my view (those functions just make another representation). * getrandbits gets a bit count directly, simpler API
* | #361: Removing additional secret key, per CW's request.Nathan Yergler2011-10-011-1/+1
| |
* | #361: Don't test for CSRF token if we're running unit tests.Nathan Yergler2011-10-011-1/+4
| |
* | PEP8-ification.Nathan Yergler2011-10-011-9/+10
| |
* | Issue 361 Initial implementation of CSRF protection middlewareNathan Yergler2011-09-042-0/+132
|/
* Issue 569: Initial framework for application middleware.Nathan Yergler2011-09-042-0/+45