Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Rename MediaGoblin middleware to meddleware to avoid confusion w/ wsgi ↵ | Christopher Allan Webber | 2011-11-25 | 3 | -179/+0 |
| | | | | | | middleware hehehehehe, "meddleware" | ||||
* | Merge remote-tracking branch 'remotes/nyergler/pep8-ification' | Christopher Allan Webber | 2011-11-13 | 1 | -0/+1 |
|\ | | | | | | | | | | | | | | | Conflicts: mediagoblin/db/migrations.py mediagoblin/db/models.py mediagoblin/user_pages/views.py mediagoblin/util.py | ||||
| * | Whitespace and formatting cleanup. | Nathan Yergler | 2011-10-01 | 1 | -0/+1 |
| | | | | | | | | | | | | | | * Removed trailing whitespace * Line length < 80 where possible * Honor conventions on number of blank lines * Honor conventions about spaces around :, = | ||||
* | | Issue 653: This time for sure! | Nathan Yergler | 2011-11-13 | 1 | -1/+1 |
| | | |||||
* | | Issue 653: Handle the case where request.vary is None | Nathan Yergler | 2011-11-13 | 1 | -1/+1 |
| | | |||||
* | | Issue 653: Don't throw exception if response has no vary header. | Nathan Yergler | 2011-11-13 | 1 | -1/+1 |
| | | |||||
* | | Some mostly cosmetic changes to CSRF | Elrond | 2011-10-14 | 1 | -9/+6 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * remove max_age - A session cookie is better, because it's a session thing, really. * Call the cookie mediagoblin_csrftoken, much clearer. * Use the SCRIPT_NAME for the path of the cookie, so that the cookie is sent back to the right place only. Alternatively the path= parameter could be removed, so that it defaults to '/'. * call the randomness function only once, instead of twice. 64 bits should be enough. If really more bits are needed, increase the number. * Just give the number as cookie. No point in md5 and hexdigest in my view (those functions just make another representation). * getrandbits gets a bit count directly, simpler API | ||||
* | | #361: Removing additional secret key, per CW's request. | Nathan Yergler | 2011-10-01 | 1 | -1/+1 |
| | | |||||
* | | #361: Don't test for CSRF token if we're running unit tests. | Nathan Yergler | 2011-10-01 | 1 | -1/+4 |
| | | |||||
* | | PEP8-ification. | Nathan Yergler | 2011-10-01 | 1 | -9/+10 |
| | | |||||
* | | Issue 361 Initial implementation of CSRF protection middleware | Nathan Yergler | 2011-09-04 | 2 | -0/+132 |
|/ | |||||
* | Issue 569: Initial framework for application middleware. | Nathan Yergler | 2011-09-04 | 2 | -0/+45 |