| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
- app.global_config, app.app_config
- making setup_crypto use app.app_config
- setting app.workbench_manager
|
|\
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| |
| | |
Has some issues, will iteratively fix!
Conflicts:
mediagoblin/gmg_commands/__init__.py
mediagoblin/gmg_commands/deletemedia.py
mediagoblin/gmg_commands/users.py
mediagoblin/oauth/views.py
mediagoblin/plugins/api/views.py
mediagoblin/tests/test_api.py
mediagoblin/tests/test_edit.py
mediagoblin/tests/test_oauth1.py
mediagoblin/tests/test_util.py
mediagoblin/tools/mail.py
mediagoblin/webfinger/views.py
setup.py
|
| | |
|
| |
| |
| |
| | |
(forgot to commit earlier)
|
|/ |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
The previous code was theoretically subject to timing attacks, where
an attacker could read the key in between the time it was saved to the
file and when the chmod happened. This version prevents that by using
umasks to ensure the files always have the right permissions.
This version also avoids using a key that cannot be saved due to some
system setup bug.
|
|
|
|
| |
Set mode 700 on the directory, mode 600 on the file.
|
| |
|
|
Implement the basic infrastructure for using itsdangerous
in mediagoblin. Usage instructions will follow.
|