Custom Query (1174 matches)
Results (313 - 315 of 1174)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #331 | FIXED | Allow prevention of csrf protection | ||
| Description |
Intro¶Sounds strange, right? Well, if we want to implement most APIs, we need to handle POST security directly in the views and our current CSRF protection will interfere. So we need to disable it on a pre view basis. How to mark views for disabling csrf protection¶We have two simple options: On the view directly¶
def disable_csrf_protection(func):
func.no_csrf = True
return func
@disable_csrf_protection
def view(...):
I prefer this one. In the Routing tables¶
Route('mediagoblin.auth.resend_verification', '/resend_verification/',
no_csrf=True,
controller='mediagoblin.auth.views:resend_activation'),
Middleware needs¶Currently the middleware (meddleware) handles requests before they hit routing. So inside the middleware we don't know the routing table entry / controller. So we should either add a "post routing" middleware method or move the current handling a bit down. |
|||
| #332 | fixed | Comments from reviewing the new video merge | ||
| Description |
In this bug I will put comments as I review the new video code. I will add new comments to this ticket as I go. I hope this is okay and will be workable. |
|||
| #333 | FIXED | Help text says "separate tags by commas and spaces" | ||
| Description |
It must be fixed because spaces don't separate tags anymore (if it even did in the past). |
|||
