Custom Query (1174 matches)
Results (235 - 237 of 1174)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #329 | FIXED | Drop custom delimiters in tags | ||
| Description |
As we agreed on IRC a long time ago, custom delimiters are too complex for translation and other reasons. We might be able to think of a nice way to implement them but at this point it's too much of a mess. Switch the tag delimiter to comma only. |
|||
| #330 | FIXED | Rename mediagoblin middleware to "meddleware" | ||
| Description |
This will help avoid confusion with WSGI middleware. |
|||
| #331 | FIXED | Allow prevention of csrf protection | ||
| Description |
Intro¶Sounds strange, right? Well, if we want to implement most APIs, we need to handle POST security directly in the views and our current CSRF protection will interfere. So we need to disable it on a pre view basis. How to mark views for disabling csrf protection¶We have two simple options: On the view directly¶
def disable_csrf_protection(func):
func.no_csrf = True
return func
@disable_csrf_protection
def view(...):
I prefer this one. In the Routing tables¶
Route('mediagoblin.auth.resend_verification', '/resend_verification/',
no_csrf=True,
controller='mediagoblin.auth.views:resend_activation'),
Middleware needs¶Currently the middleware (meddleware) handles requests before they hit routing. So inside the middleware we don't know the routing table entry / controller. So we should either add a "post routing" middleware method or move the current handling a bit down. |
|||
