Custom Query (1173 matches)
Results (118 - 120 of 1173)
| Ticket | Resolution | Summary | Owner | Reporter |
|---|---|---|---|---|
| #331 | FIXED | Allow prevention of csrf protection | ||
| Description |
Intro¶
======
Sounds strange, right?
Well, if we want to implement most APIs, we need to handle POST
security directly in the views and our current CSRF protection will
interfere.
So we need to disable it on a pre view basis.
How to mark views for disabling csrf protection¶
================================================
We have two simple options:
On the view directly¶
---------------------
::
def disable_csrf_protection(func):
func.no_csrf = True
return func
@disable_csrf_protection
def view(...):
I prefer this one.
In the Routing tables¶
----------------------
::
Route('mediagoblin.auth.resend_verification', '/resend_verification/',
no_csrf=True,
controller='mediagoblin.auth.views:resend_activation'),
Middleware needs¶
=================
Currently the middleware (meddleware) handles requests before they
hit routing. So inside the middleware we don't know the routing
table entry / controller.
So we should either add a "post routing" middleware method or move
the current handling a bit down.
|
|||
| #736 | wontfix | Allow replying to trac emails to update ticket | ||
| Description |
Currently: [ text/plain ]
This is the mail system at host mx1.riseup.net.
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.
For further assistance, please send mail to postmaster.
If you do so, please include this problem report. You can
delete your own text from the attached returned message.
The mail system
<trac@mediagoblin.org>: host mail.mediagoblin.org[66.228.56.33] said: 550 5.1.1
<trac@mediagoblin.org>: Recipient address rejected: User unknown in local
recipient table (in reply to RCPT TO command)
[ message/delivery-status ]
Reporting-MTA: dns; mx1.riseup.net
X-Postfix-Queue-ID: 5449F464B5
X-Postfix-Sender: rfc822; simonft@riseup.net
Arrival-Date: Sat, 13 Jul 2013 02:45:02 -0700 (PDT)
Final-Recipient: rfc822; trac@mediagoblin.org
Original-Recipient: rfc822;trac@mediagoblin.org
Action: failed
Status: 5.1.1
Remote-MTA: dns; mail.mediagoblin.org
Diagnostic-Code: smtp; 550 5.1.1 <trac@mediagoblin.org>: Recipient address
rejected: User unknown in local recipient table
|
|||
| #5425 | fixed | Allow tests to pass without audio/video dependencies again | ||
| Description |
A change was made to test_submission.py a while back which did the nice work of adding audio / video upload support. Unfortunately it also switched the codebase so that without the audio/video media type dependencies installed, tests would be failed, when really they should be skipped. |
|||
Note:
See TracQuery
for help on using queries.
