Граф коммитов

42 Коммитов

Автор SHA1 Сообщение Дата
Matt Molyneaux bb6ce72802 Make it slightly more obvious what `ANON_ALWAYS` is for (#26) 2018-01-17 13:28:26 -05:00
Peter Bengtsson ed197a2dc7 prepare for version 0.7.1 2016-10-05 08:31:04 -04:00
Matt Molyneaux 28520b97a0 Python 3 support (#36)
* Python 3 support
2016-10-05 08:26:39 -04:00
Peter Bengtsson 88d1b14c7e don't assume request.user (#34)
* don't assume request.user

* actually test that it worked
2016-10-05 10:53:02 +03:00
Giorgos Logiotatidis 167208ecab Merge pull request #33 from peterbe/ignore-build-artifacts
ignore build artifacts
2016-10-04 15:01:20 +03:00
Giorgos Logiotatidis c0bc4710ec Merge pull request #35 from peterbe/dont-require-django-to-install
Don't require django to install
2016-10-04 14:57:09 +03:00
Peter Bengtsson 06065d2f7b don't require django to install 2016-10-03 09:28:04 -04:00
Peter Bengtsson 03803b98fa ignore build artifacts 2016-10-03 09:13:08 -04:00
Peter Bengtsson 5a220fd69a Merge pull request #30 from ctxis/master
Make compatible with Django 1.10
2016-09-30 16:22:23 -04:00
Patrick Craston 29d5030ff5 Make compatible with Django 1.10. Replace _get_new_csrf_key with _get_new_csrf_string, use Middleware Deprecation Mixin, fix urlpatterns 2016-09-30 15:25:00 +01:00
Peter Bengtsson 98626d3670 Merge pull request #19 from moggers87/travis
Fixed tests & Travis
2016-03-15 06:11:33 -04:00
Matt Molyneaux ab97e33599 Change tested versions
* Drop support for 1.4
* Test with 1.9
* Stop testing against Python 2.6
2016-03-10 00:59:44 +00:00
Peter Bengtsson 59014dd0e7 version 0.6 for a new release 2016-01-15 08:33:35 -05:00
Matt Molyneaux c0b1155285 Don't test on Python 3, it's broken 2015-09-04 18:12:49 +01:00
Matt Molyneaux 3e362c1d6a Update tests to work with newer versions of Django 2015-09-04 17:59:14 +01:00
Matt Molyneaux dff6a73455 Travis config
* config file for Travis CI
* updates to how runtests.sh script works - it now returns the exit code
  of the tests rather than 0
2015-09-04 10:08:21 +01:00
Peter Bengtsson a9fcd89386 Merge pull request #18 from Osmose/contribute.json
Add contribute.json file.
2015-03-02 12:04:59 -08:00
Michael Kelly b975e1d610 Add contribute.json file. 2015-03-02 11:04:57 -08:00
Peter Bengtsson f00ad913c6 Merge pull request #15 from washort/master
hash csrf tokens for use as memcache keys
2013-05-31 15:35:49 -07:00
Allen Short 13c3cb212a Hash received cookies to normalize length and contents. (bug 872263) 2013-05-31 15:03:55 -07:00
Peter Bengtsson b3b7367413 issue 10 - massive cookies cause memcache trouble, r=Osmose 2013-05-17 08:35:37 -07:00
Jeff Balogh 94e2858a42 Merge pull request #9 from carljm/no-code-in-manage-py
Don't recommend putting important code in manage.py.
2012-02-10 14:55:51 -08:00
Carl Meyer 1fa1a42fc1 Don't recommend putting important code in manage.py. 2012-02-02 16:55:25 -07:00
Jeff Balogh 15492526b2 tagging v0.5 2012-01-27 11:41:38 -08:00
Jeff Balogh af159ac3ff use a prefix for cache keys 2012-01-26 12:11:12 -08:00
Jody McIntyre d3ec6a87df Add documentation about caches for anonymous CSRF (fixes #2) 2012-01-26 12:11:06 -08:00
Jeff Balogh 25ea4dd7fa use a whitelist for http methods (fixes #3) 2012-01-26 12:05:56 -08:00
Jody McIntyre 04a545be41 Add ANON_ALWAYS setting that enables CSRF protection for all anonymous views. 2012-01-26 12:05:56 -08:00
Jeff Balogh a8c4b64f49 Merge pull request #8 from anentropic/master
allow running of TestCsrfMiddleware tests in isolation
2012-01-26 11:21:46 -08:00
anentropic c0dbb49ee5 make TestCsrfMiddleware tests work in isolation (without running the other test classes first) 2012-01-25 19:39:11 +00:00
anentropic 890060e67b only need urls for the last class after all 2012-01-25 19:38:17 +00:00
anentropic c9a0c9d7ed remove dependency on namedtuple (Py 2.6) 2012-01-25 17:51:01 +00:00
anentropic 8fb3e70785 all TestCase sub-classes need the urls attribute to run 2012-01-25 16:04:31 +00:00
Jeff Balogh 34f3361e56 Merge pull request #6 from LucianU/master
Added .gitignore file with some rules
2012-01-23 09:59:52 -08:00
Lucian Ursu 9ef830cca2 Added a .gitignore file with some rules 2011-12-21 20:41:48 +02:00
Jeff Balogh 2b32149525 adding an @anonymous_csrf_exempt decorator 2011-04-26 15:48:36 -07:00
Ricky Rosario 767da8f580 If anon token is gone from cache, create a new one. 2011-04-26 11:17:34 -04:00
Ricky Rosario 66ec98b129 Updated readme to note that CsrfMiddleware must be listed after AuthenticationMiddleware. 2011-04-25 17:09:30 -04:00
Jeff Balogh e47cb576ee make the anon cookie secure 2011-04-21 20:10:44 -07:00
Jeff Balogh 76acc509f1 beware of views that logout the user 2011-04-20 18:05:27 -07:00
Jeff Balogh 37057931ef support csrf tokens for anonymous users, bump to v0.2 2011-04-20 14:18:24 -07:00
Jeff Balogh 410ebb6ba7 csrf protection for django without cookies 2011-04-19 11:29:15 -07:00