Re: BitBounce Spam Replies From the Mailing List

2019-01-01 Thread Daniele Procida
On Wed, Jan 2, 2019, Daniele Procida wrote: >On Tue, Jan 1, 2019, Daniele Procida wrote: > >>If it continues to be an issue I will disable their receipt of email >>temporarily. I assume I'll get the auto-replies myself to this message. > >One user's email receipt disabled so far; the user has

Re: BitBounce Spam Replies From the Mailing List

2019-01-01 Thread Daniele Procida
On Tue, Jan 1, 2019, Daniele Procida wrote: >If it continues to be an issue I will disable their receipt of email >temporarily. I assume I'll get the auto-replies myself to this message. One user's email receipt disabled so far; the user has been informed. Daniele -- You received this

Re: CSRF Middlware and usage of request attributes (META, csrf_cookie_needs_reset)

2019-01-01 Thread Adam Johnson
Thanks Luke for your look-again-later self code review :) On Tue, 1 Jan 2019 at 16:51, Luke Plant wrote: > Hi Florian, > > My own instincts would be steer away from writing to request.META for most > things, because request.META also contains things from the environment and > indeed from the

Re: CSRF Middlware and usage of request attributes (META, csrf_cookie_needs_reset)

2019-01-01 Thread Luke Plant
Hi Florian, My own instincts would be steer away from writing to request.META for most things, because request.META also contains things from the environment and indeed from the user request. You really don't want an attacker to be able to set an HTTP header and bypass security controls or

Re: Listening for postgres NOTIFY with django.db - adding support for connection.fileno()

2019-01-01 Thread Florian Apolloner
Hi, On Monday, December 31, 2018 at 12:38:31 PM UTC+1, Fábio Molinar wrote: > > Is this currently not supported or am I missing something? I though that > the django.db is kind of just a wrapper around the actual psycopg2 library. > So I wonder why I can't use the fileno() method on it. >