Re: django.utils.functional documentation

2013-09-10 Thread Aymeric Augustin
Hi Daniele, As you noticed, the purpose of these functions isn't very well defined. They were written to fill specific use cases in the Django codebase. Before we document django.utils.functional, effectively making it a stable API, it would be best: - to define a consistent and nice API

Re: Order of INSTALLED_APPS

2013-09-10 Thread Tim Graham
Yes, here's the ticket to add validation for INSTALLED_APPS: https://code.djangoproject.com/ticket/12288 On Monday, September 9, 2013 6:32:48 PM UTC-4, German Larrain wrote: > > Hi guys > > A related question: What about repeated entries of apps in INSTALLED_APPS? > I remember seeing this once

Allowing custom attributes in Meta classes

2013-09-10 Thread Karan Lyons
Hey all, I recently opened up a ticket (https://code.djangoproject.com/ticket/21081) that turns out to be a dupe of https://code.djangoproject.com/ticket/5793, both in regards to allowing custom attributes in a model's Meta class. It was wontfix'd six years ago, the reasoning being that Meta

Re: Allowing custom attributes in Meta classes

2013-09-10 Thread Marc Tamlyn
I'm not sure either way on this one. I don't want people to get carries away with Meta, it's not a dumping ground for any old thing you like. That said, for a developer of a third party library which extends the ORM, the inability to extend Meta is very problematic. I think a balance could be

Re: GZipMiddleWare documentation

2013-09-10 Thread Daniele Procida
On Fri, Aug 9, 2013, Daniele Procida wrote: >What should the documents have to say on the subject now, in light of >? > > I'm rasising this issue again, because

[ANNOUNCE] Security releases issued (1.4.7, 1.5.3, 1.6 beta 3)

2013-09-10 Thread James Bennett
Today the Django team is issuing multiple releases -- Django 1.4.7, Django 1.5.3, and Django 1.6 beta 3 -- as part of our security process. These releases address a directory-traversal vulnerability in one of Django's built-in template tags. More details can be found on our blog:

Re: Allowing custom attributes in Meta classes

2013-09-10 Thread Russell Keith-Magee
On Tue, Sep 10, 2013 at 7:34 AM, Marc Tamlyn wrote: > I'm not sure either way on this one. I don't want people to get carries > away with Meta, it's not a dumping ground for any old thing you like. That > said, for a developer of a third party library which extends the

Re: GZipMiddleWare documentation

2013-09-10 Thread Russell Keith-Magee
Here's a draft for inclusion right underneath the heading introducing GZipMiddleware .. admonition: Security researchers recently revealed that when compression techniques (including GZipMiddlware) are used on a website, a site becomes exposed to a number of possible attacks. These approaches

Re: Allowing custom attributes in Meta classes

2013-09-10 Thread Andy McCurdy
On Sep 10, 2013, at 7:05 PM, Russell Keith-Magee wrote: > I share James' reservations about this as a feature -- attaching flags to > Meta is something I can see being abused in all sorts of ways -- but that > doesn't mean there's no legitimate uses for extensions to

Re: Support POST of application/json content type

2013-09-10 Thread S Berder
On Tue, Sep 10, 2013 at 12:17 PM, S Berder wrote: > On Tue, Sep 10, 2013 at 9:05 AM, Curtis Maloney > wrote: >> >> On 9 September 2013 19:50, S Berder wrote: >>> >>> Gents, >>> to sum it up, arguments made and details of how I