Re: how to exclude some views from csrf checking

2011-09-28 Thread Viktor Nagy
thanks a lot! On Thu, Sep 29, 2011 at 5:29 AM, cd34 wrote: > On Sep 24, 7:29 am, Viktor Nagy wrote: > > I'm building a site that uses apex for site-wide auth functionalities, > and > > would like to use pyramid_rpc for amf gatewaying. But apex adds csrf > > checking for every POST request. > >

Re: how to exclude some views from csrf checking

2011-09-28 Thread cd34
On Sep 24, 7:29 am, Viktor Nagy wrote: > I'm building a site that uses apex for site-wide auth functionalities, and > would like to use pyramid_rpc for amf gatewaying. But apex adds csrf > checking for every POST request. I've entered this on the issues and will have a suitable fix in the next da

Re: possible regression error re IncudeOverrides in Pyramid 1.2

2011-09-28 Thread Chris McDonough
What version of pyramid_zcml are you running? Can you paste the smallest bit of zcml that fails for you? On Wed, 2011-09-28 at 16:18 -0700, Iain Duncan wrote: > Hey folks, I discovered that my zcml using includeOverrides chokes > when I upgrade to Pyramid 1.2. I have tested that the issue goes aw

possible regression error re IncudeOverrides in Pyramid 1.2

2011-09-28 Thread Iain Duncan
Hey folks, I discovered that my zcml using includeOverrides chokes when I upgrade to Pyramid 1.2. I have tested that the issue goes away or reappears from doing nothing except switching my pyramid egg from 1.1 to 1.2 I have some packages with zcml in them, I include some others that redefine route

Re: pyramid_tm: problem upgrading to 0.3

2011-09-28 Thread Michael Merickel
pyramid_tm is now a tween placed under excview. Thus the pipeline for a request ends up: wsgi server <-> exception views <-> pyramid_tm <-> pyramid So the issue here is that pyramid_tm actually expires the commit *before* the exception view is executed. This means that you cannot do database

Pyramid 1.2.1 released

2011-09-28 Thread Chris McDonough
Pyramid 1.2.1 has been released. This is a bug fix release. The changes from 1.2 are as follows: Features - Lone instance methods can now be treated as view callables (see https://github.com/Pylons/pyramid/pull/283). Bug Fixes - - Update auth_tkt authentication