[Repoze-dev] [issue40] keeping secrets in a file

2008-06-10 Thread Ian Bicking
New submission from Ian Bicking <[EMAIL PROTECTED]>: I noticed (in the blog post) that the configuration takes secrets directly in the configuration. I don't like to have secret config files, and just one secret infects the whole file. For this reason I like to have an option to put

[Repoze-dev] [issue41] INITools for zc.buildout-style config files

2008-06-10 Thread Ian Bicking
New submission from Ian Bicking <[EMAIL PROTECTED]>: You might want to look at INITools (http://svn.colorstudy.com/INITools/trunk) for configuration parsing, as it allows things similar to what zc.buildout does in configuration files, extending other files and variable interpolation

Re: [Repoze-dev] repoze.bfg

2008-07-16 Thread Ian Bicking
ed. Routes basically gives you a way to write translations from the URL to objects. Though even then in Pylons it relies on controllers to even more translation work, though pointing routes directly at models would be entirely possible. -- Ian Bicking : [EMAIL PROTECTED] : http://blog.ianbicking.org ___ Repoze-dev mailing list Repoze-dev@lists.repoze.org http://lists.repoze.org/listinfo/repoze-dev

Re: [Repoze-dev] repoze.bfg

2008-07-17 Thread Ian Bicking
x27;s text search indexes, but other kinds of more strict indexes also make sense. It would be very handy to have an index that wasn't tied to the ZODB, a database, or anything else. (It could be implemented using the ZODB or a database, of course.) -- Ian Bicking : [EMAI

Re: [Repoze-dev] repoze.bfg

2008-07-17 Thread Ian Bicking
call __geitem__ the whole way through the model graph until we > either exhaust the path or find an item that doesnt have a __getitem__ > or whose __getitem__ raises a KeyError. The "next" name becomes the > view name. Any leftover path elements become a "subpath". It

Re: [Repoze-dev] repoze.bfg

2008-07-17 Thread Ian Bicking
needs documenting and review (http://www.openplans.org/projects/cabochon/project-home) but while it handles notifications and events (as do several other systems), that doesn't cover reindexing the site. And then you also need a set of useful endpoints, but those can grow over time. -- Ian Bicking : [EMAIL PROTECTED] : http://blog.ianbicking.org ___ Repoze-dev mailing list Repoze-dev@lists.repoze.org http://lists.repoze.org/listinfo/repoze-dev

Re: [Repoze-dev] repoze.bfg

2008-07-17 Thread Ian Bicking
Chris McDonough wrote: > Does this make more sense now? Say yes even if it doesn't because this > took a lot of typing. ;-) Yes ;) You can leverage your typing by copying that into the docs too ;) -- Ian Bicking : [EMAIL PROTECTED] : http://blog.ian

Re: [Repoze-dev] [ANN] EggFreezer

2008-08-05 Thread Ian Bicking
that I'm forgetting. (If there's actually platform-dependent files in there, if not it'd be nice to leave out the platform entirely.) -- Ian Bicking : [EMAIL PROTECTED] : http://blog.ianbicking.org ___ Repoze-dev mailing list Repoze-de

[Repoze-dev] [Fwd: Re: ProfileMiddleware logging]

2008-10-30 Thread Ian Bicking
the cheese shop: http://pypi.python.org/pypi/WSGIProfile I've also started a little documentation at http://wsgiprofile.pepper-box.com/ Stephen Emslie On Thu, Oct 30, 2008 at 4:08 PM, Ian Bicking <[EMAIL PROTECTED]> wrote: > > Pavel Skvazh wrote: >> I'm having problem

Re: [Repoze-dev] bfg and google app engine

2009-01-16 Thread Ian Bicking
nce we know it is possible, then > > packaging BFG and its full dependency set into a ZIP file would be the > > next step. > > I wonder how much this is actually worth persuing before GAE has support > for C-extensions such as zope.component? > If you wait for that, yo

Re: [Repoze-dev] repoze.plugin documentation

2009-04-29 Thread Ian Bicking
hould be a first-class patter. Also, at least half the time or more I think a function is going to be registered. There seems to be a class bias in several places, though maybe I'm misreading that. An ambiguity: for this case, do you plug in the render function, a load_template function, a

Re: [Repoze-dev] templating engine speed comparisions

2009-05-01 Thread Ian Bicking
: > > Are there any speed-comparison suites for templating engines out there? > Would be really interesting to compare them all... > Genshi developed a benchmark that a number of template languages have also used for comparison: http://genshi.edgewall.org/wiki/GenshiPerformance -- Ian Bicki

[Repoze-dev] Fwd: JS Hashing - Initial Thoughts

2009-05-13 Thread Ian Bicking
tice is to use a salt, to make things harder for an attacker, just > in case your password database is captured. The scheme I favor is > storing hmac_sha1(hmac_sha1(master_salt, user_name), password). > master_salt is a per-site value. What is the advantage of "hmac_sha1(master_salt, user_nam

[Repoze-dev] Paste 1.7.4, security fix for XSS hole

2010-06-24 Thread Ian Bicking
schke <http://sensepost.com>. I'm sorry about this, I hope this won't cause you too much trouble. -- Ian Bicking | http://blog.ianbicking.org ___ Repoze-dev mailing list Repoze-dev@lists.repoze.org http://lists.repoze.org/listinfo/repoze-dev

[Repoze-dev] WebOb 1.0

2010-09-14 Thread Ian Bicking
nks to everyone who helped, and in particular to Sergey Schetinin for his ongoing help with many a bug fix. -- Ian Bicking | http://blog.ianbicking.org ___ Repoze-dev mailing list Repoze-dev@lists.repoze.org http://lists.repoze.org/listinfo/repoze-dev

[Repoze-dev] Passing on primary WebOb maintainership to Sergey Schetinin

2011-02-14 Thread Ian Bicking
Hi all. I've decided to pass primary maintainer duties to Sergey Schetinin (maluke) for WebOb -- while I have attended to WebOb sporadically he has been far more consistent in responding to bugs and inquiries, and in many ways has been acting maintainer. So I think it fitting to make that more fo

Re: [Repoze-dev] Passing on primary WebOb maintainership to Sergey Schetinin

2011-02-14 Thread Ian Bicking
Oops, I forgot to mention that Sergey started a blog in part with the intention of posting on WebOb and related things: http://self.maluke.com/ On Mon, Feb 14, 2011 at 3:01 PM, Ian Bicking wrote: > Hi all. > > I've decided to pass primary maintainer duties to Sergey Schetinin