Hi. In the course of upgrading a project to TG 1.5, I have run into two issues. I tried to file them in trac, but was rejected as spam.
Issue 1: Quickstart a project with identity and visit in TG 1.5b2. Modify dev.cfg to add visit.cookie.path='/' Start the server and visit in your browser. Observe the cookies that are set (e.g., using Firebug). Rather than having a Path of /, the visit cookie is set with a Path equal to the string representation of a dictionary containing all our config settings. This not only causes the cookie not to work, but also exposes critical information including the database connection string with password. Issue 2: Quickstart a project with identity and visit in TG 1.5b2. Modify dev.cfg to add server.webpath='/' Start the server and visit in your browser. The css does not load properly due the URLs having an extra slash. -- You received this message because you are subscribed to the Google Groups "TurboGears" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/turbogears?hl=en.
