Pylons

Latest version: v1.0.3

Safety actively analyzes 621920 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 4

1.0.2

* In the event of a NilAccept for the language, request.languages() would
throw an AttributeError exception. Fixes 24.
* Encode Location HTTP header in redirect responses in UTF-8. Per
RFC 3987. Refers to 15.
* Remove "Post Traceback" as it was a possible XSS vector with prior versions
of WebError, and the PylonsHQ site is no longer in existence to support them.

1.0.1

Not secure
* No changes since RC1.

1.0.1rc1

Not secure
* WARNING: pylons.lib.decorators has had two functions removed:
``determine_response_charset`` and ``encode_formencode_errors``.
* Updated dependencies to latest versions of Paste, PasteDeploy, and
compatibility for the latest WebOb 1.2 betas.
* authenticate_form allows for GET. Patch by Domen Kožar.
* jsonify now properly sets charset to utf-8.
* Add ability for jsonify to handle objects with a __json__ attribute using
custom JSONEncoder class similar to TG2. Patch by Bob Farrell.
* Added ability for __before__ to reference a callable function. Patch
contributed by mverdone.
* Pulled in JSON-RPC support from agentultra's pylons fork.
* Apply patch for proper pylons.__version__ under Windows. Contributed by
Christoph Zwerschke.
* Utilize MarkupSafe for faster HTML escaping.
* Fix signed cookies by using standard base64 alphabet, and prevent timing
attacks on signature comparison.
* Added setup of app_globals and config to Pylons config.init_app to ensure
as long as the Pylons application is loaded, the app_globals and config
will be appropriately initialized.
* Documentation updates.

1.0

Not secure
* Minor tweak to allow proper importing of pylons.

1.0rc1

* Switched to using Routes 1.12 with support for no longer using the odd
routes singleton.
* Removed pylons.middleware.StaticJavascripts, this is not used anymore.
* Added more unit tests.

1.0b1

* Removed CacheMiddleware. cache object is now setup as an attribute on the
app_globals object for use where needed.
* WARNING: config only supports dict access
* WARNING: Method arguments no longer assigned to 'tmpl_context' by default.
* WARNING: Changed default to strict_tmpl_context.
* WARNING: Removed legacy pylons.c and pylons.g globals.
* WARNING: Removed legacy pylons.database module.
* WARNING: Removed legacy pylons.config module.
* WARNING: Removed Buffet options, setup, and legacy render/render_response
function from pylons.templating. This also means config no longer accepts
the add_template_engine option.
* WARNING: Removed legacy redirect_to function.
* WARNING: https decorator no longer accepts url_for-like arguments.
* Add a "paster routes" command. This prints the mapper, which from Routes
1.12 onwards gives sensibly formatted output.
* Fix unit tests on Windows
* Prepare for Routes 1.12, ensure tests don't assume implicit routing

Page 1 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.