Flask

Latest version: v3.0.3

Safety actively analyzes 620978 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 9 of 10

0.7

Not secure
-----------

Released 2011-06-28, codename Grappa

- Added ``Flask.make_default_options_response`` which can be used by
subclasses to alter the default behavior for ``OPTIONS`` responses.
- Unbound locals now raise a proper ``RuntimeError`` instead of an
``AttributeError``.
- Mimetype guessing and etag support based on file objects is now
deprecated for ``send_file`` because it was unreliable. Pass
filenames instead or attach your own etags and provide a proper
mimetype by hand.
- Static file handling for modules now requires the name of the static
folder to be supplied explicitly. The previous autodetection was not
reliable and caused issues on Google's App Engine. Until 1.0 the old
behavior will continue to work but issue dependency warnings.
- Fixed a problem for Flask to run on jython.
- Added a ``PROPAGATE_EXCEPTIONS`` configuration variable that can be
used to flip the setting of exception propagation which previously
was linked to ``DEBUG`` alone and is now linked to either ``DEBUG``
or ``TESTING``.
- Flask no longer internally depends on rules being added through the
``add_url_rule`` function and can now also accept regular werkzeug
rules added to the url map.
- Added an ``endpoint`` method to the flask application object which
allows one to register a callback to an arbitrary endpoint with a
decorator.
- Use Last-Modified for static file sending instead of Date which was
incorrectly introduced in 0.6.
- Added ``create_jinja_loader`` to override the loader creation
process.
- Implemented a silent flag for ``config.from_pyfile``.
- Added ``teardown_request`` decorator, for functions that should run
at the end of a request regardless of whether an exception occurred.
Also the behavior for ``after_request`` was changed. It's now no
longer executed when an exception is raised.
- Implemented ``has_request_context``.
- Deprecated ``init_jinja_globals``. Override the
``Flask.create_jinja_environment`` method instead to achieve the
same functionality.
- Added ``safe_join``.
- The automatic JSON request data unpacking now looks at the charset
mimetype parameter.
- Don't modify the session on ``get_flashed_messages`` if there are no
messages in the session.
- ``before_request`` handlers are now able to abort requests with
errors.
- It is not possible to define user exception handlers. That way you
can provide custom error messages from a central hub for certain
errors that might occur during request processing (for instance
database connection errors, timeouts from remote resources etc.).
- Blueprints can provide blueprint specific error handlers.
- Implemented generic class-based views.

0.6.1

Not secure
-------------

Released 2010-12-31

- Fixed an issue where the default ``OPTIONS`` response was not
exposing all valid methods in the ``Allow`` header.
- Jinja2 template loading syntax now allows "./" in front of a
template load path. Previously this caused issues with module
setups.
- Fixed an issue where the subdomain setting for modules was ignored
for the static folder.
- Fixed a security problem that allowed clients to download arbitrary
files if the host server was a windows based operating system and
the client uses backslashes to escape the directory the files where
exposed from.

0.6

Not secure
-----------

Released 2010-07-27, codename Whisky

- After request functions are now called in reverse order of
registration.
- OPTIONS is now automatically implemented by Flask unless the
application explicitly adds 'OPTIONS' as method to the URL rule. In
this case no automatic OPTIONS handling kicks in.
- Static rules are now even in place if there is no static folder for
the module. This was implemented to aid GAE which will remove the
static folder if it's part of a mapping in the .yml file.
- ``Flask.config`` is now available in the templates as ``config``.
- Context processors will no longer override values passed directly to
the render function.
- Added the ability to limit the incoming request data with the new
``MAX_CONTENT_LENGTH`` configuration value.
- The endpoint for the ``Module.add_url_rule`` method is now optional
to be consistent with the function of the same name on the
application object.
- Added a ``make_response`` function that simplifies creating response
object instances in views.
- Added signalling support based on blinker. This feature is currently
optional and supposed to be used by extensions and applications. If
you want to use it, make sure to have ``blinker`` installed.
- Refactored the way URL adapters are created. This process is now
fully customizable with the ``Flask.create_url_adapter`` method.
- Modules can now register for a subdomain instead of just an URL
prefix. This makes it possible to bind a whole module to a
configurable subdomain.

0.5.2

Not secure
-------------

Released 2010-07-15

- Fixed another issue with loading templates from directories when
modules were used.

0.5.1

Not secure
-------------

Released 2010-07-06

- Fixes an issue with template loading from directories when modules
where used.

0.5

Not secure
-----------

Released 2010-07-06, codename Calvados

- Fixed a bug with subdomains that was caused by the inability to
specify the server name. The server name can now be set with the
``SERVER_NAME`` config key. This key is now also used to set the
session cookie cross-subdomain wide.
- Autoescaping is no longer active for all templates. Instead it is
only active for ``.html``, ``.htm``, ``.xml`` and ``.xhtml``. Inside
templates this behavior can be changed with the ``autoescape`` tag.
- Refactored Flask internally. It now consists of more than a single
file.
- ``send_file`` now emits etags and has the ability to do conditional
responses builtin.
- (temporarily) dropped support for zipped applications. This was a
rarely used feature and led to some confusing behavior.
- Added support for per-package template and static-file directories.
- Removed support for ``create_jinja_loader`` which is no longer used
in 0.5 due to the improved module support.
- Added a helper function to expose files from any directory.

Page 9 of 10

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.