629e9e02cd
- update to 2.0.2: * Removed support for null-bytes in the path when making a request for a file * Backward Incompatibilities - Requests to a static_view are no longer allowed to contain a null-byte in any usage to .daemon = True. * The authentication and authorization policies of Pyramid 1.x have been merged into a single security policy in Pyramid 2.0. New security APIs * It is now possible to control whether a route pattern contains * Deprecated the authentication and authorization interfaces and principal-based support. * Deprecated several ACL-related aspects of pyramid.security. Equivalent - Remove python2 support, due to pyton-venusian being only python3 - use the PyPI tarball instead of github This should mitigate attacks from Flash (See CVE-2014-4671). * Fix regression where pserve --reload would not work when running as a daemon. command, introduced the method column for displaying available request methods, and improved the view output by showing the module instead of just __repr__. tables creation. See https://github.com/Pylons/pyramid/pull/1049. Backport http-related exceptions when you wanted that exception view to override the + When the `pyramid.reload_templates` setting was true, and a Chameleon template was reloaded, and the renderer specification named a macro was reloaded due to a file change would produce the entire template body instead of just a rendering of the macro. See + Fix an obscure problem when combining a virtual root with a route with a
Dirk Mueller2024-01-02 21:18:37 +00:00
77b5dc8843
- Update to 2.0.1: * Add support for Python 3.10 and 3.11. * Copy __name__ from decorated attribute when using pyramid.decorator.reify. * Fix method signatures in docs for pyramid.config.Configurator.add_static_view and pyramid.config.Configurator.override_asset. * Remove obsolete stackframe hack used in Python 3.5.0 when showing configurator conflict errors. * Fix an error when injecting certain objects into the pshell env due to the use of !=. * Pyramid drops support for l*gettext() methods in the i18n module. These have been deprecated in Python's gettext module since 3.8, and removed in Python 3.11. * Avoid setDaemon(True) deprecation warning by updating threading API usage to .daemon = True.
Steve Kowalik2023-02-20 05:47:16 +00:00
Dominique Leuenberger
Dirk Mueller
Steve Kowalik
Markéta Machová
Tomáš Chvátal
Matej Cepl
Ondřej Súkup
Jan Matejek
Todd R
Hans-Peter Jansen
Stephan Kulow
Denisart Benjamin
Sascha Peilicke
Ismail Dönmez