From b7f3f45b805db908c13a8394bb823ff084da22f4eee695a41733d1249cc0538d Mon Sep 17 00:00:00 2001 From: Todd R Date: Mon, 3 Aug 2015 12:34:16 +0000 Subject: [PATCH] Accepting request 320145 from home:frispete:python rephrased changelog OBS-URL: https://build.opensuse.org/request/show/320145 OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-pyramid?expand=0&rev=20 --- fix_mimetype_tests.patch | 35 -------------------------------- pyramid-1.5.2.tar.gz | 3 --- pyramid-1.5.7.tar.gz | 3 +++ python-pyramid.changes | 44 ++++++++++++++++++++++++++++++++++++++++ python-pyramid.spec | 10 ++++----- 5 files changed, 51 insertions(+), 44 deletions(-) delete mode 100644 fix_mimetype_tests.patch delete mode 100644 pyramid-1.5.2.tar.gz create mode 100644 pyramid-1.5.7.tar.gz diff --git a/fix_mimetype_tests.patch b/fix_mimetype_tests.patch deleted file mode 100644 index 178655e..0000000 --- a/fix_mimetype_tests.patch +++ /dev/null @@ -1,35 +0,0 @@ -commit 7a76cd0b183d5080ec863a7d494008e65469f683 -Author: Domen Kožar -Date: Tue Nov 11 08:02:09 2014 +0100 - - fixes #1405 - -diff --git a/pyramid/tests/test_response.py b/pyramid/tests/test_response.py -index a16eb8d..84ec577 100644 ---- a/pyramid/tests/test_response.py -+++ b/pyramid/tests/test_response.py -@@ -1,4 +1,5 @@ - import io -+import mimetypes - import os - import unittest - from pyramid import testing -@@ -51,15 +52,11 @@ class TestFileResponse(unittest.TestCase): - r.app_iter.close() - - def test_without_content_type(self): -- for suffix, content_type in ( -- ('txt', 'text/plain; charset=UTF-8'), -- ('xml', 'application/xml; charset=UTF-8'), -- ('pdf', 'application/pdf') -- ): -+ for suffix in ('txt', 'xml', 'pdf'): - path = self._getPath(suffix) - r = self._makeOne(path) -- self.assertEqual(r.content_type, content_type.split(';')[0]) -- self.assertEqual(r.headers['content-type'], content_type) -+ self.assertEqual(r.headers['content-type'].split(';')[0], -+ mimetypes.guess_type(path, strict=False)[0]) - r.app_iter.close() - - def test_python_277_bug_15207(self): diff --git a/pyramid-1.5.2.tar.gz b/pyramid-1.5.2.tar.gz deleted file mode 100644 index c434841..0000000 --- a/pyramid-1.5.2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:12057e63c9c99f88bc71af12f00a5e2c934221122baf582c7365361cba45bdcc -size 2422156 diff --git a/pyramid-1.5.7.tar.gz b/pyramid-1.5.7.tar.gz new file mode 100644 index 0000000..f64df6f --- /dev/null +++ b/pyramid-1.5.7.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:c1302d5ccb6833e8794ddb649aa9bb64d86c05adb127c93e329f8863907449b4 +size 2678474 diff --git a/python-pyramid.changes b/python-pyramid.changes index a6e0039..6b396ae 100644 --- a/python-pyramid.changes +++ b/python-pyramid.changes @@ -1,3 +1,47 @@ +------------------------------------------------------------------- +Thu Jul 30 14:16:47 UTC 2015 - hpj@urpla.net + +- 1.5.7 (2015-04-28) + * Further fix the JSONP renderer by prefixing the returned content with a comment. + This should mitigate attacks from Flash (See CVE-2014-4671). + See https://github.com/Pylons/pyramid/pull/1648 + * Allow periods and brackets ([]) in the JSONP callback. The original fix was + overly-restrictive and broke Angular. See https://github.com/Pylons/pyramid/pull/1648 + +- 1.5.6 (2015-04-14) + * 1.5.5 was a brown-bag release which was missing files. + +- 1.5.5 (2015-04-14) + * The JSONP renderer created JavaScript code in such a way that a callback variable + could be used to arbitrarily inject javascript into the response object. + https://github.com/Pylons/pyramid/pull/1626 + +- 1.5.4 (2015-02-24) + * Fix regression where pserve --reload would not work when running as a daemon. + Backported from https://github.com/Pylons/pyramid/pull/1592 + +- 1.5.3 (2015-02-22) + * Work around an issue where pserve --reload would leave terminal echo disabled if it + reloaded during a pdb session. Backported from https://github.com/Pylons/pyramid/pull/1577 + * Fixed a failing unittest caused by differing mimetypes on various OS platforms. + See https://github.com/Pylons/pyramid/issues/1405 + * Overall improvments for the proutes command. Added --format and --glob arguments to the + command, introduced the method column for displaying available request methods, and + improved the view output by showing the module instead of just __repr__. + See: https://github.com/Pylons/pyramid/pull/1542 + * The pyramid.renderers.JSONP renderer would raise an exception if used without a request + object. It will now fallback to behave like the pyramid.renderers.JSON renderer if + there is no request object to derive a callback from. + See https://github.com/Pylons/pyramid/pull/1562 + * Prevent “parameters to load are deprecated” DeprecationWarning from setuptools>=11.3. + See https://github.com/Pylons/pyramid/pull/1541 + * Avoiding timing attacks against CSRF tokens. Backported from + https://github.com/Pylons/pyramid/pull/1574 + * pserve can now take a -b or --browser option to open the server URL in a web browser. + See https://github.com/Pylons/pyramid/pull/1533 + +- remove mimetype test patch, applied upstream + ------------------------------------------------------------------- Fri Feb 6 16:31:11 UTC 2015 - hpj@urpla.net diff --git a/python-pyramid.spec b/python-pyramid.spec index d48e52d..139ba78 100644 --- a/python-pyramid.spec +++ b/python-pyramid.spec @@ -1,7 +1,7 @@ # # spec file for package python-pyramid # -# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # Copyright (c) 2015 LISA GmbH, Bingen, Germany. # # All modifications and additions to the file contributed by third parties @@ -18,14 +18,13 @@ Name: python-pyramid -Version: 1.5.2 +Version: 1.5.7 Release: 0 Url: http://pylonsproject.org -Summary: The Pyramid web application development framework, a Pylons project +Summary: The Pyramid web application development framework License: BSD-4-Clause and ZPL-2.1 and MIT Group: Development/Languages/Python Source: http://pypi.python.org/packages/source/p/pyramid/pyramid-%{version}.tar.gz -Patch1: fix_mimetype_tests.patch Requires: python-PasteDeploy >= 1.5.0 Requires: python-WebOb >= 1.3.1 Requires: python-repoze.lru >= 0.4 @@ -74,7 +73,7 @@ Pyramid is the newest web framework produced by the Pylons Project Pyramid was previously known as repoze.bfg (http://bfg.repoze.org). %package doc -Summary: The Pyramid web application development framework, a Pylons project +Summary: The Pyramid web application development framework Group: Development/Languages/Python Requires: %{name} = %{version} @@ -83,7 +82,6 @@ This package contains documentation files for %{name}. %prep %setup -q -n pyramid-%{version} -%patch1 -p1 %build python setup.py build