Commit Graph
14 Commits
Author SHA1 Message Date
kelson 3bed4eee8c fixed deprecated assertRaisesRegexp
added additional coverage tests
2016-08-17 18:27:44 -04:00
kelson 2b0166a8de add_membership unittests 2016-08-17 18:14:39 -04:00
kelson fe058bf817 fixed auth.add_membership succeeding with invalid group_id/user_id 2016-08-17 17:17:34 -04:00
kelson f8f96ba613 fixed /app/static throwing AttributeError instead of HTTP(404) 2016-08-17 16:50:06 -04:00
kelson b96d0697ee use constant-time comparison to verify websocket hmac 2016-08-17 16:18:44 -04:00
kelson 4b925bf297 added PKCS #7 v1.5 padding
updated secure_dumps to use SHA256
fixed secure_dumps using truncated encryption_key hash
fixed pad ignoring blocksize argument
2016-08-17 16:08:05 -04:00
kelson 822e68ac16 simplified oneall dname handling 2016-05-06 16:10:19 -04:00
kelson 292af5adc6 fixed timing attack in gluon.utils.compare 2016-05-06 14:14:32 -04:00
kelson cbbd1246db re import required for assertRegexpMatches port 2015-08-19 11:33:47 -04:00
kelson 0a79bf3afd assertRegexpMatches requires port for python2.5 and python2.6 2015-08-19 11:30:07 -04:00
kelson db5e58e49f added HttpOnly cookies (default)
added unit tests for cookie layout, secure cookies, and HttpOnly cookies
Session.httponly_cookies=False to revert HttpOnly cookies
2015-08-19 11:25:00 -04:00
kelson cf20ce5fae _js_cookies => not httponly_cookies 2015-08-18 12:25:13 -04:00
kelson 2675e9d229 added default HttpOnly cookies 2015-08-18 10:23:29 -04:00
kelson 7ac6edae52 fix Field.Virtual use in multi-table queries 2015-07-06 08:35:58 -04:00