ilvalle
ab2cdd595b
fix utils
2016-06-13 20:20:49 +02:00
ilvalle
7259516627
fix tools
2016-06-13 20:20:44 +02:00
mdipierro
a18e0e489f
why is session.forget not callable in tests?
2016-06-12 21:08:33 -05:00
mdipierro
dfb0129f09
do not forget a missing session
2016-06-12 20:55:16 -05:00
mdipierro
cadb130518
fixed expose tests
2016-06-12 20:27:20 -05:00
mdipierro
a830f95f70
Merge branch 'ilvalle-py3_fixes'
2016-06-12 20:00:10 -05:00
mdipierro
f4a353960b
merged conflicts
2016-06-12 19:59:58 -05:00
mdipierro
c5bafa16dd
Merge pull request #1357 from chenl/master
...
fix issue#1261: security issue: gluon.tools.Expose will follow symlinks
2016-06-12 19:56:40 -05:00
Chen Rotem Levy
3c2ee85295
Merge branch 'issue_1261'
...
Adding to Expose.__init__(..., follow_symlink_out=False).
If the user didn't override this, and if the OS supports symlinks, we
test that the we will not expose any symlinks that points outside of
self.base.
Expose is not also covered by unittests.
2016-06-11 12:38:21 +03:00
Chen Rotem Levy
9877ad5155
fix in_base for base='/'
...
If the base directory already ends with '/' the test failed.
It failed because we added an extra '/' to make sure that '/foobar' is
not under '/foo', so ask '/foobar/'.startswith('/foo/').
Whoever when we have the base already start with '/' we might test:
'/foo/bar/'.startwith('/foo//'), and give a false negative. We
shouldn't have this case, because we normalized the path, but in the
case of the root directory ('/') even a normalized path ends with '/',
and thus when base='/' this function failed.
Some re-factoring was needed to make this base testable.
2016-06-11 12:19:16 +03:00
Chen Rotem Levy
e020395bdc
apply pull request #1313
...
This should have resolved security issue#1261 -- gluon.tools.Expose
symlinks, however it does not deal well with the case where the base
exposed directory is '/'
2016-06-11 11:20:23 +03:00
ilvalle
1f013d76f3
minor few fix
2016-06-10 14:14:40 +02:00
ilvalle
3103226686
revert fcgi changes
2016-06-10 14:14:39 +02:00
mdipierro
15a26c00b1
Merge pull request #1352 from zvolsky/_revert_wiki
...
revert wiki to earlier (properly working) state
2016-06-07 20:36:52 -05:00
mdipierro
df9928d69c
Merge pull request #1349 from zvolsky/_represent_none
...
represent none
2016-06-07 20:36:01 -05:00
ilvalle
fd850ab46f
fix validators, updated gluon/contrib/ipaddr
2016-06-07 19:50:49 +02:00
zvolsky
225a286162
revert wiki to earlier (properly working) state
2016-06-07 15:10:03 +02:00
zvolsky
876508a227
grid: custom representation of None value, in view
2016-06-06 12:43:11 +02:00
zvolsky
0c52f2a561
grid: custom representation of None value
2016-06-06 12:25:06 +02:00
ilvalle
92374741ff
fix rewrite, enabled test_router & test_routes
2016-06-04 17:42:36 +02:00
ilvalle
71ba0e515f
updated portalocker, few py3 syntax/import fix
2016-06-04 14:07:42 +02:00
ilvalle
dcd24cf88c
Updated fpdf to the last version (py3 compatible), fix contrib/appconfig
2016-06-04 09:23:31 +02:00
ilvalle
2f7d76769c
typo in globals
2016-06-03 23:44:45 +02:00
mdipierro
154073c3a6
Merge pull request #1341 from nextghost/master
...
Ignore internal attributes when checking whether new session was changed
2016-06-03 10:04:00 -05:00
mdipierro
14ac911ce7
Merge pull request #1344 from michele-comitini/jwt-renew-fix
...
Jwt renew fix
2016-06-03 10:02:41 -05:00
mdipierro
1554a29f5f
Merge pull request #1345 from niphlod/fix/codecov
...
should turn off the codecov/changes report
2016-06-03 10:02:09 -05:00
ilvalle
97eb013831
fix test_html and test_template for py3
2016-06-03 11:46:32 +02:00
ilvalle
db8306b5c4
fix iteritems, enabled test_cache & test_dal for 3.5
2016-06-02 17:21:36 +02:00
ilvalle
707330accd
Enabled 3.5 on travis
2016-06-02 16:06:49 +02:00
ilvalle
a1fd92b7f8
updated imports in tests
2016-06-02 14:28:21 +02:00
ilvalle
01bab81432
manually adapt few imports
2016-06-01 20:16:30 +02:00
niphlod
850d79c287
should turn off the codecov/changes report
2016-06-01 00:50:01 +02:00
Michele Comitini
67f85fd631
allow token renewal with http authorization header.
2016-05-31 23:55:58 +02:00
ilvalle
aa2bf4134e
introduced _compact from pydal
2016-05-31 20:12:50 +02:00
ilvalle
48e10a3793
running libfuturize.fixes.fix_print_with_import
2016-05-30 21:23:40 +02:00
ilvalle
36ca754c77
running libfuturize.fixes.fix_raise
2016-05-30 18:03:48 +02:00
ilvalle
d74413bc16
running lib2to3.fixes.fix_methodattrs
2016-05-30 18:03:48 +02:00
ilvalle
02e0cd187a
running lib2to3.fixes.fix_has_key
2016-05-29 08:31:20 +02:00
ilvalle
9588ba690c
running lib2to3.fixes.fix_tuple_params
2016-05-29 08:31:20 +02:00
ilvalle
a5599f3eab
running lib2to3.fixes.fix_idioms
2016-05-29 08:31:20 +02:00
ilvalle
9b9ed0ad0f
running lib2to3.fixes.fix_funcattrs
2016-05-29 08:31:20 +02:00
ilvalle
8074927191
running lib2to3.fixes.fix_renames
2016-05-29 08:31:19 +02:00
ilvalle
35900da19b
running lib2to3.fixes.fix_except
2016-05-29 08:31:19 +02:00
ilvalle
14830e8906
running lib2to3.fixes.fix_standarderror
2016-05-29 08:31:19 +02:00
ilvalle
d22222ebea
running lib2to3.fixes.fix_reduce
2016-05-29 08:31:19 +02:00
ilvalle
ec8ea53917
running lib2to3.fixes.fix_apply
2016-05-29 07:45:46 +02:00
Martin Doucha
40b8a4d75d
Whitespace fix
2016-05-28 22:25:58 +02:00
Martin Doucha
54e443dfad
Ignore internal attributes when checking whether new session was changed
2016-05-28 21:54:24 +02:00
ilvalle
8d213a5b87
fix local import in __init__.py
2016-05-27 14:42:22 +02:00
Michele Comitini
95c1a734d1
fix wrong reference to request out of current namespace
2016-05-27 00:23:25 +02:00