Sylvain Thénault <sylvain.thenault@logilab.fr> [Wed, 09 Apr 2014 17:15:25 +0200] rev 9747
[repo] make it clear in internal_cnx that security is disabled
as explained in its docstring. It was previously relying on internal
connection's fake user (InternalManager) for read security and on disabling
security hooks for write security. Using the security_enabled context manager is
more readable and more reliable: while the older implementation works thanks to
the InternalManager associated to the session, custom hooks should rely
on session.[read|write]_security being correctly set. This change also
allows selecting Password attributes in internal connections without
explicitly disabling read security.
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 04 Apr 2014 18:23:02 +0200] rev 9746
[datafeed] update datafeed internals to use connection instead of session
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 04 Apr 2014 17:57:58 +0200] rev 9745
[test] update sobjects/test/unittest_notification to cw 3.19 api
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 04 Apr 2014 17:56:00 +0200] rev 9744
[test] simplify setup of sobjects/test/unittest_supervising.py
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 04 Apr 2014 17:54:29 +0200] rev 9743
[test] update sobjects/test/unittest_supervising to cw 3.19 api
Sylvain Thénault <sylvain.thenault@logilab.fr> [Fri, 04 Apr 2014 17:53:58 +0200] rev 9742
[test] update sobjects/test/unittest_email to cw 3.19 api
Julien Cristau <julien.cristau@logilab.fr> [Tue, 06 May 2014 16:00:36 +0200] rev 9741
[wsgi] the spec says wsgi.url_scheme *must* be provided
No need to be defensive, anything else is a bug in the gateway.
Adrien Di Mascio <Adrien.DiMascio@logilab.fr> [Mon, 12 May 2014 12:37:19 +0200] rev 9740
[shell] provide autocompletion for rql queries in cubicweb-ctl shell (closes #3560541)
Use the ``rql.suggestions`` component to complete user's input
- readline calls the ``complete`` method with user's input,
- the ``complete`` method asks for each known completers if
it can suggest completions for user's input.
Julien Cristau <julien.cristau@logilab.fr> [Fri, 18 Apr 2014 14:33:40 +0200] rev 9739
[book] avoid '~' in all-in-one.conf, it is not expanded
Closes #3753213
Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 May 2014 09:59:10 +0200] rev 9738
[book] uicfg moved from web to web.views a while ago
Julien Cristau <julien.cristau@logilab.fr> [Tue, 06 May 2014 15:59:39 +0200] rev 9737
[wsgi] look at wsgi.url_scheme to decide if we're on https
The server/gateway is supposed to fill it in for us.
Julien Cristau <julien.cristau@logilab.fr> [Mon, 24 Mar 2014 10:34:58 +0100] rev 9736
[web] Fix HEAD request handling (closes #3677949)
Don't special-case HEAD in CubicWebRequestBase.is_client_cache_valid so
we don't return garbage. HEAD is supposed to return the actual headers
that a GET would return, which we can't do if we bypass all the normal
cubicweb logic. In particular, we no longer always return 200, and
return the right Content-Length/Content-Type/...
Julien Cristau <julien.cristau@logilab.fr> [Fri, 16 May 2014 16:49:29 +0200] rev 9735
[wsgi] avoid reading the entire request body in memory
Import POST form handling code from
https://raw.github.com/defnull/multipart/master/multipart.py to avoid
reading arbitrary amounts of data from the network in memory.
NOTES:
- In the twisted case we limit the max request content-length to 100MB (by
default), which seems kind of arbitrary, but avoids this issue
- werkzeug.formparser has suitable code as well, but I don't know if we want to
add it as a dependency
Aurelien Campeas <aurelien.campeas@logilab.fr> [Tue, 13 May 2014 18:47:52 +0200] rev 9734
Added tag cubicweb-version-3.17.15, cubicweb-debian-version-3.17.15-1, cubicweb-centos-version-3.17.15-1 for changeset ee413076752b