Julien Cristau <julien.cristau@logilab.fr> [Wed, 07 May 2014 09:59:10 +0200] rev 9738
[book] uicfg moved from web to web.views a while ago
Julien Cristau <julien.cristau@logilab.fr> [Tue, 06 May 2014 15:59:39 +0200] rev 9737
[wsgi] look at wsgi.url_scheme to decide if we're on https
The server/gateway is supposed to fill it in for us.
Julien Cristau <julien.cristau@logilab.fr> [Mon, 24 Mar 2014 10:34:58 +0100] rev 9736
[web] Fix HEAD request handling (closes #3677949)
Don't special-case HEAD in CubicWebRequestBase.is_client_cache_valid so
we don't return garbage. HEAD is supposed to return the actual headers
that a GET would return, which we can't do if we bypass all the normal
cubicweb logic. In particular, we no longer always return 200, and
return the right Content-Length/Content-Type/...
Julien Cristau <julien.cristau@logilab.fr> [Fri, 16 May 2014 16:49:29 +0200] rev 9735
[wsgi] avoid reading the entire request body in memory
Import POST form handling code from
https://raw.github.com/defnull/multipart/master/multipart.py to avoid
reading arbitrary amounts of data from the network in memory.
NOTES:
- In the twisted case we limit the max request content-length to 100MB (by
default), which seems kind of arbitrary, but avoids this issue
- werkzeug.formparser has suitable code as well, but I don't know if we want to
add it as a dependency