django

Commit Graph

Author	SHA1	Message	Date
Preston Holmes	d228c1192e	Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation. SuspiciousOperations have been differentiated into subclasses, and are now logged to a 'django.security.*' logger. SuspiciousOperations that reach django.core.handlers.base.BaseHandler will now return a 400 instead of a 500. Thanks to tiwoc for the report, and Carl Meyer and Donald Stufft for review.	2013-05-25 16:27:34 -07:00
Aymeric Augustin	6633eeb886	Changed API to disable ATOMIC_REQUESTS per view. A decorator is easier to apply to CBVs. Backwards compatibility isn't an issue here, except for people running on a recent clone of master. Fixed a few minor problems in the transactions docs while I was there.	2013-05-19 19:53:16 +02:00
Aymeric Augustin	ac37ed21b3	Deprecated TransactionMiddleware and TRANSACTIONS_MANAGED. Replaced them with per-database options, for proper multi-db support. Also toned down the recommendation to tie transactions to HTTP requests. Thanks Jeremy for sharing his experience.	2013-03-11 15:04:05 +01:00

Author

SHA1

Message

Date

Preston Holmes

d228c1192e

Fixed #19866 -- Added security logger and return 400 for SuspiciousOperation.

SuspiciousOperations have been differentiated into subclasses, and
are now logged to a 'django.security.*' logger. SuspiciousOperations
that reach django.core.handlers.base.BaseHandler will now return a 400
instead of a 500.

Thanks to tiwoc for the report, and Carl Meyer and Donald Stufft
for review.

2013-05-25 16:27:34 -07:00

Aymeric Augustin

6633eeb886

Changed API to disable ATOMIC_REQUESTS per view.

A decorator is easier to apply to CBVs. Backwards compatibility isn't an
issue here, except for people running on a recent clone of master.

Fixed a few minor problems in the transactions docs while I was there.

2013-05-19 19:53:16 +02:00

Aymeric Augustin

ac37ed21b3

Deprecated TransactionMiddleware and TRANSACTIONS_MANAGED.

Replaced them with per-database options, for proper multi-db support.

Also toned down the recommendation to tie transactions to HTTP requests.
Thanks Jeremy for sharing his experience.

2013-03-11 15:04:05 +01:00

3 Commits