| Thu, 29 Nov 2007 19:14:51 +0000 |
aronacher |
improved loader security
experimental-sandboxed
|
| Thu, 29 Nov 2007 18:51:48 +0000 |
aronacher |
loader raises an SecurityException in restricted mode if absolute paths are used
experimental-sandboxed
|
| Thu, 29 Nov 2007 18:08:37 +0000 |
aronacher |
added first (and pretty useless) test for the restricted branch
experimental-sandboxed
|
| Thu, 29 Nov 2007 18:07:32 +0000 |
aronacher |
merged trunk into sandbox branch
experimental-sandboxed
|
| Thu, 22 Nov 2007 22:07:15 +0000 |
cmlenz |
The `TextSerializer` class no longer strips all markup in text by default, so that it is still possible to use the Genshi `escape` function even with text templates. The old behavior is available via the `strip_markup` option of the serializer. Closes #146.
trunk
|
| Thu, 22 Nov 2007 20:36:00 +0000 |
cmlenz |
Allow use of py:replace as element. Closes #144.
trunk
|
| Thu, 22 Nov 2007 20:04:23 +0000 |
cmlenz |
Add unit test for #157, which seems to be working okay in trunk.
trunk
|
| Thu, 22 Nov 2007 19:43:05 +0000 |
cmlenz |
The `striptags` function now also removes HTML/XML-style comments. Closes #150. Thanks to Armin Ronacher for the report and suggested fix.
trunk
|
| Thu, 22 Nov 2007 19:35:17 +0000 |
cmlenz |
Fix thread-safety problem in template code evaluation. Closes #158. Thanks to Christian Boos for the patch.
trunk
|
| Thu, 22 Nov 2007 19:19:17 +0000 |
cmlenz |
Fix test to work on Python 2.5.1 which has a different exception message.
trunk
|
| Thu, 22 Nov 2007 19:18:34 +0000 |
cmlenz |
Fix typo in benchmark info output.
trunk
|
| Thu, 08 Nov 2007 18:27:47 +0000 |
cmlenz |
The template engine plugin no longer adds the `default_doctype` when the `fragment` parameter is `True`. Thanks to dbrattli for the patch!
trunk
|
| Mon, 08 Oct 2007 08:04:58 +0000 |
cmlenz |
Code blocks in match templates are now executed. Closes #155. Many thanks to Andrew Sutherland for the patch!
trunk
|
| Mon, 01 Oct 2007 09:32:46 +0000 |
cmlenz |
Fix typo in docs. Closes #153.
trunk
|
| Wed, 26 Sep 2007 19:26:06 +0000 |
aronacher |
some more changes on the sandboxed branch
experimental-sandboxed
|
| Wed, 26 Sep 2007 17:56:41 +0000 |
aronacher |
restricted is the new secure
experimental-sandboxed
|
| Wed, 26 Sep 2007 17:07:27 +0000 |
aronacher |
removed getattr
experimental-sandboxed
|
| Wed, 26 Sep 2007 17:01:16 +0000 |
aronacher |
readded lambda, it's better to wrap the rendering with a try/except and check for a RuntimeError that represents recursion
experimental-sandboxed
|
| Wed, 26 Sep 2007 14:54:41 +0000 |
aronacher |
disallow lambda in secure mode
experimental-sandboxed
|
| Wed, 26 Sep 2007 14:51:45 +0000 |
aronacher |
some more work on the sandbox
experimental-sandboxed
|
| Wed, 26 Sep 2007 14:07:10 +0000 |
aronacher |
first implementaiton of a secure genshi
experimental-sandboxed
|
| Wed, 26 Sep 2007 12:27:48 +0000 |
cmlenz |
Create experimental branch for sandboxing.
experimental-sandboxed
|
| Tue, 18 Sep 2007 16:27:23 +0000 |
cmlenz |
Don't mask errors in `py:for`.
trunk
|
| Mon, 17 Sep 2007 23:11:21 +0000 |
cmlenz |
Fix for XInclude fallbacks when auto-reloading is enabled. Closes #147. Thanks to rintaro@cpan.org for reporting the issue and providing a patch and test case!
trunk
|
| Mon, 17 Sep 2007 21:51:21 +0000 |
cmlenz |
Fix for descendant-or-self XPath patterns when namespaces are involved.
trunk
|
| Wed, 05 Sep 2007 16:51:46 +0000 |
cmlenz |
Remove CherryPy example as the GenshiTutorial is a better example for using Genshi with CherryPy.
trunk
|
| Wed, 05 Sep 2007 13:06:59 +0000 |
cmlenz |
Follow-up to [751]: applying the optimization to text templates was actually slowing them down, so only do it for markup templates.
trunk
|
| Wed, 05 Sep 2007 12:46:20 +0000 |
cmlenz |
Minor performance improvement for expressions that evaluate to numbers: the result is wrapped in a `Markup` object, meaning we'll not have to escape the string in the serialization stage.
trunk
|
| Wed, 05 Sep 2007 12:45:04 +0000 |
cmlenz |
Performance optimization for the `genshi.core._ensure` function: instead of checking whether we're dealing with a markup event stream for every item in the iterable, we now check only the first item, and treat the rest of the iterable depending on whether the first one looks like an event.
trunk
|
| Wed, 05 Sep 2007 12:39:56 +0000 |
cmlenz |
GenshiTutorial: add body class to show that the ''@*'' XPath in the match template works.
trunk
|
