| Tue, 18 Dec 2007 07:35:43 +0000 |
athomas |
More reversions from #168.
trunk
|
| Tue, 18 Dec 2007 07:29:32 +0000 |
athomas |
Whoops. Removed accidentally committed patch from #156.
trunk
|
| Tue, 18 Dec 2007 00:03:41 +0000 |
athomas |
Applied patch from cboos, fixing #168. Thanks!
trunk
|
| Tue, 11 Dec 2007 21:17:18 +0000 |
cmlenz |
Fix case where attributes weren't properly wrapped in an `Attrs` instance if one or more of them were translated by the I18n filter, potentially breaking things further down the chain. Closes #162.
trunk
|
| Tue, 11 Dec 2007 21:01:10 +0000 |
cmlenz |
`QName` can now be constructed from a string with a leading curly brace, and some doc improvements. Closes #164.
trunk
|
| Tue, 11 Dec 2007 20:11:45 +0000 |
cmlenz |
Applied patch to fix a memory leak in the C implementation of the `Markup.escape()` function. Thanks to Christian Boos for reporting and figuring out the problem. Closes #166.
trunk
|
| Wed, 05 Dec 2007 23:16:50 +0000 |
cmlenz |
Fix compatibility of tutorial code with CherryPy 3.1. Closes #159.
trunk
|
| Wed, 05 Dec 2007 22:58:28 +0000 |
cmlenz |
Add SVG DTDs to `DocType` class. Closes #161.
trunk
|
| Thu, 29 Nov 2007 19:14:51 +0000 |
aronacher |
improved loader security
experimental-sandboxed
|
| Thu, 29 Nov 2007 18:51:48 +0000 |
aronacher |
loader raises an SecurityException in restricted mode if absolute paths are used
experimental-sandboxed
|
| Thu, 29 Nov 2007 18:08:37 +0000 |
aronacher |
added first (and pretty useless) test for the restricted branch
experimental-sandboxed
|
| Thu, 29 Nov 2007 18:07:32 +0000 |
aronacher |
merged trunk into sandbox branch
experimental-sandboxed
|
| Thu, 22 Nov 2007 22:07:15 +0000 |
cmlenz |
The `TextSerializer` class no longer strips all markup in text by default, so that it is still possible to use the Genshi `escape` function even with text templates. The old behavior is available via the `strip_markup` option of the serializer. Closes #146.
trunk
|
| Thu, 22 Nov 2007 20:36:00 +0000 |
cmlenz |
Allow use of py:replace as element. Closes #144.
trunk
|
| Thu, 22 Nov 2007 20:04:23 +0000 |
cmlenz |
Add unit test for #157, which seems to be working okay in trunk.
trunk
|
| Thu, 22 Nov 2007 19:43:05 +0000 |
cmlenz |
The `striptags` function now also removes HTML/XML-style comments. Closes #150. Thanks to Armin Ronacher for the report and suggested fix.
trunk
|
| Thu, 22 Nov 2007 19:35:17 +0000 |
cmlenz |
Fix thread-safety problem in template code evaluation. Closes #158. Thanks to Christian Boos for the patch.
trunk
|
| Thu, 22 Nov 2007 19:19:17 +0000 |
cmlenz |
Fix test to work on Python 2.5.1 which has a different exception message.
trunk
|
| Thu, 22 Nov 2007 19:18:34 +0000 |
cmlenz |
Fix typo in benchmark info output.
trunk
|
| Thu, 08 Nov 2007 18:27:47 +0000 |
cmlenz |
The template engine plugin no longer adds the `default_doctype` when the `fragment` parameter is `True`. Thanks to dbrattli for the patch!
trunk
|
| Mon, 08 Oct 2007 08:04:58 +0000 |
cmlenz |
Code blocks in match templates are now executed. Closes #155. Many thanks to Andrew Sutherland for the patch!
trunk
|
| Mon, 01 Oct 2007 09:32:46 +0000 |
cmlenz |
Fix typo in docs. Closes #153.
trunk
|
| Wed, 26 Sep 2007 19:26:06 +0000 |
aronacher |
some more changes on the sandboxed branch
experimental-sandboxed
|
| Wed, 26 Sep 2007 17:56:41 +0000 |
aronacher |
restricted is the new secure
experimental-sandboxed
|
| Wed, 26 Sep 2007 17:07:27 +0000 |
aronacher |
removed getattr
experimental-sandboxed
|
| Wed, 26 Sep 2007 17:01:16 +0000 |
aronacher |
readded lambda, it's better to wrap the rendering with a try/except and check for a RuntimeError that represents recursion
experimental-sandboxed
|
| Wed, 26 Sep 2007 14:54:41 +0000 |
aronacher |
disallow lambda in secure mode
experimental-sandboxed
|
| Wed, 26 Sep 2007 14:51:45 +0000 |
aronacher |
some more work on the sandbox
experimental-sandboxed
|
| Wed, 26 Sep 2007 14:07:10 +0000 |
aronacher |
first implementaiton of a secure genshi
experimental-sandboxed
|
| Wed, 26 Sep 2007 12:27:48 +0000 |
cmlenz |
Create experimental branch for sandboxing.
experimental-sandboxed
|
