summaryrefslogtreecommitdiff
path: root/jinja2/sandbox.py
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch '2.10.x'David Lord2019-07-261-4/+8
|\
| * sandbox uses xrange on Python 2Prakhar Bhandari2019-07-221-4/+8
| |
| * Import abstract base classes from collections.abcFlorian Bruhin2019-06-181-7/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In Python 3.7, importing ABCs directly from the `collections` module shows a warning (and in Python 3.8 it will stop working) - see https://github.com/python/cpython/commit/c66f9f8d3909f588c251957d499599a1680e2320 This fixes various DeprecationWarnings such as those: ``` .../jinja2/utils.py:485: DeprecationWarning: Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated, and in 3.8 it will stop working from collections import MutableMapping .../jinja2/runtime.py:318: DeprecationWarning: Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated, and in 3.8 it will stop working from collections import Mapping ```
* | Merge branch '2.10.x'David Lord2019-04-061-3/+14
|\ \ | |/
| * sandbox str.format_mapArmin Ronacher2019-04-061-3/+14
| |
* | Import abstract base classes from collections.abcFlorian Bruhin2018-08-071-7/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In Python 3.7, importing ABCs directly from the `collections` module shows a warning (and in Python 3.8 it will stop working) - see https://github.com/python/cpython/commit/c66f9f8d3909f588c251957d499599a1680e2320 This fixes various DeprecationWarnings such as those: ``` .../jinja2/utils.py:485: DeprecationWarning: Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated, and in 3.8 it will stop working from collections import MutableMapping .../jinja2/runtime.py:318: DeprecationWarning: Using or importing the ABCs from 'collections' instead of from 'collections.abc' is deprecated, and in 3.8 it will stop working from collections import Mapping ```
* | Fix typo: apparenlty -> apparently.Jon Dufresne2018-03-041-1/+1
| |
* | Fix typos (#815)luzpaz2018-02-181-2/+2
|/ | | Found via `codespell -q 3` using v1.12.0.dev0
* In documentation, prefer https over http when availableJon Dufresne2017-04-091-1/+1
|
* Remove unused/duplicate importsAdrian Moennich2017-01-091-1/+1
|
* Bump up the copyright to 2017Armin Ronacher2017-01-071-1/+1
|
* Expect formatArmin Ronacher2017-01-061-43/+38
|
* Fixed a name error for an uncommon attribute access in the sandbox2.8-maintenanceArmin Ronacher2016-12-291-1/+1
|
* SECURITY: support sandboxing in format expressionsArmin Ronacher2016-12-291-3/+116
|
* Fix doctestsMarkus Unterwaditzer2015-03-221-10/+9
| | | | Fix #427
* Removed duplication from types that was only necessary for IronPythonArmin Ronacher2013-05-201-6/+6
|
* Make the runtime leak less of the version hacksArmin Ronacher2013-05-201-2/+9
|
* Moved all six usages (ignoring testsuite) into jinja2._compatArmin Ronacher2013-05-191-8/+7
|
* Merge branch 'master' into sprint-branchArmin Ronacher2013-05-181-1/+1
|\
| * Fixed typos: overriden to overriddenJonas Nockert2013-02-231-1/+1
| |
* | python 3 port: manual fixes, remove 2to3 from setup.py, remove fixersThomas Waldmann2013-05-181-1/+2
| |
* | python 3 port: automated changes by a slightly modified python-modernizeThomas Waldmann2013-05-171-1/+1
|/ | | | (replacing unicode with six.text_type, but not replacing u"" by six.u(""))
* Damn you SphinxArmin Ronacher2011-01-241-2/+3
|
* Implemented operator interceptingArmin Ronacher2010-11-291-1/+90
|
* Fixed a typo and removed a useless backslashArmin Ronacher2010-11-291-1/+1
|
* Changed naked except statements to catch only subclasses of Exception.Ian Lewis2010-11-071-1/+1
| | | | | | | | | | | | | | Naked except statements catch subclasses of BaseException which can occur anywhere (i.e. KeyboardInterrupt). Unexpected issues can occur when the exception happens during the loading of a module. The python interpreter doesn't know about a module's failed load and does not remove it from sys.modules. This is particularly a problem on AppEngine where python will think the module is loaded but in fact the module load has failed. See: http://code.google.com/p/googleappengine/issues/detail?id=1409 Signed-off-by: Armin Ronacher <armin.ronacher@active-4.com>
* Approaching python3 compatibilityArmin Ronacher2010-02-101-5/+13
| | | | | --HG-- branch : trunk
* It's a new yearArmin Ronacher2010-01-221-1/+1
| | | | | --HG-- branch : trunk
* jinja2.sandbox should not warn on 2.6 any more.Armin Ronacher2009-02-191-2/+15
| | | | | --HG-- branch : trunk
* Copyright switch to "The Jinja Team".Armin Ronacher2009-01-041-1/+1
| | | | | --HG-- branch : trunk
* Fixed a small bug with the undefined object: the error message on divisions ↵Armin Ronacher2008-11-021-2/+2
| | | | | | | with undefined objects was misleading. --HG-- branch : trunk
* Removed a few stdlib dependencies. This is the first step for IronPython ↵Armin Ronacher2008-08-131-2/+2
| | | | | | | support, the second one being a new lexer. --HG-- branch : trunk
* Improved attribute and item lookup by allowing template designers to express ↵Armin Ronacher2008-06-121-6/+27
| | | | | | | the priority. foo.bar checks foo.bar first and then foo['bar'] and the other way round. --HG-- branch : trunk
* improved sandbox and updated setup.pyArmin Ronacher2008-05-261-40/+61
| | | | | --HG-- branch : trunk
* added attr filterArmin Ronacher2008-05-261-1/+1
| | | | | --HG-- branch : trunk
* items have a higher priority than attributes now. That's compatible with ↵Armin Ronacher2008-05-261-21/+18
| | | | | | | Jinja1 and Django --HG-- branch : trunk
* all calls are proxied by context.call now so that we can inject environment ↵Armin Ronacher2008-05-251-2/+2
| | | | | | | and context as first arguments. This slows calls down a bit but is a lot more user friendly. Added first draft of FAQ --HG-- branch : trunk
* added `ImmutableSandboxedEnvironment`.Armin Ronacher2008-05-171-0/+59
| | | | | --HG-- branch : trunk
* subscribe doesn't eat up unicode errors any longerArmin Ronacher2008-05-171-5/+10
| | | | | --HG-- branch : trunk
* improved subscribeArmin Ronacher2008-05-131-8/+9
| | | | | --HG-- branch : trunk
* documentation updateArmin Ronacher2008-05-071-19/+50
| | | | | --HG-- branch : trunk
* extra securityArmin Ronacher2008-05-041-2/+9
| | | | | --HG-- branch : trunk
* improved sandbox, added proper striptags and updated documentation to latest ↵Armin Ronacher2008-05-041-3/+12
| | | | | | | sphinx changes --HG-- branch : trunk
* moved concat to utils, fixed a few docstrings, fixed memory leak in ↵Armin Ronacher2008-05-031-3/+5
| | | | | | | _speedups.escape --HG-- branch : trunk
* improved undefined behaviorArmin Ronacher2008-04-171-9/+19
| | | | | --HG-- branch : trunk
* added sandbox and exchageable undefined objectsArmin Ronacher2008-04-141-0/+87
--HG-- branch : trunk