summaryrefslogtreecommitdiff
path: root/django/middleware
Commit message (Expand)AuthorAgeFilesLines
* Fixed #34515 -- Made LocaleMiddleware prefer language from paths when i18n pa...Mariusz Felisiak2023-05-021-21/+12
* Refs #32800 -- Removed CSRF_COOKIE_MASKED transitional setting per deprecatio...Mariusz Felisiak2023-01-171-7/+1
* Fixed #33735 -- Added async support to StreamingHttpResponse.Carlton Gibson2022-12-221-4/+18
* Fixed #34170 -- Implemented Heal The Breach (HTB) in GzipMiddleware.Andreas Pelme2022-12-171-2/+10
* Fixed #34074 -- Added headers argument to RequestFactory and Client classes.David Wobrock2022-11-141-2/+1
* Updated documentation and comments for RFC updates.Nick Pope2022-11-102-2/+2
* Used more augmented assignment statements.Nick Pope2022-10-311-2/+2
* Fixed #34069 -- Made LocaleMiddleware respect language from requests when i18...Sergio2022-10-131-12/+21
* Fixed #33700 -- Skipped extra resolution for successful requests not ending w...Anders Kaseorg2022-06-021-12/+11
* Refs #30426 -- Updated XFrameOptionsMiddleware docstring.Clemens Wolff2022-04-291-4/+4
* Refs #33476 -- Reformatted code with Black.django-bot2022-02-078-156/+210
* Refs #32800 -- Renamed _sanitize_token() to _check_token_format().Chris Jerdonek2021-11-291-3/+3
* Fixed #32800 -- Changed CsrfViewMiddleware not to mask the CSRF secret.Chris Jerdonek2021-11-291-42/+65
* Fixed #33252 -- Made cache middlewares thread-safe.Iuri de Silvio2021-11-031-3/+8
* Fixed #32768 -- Added Vary header when redirecting to prefixed i18n pattern.Alex Hayward2021-09-011-1/+6
* Refs #32800 -- Added _add_new_csrf_cookie() helper function.Chris Jerdonek2021-08-171-20/+21
* Refs #32800 -- Renamed _set_token() to _set_csrf_cookie().Chris Jerdonek2021-08-171-9/+9
* Refs #32800 -- Renamed _compare_masked_tokens() to _does_token_match().Chris Jerdonek2021-08-031-2/+2
* Refs #32916 -- Replaced request.csrf_cookie_needs_reset with request.META['CS...Chris Jerdonek2021-07-291-12/+14
* Fixed #32916 -- Combined request.META['CSRF_COOKIE_USED'] and request.csrf_co...Chris Jerdonek2021-07-291-17/+7
* Fixed #32329 -- Made CsrfViewMiddleware catch more specific UnreadablePostError.Virtosu Bogdan2021-07-231-1/+2
* Fixed #32902 -- Fixed CsrfViewMiddleware.process_response()'s cookie reset lo...Chris Jerdonek2021-07-231-10/+20
* Fixed #32817 -- Added the token source to CsrfViewMiddleware's bad token erro...Chris Jerdonek2021-06-231-3/+15
* Fixed #32842 -- Refactored out CsrfViewMiddleware._check_token().Chris Jerdonek2021-06-221-40/+46
* Fixed comment in CsrfViewMiddleware to say _reject instead of reject.Chris Jerdonek2021-06-121-1/+1
* Fixed #32796 -- Changed CsrfViewMiddleware to fail earlier on badly formatted...Chris Jerdonek2021-06-011-8/+15
* Fixed #32795 -- Changed CsrfViewMiddleware to fail earlier on badly formatted...Chris Jerdonek2021-05-311-10/+32
* Refs #32778 -- Improved the name of the regex object detecting invalid CSRF t...Chris Jerdonek2021-05-291-3/+4
* Refs #32596 -- Added early return on safe methods in CsrfViewMiddleware.proce...Chris Jerdonek2021-05-281-69/+68
* Refs #32596 -- Optimized CsrfViewMiddleware._check_referer() to delay computi...Chris Jerdonek2021-05-281-7/+8
* Fixed #32596 -- Added CsrfViewMiddleware._check_referer().Chris Jerdonek2021-05-281-43/+52
* Fixed #32778 -- Avoided unnecessary recompilation of token regex in _sanitize...abhiabhi942021-05-251-2/+3
* Fixed #32678 -- Removed SECURE_BROWSER_XSS_FILTER setting.Tim Graham2021-04-301-4/+0
* Fixed #31840 -- Added support for Cross-Origin Opener Policy header.bankc2021-03-301-0/+6
* Fixed #32578 -- Fixed crash in CsrfViewMiddleware when a request with Origin ...Chris Jerdonek2021-03-251-6/+11
* Refs #32579 -- Fixed cookie domain comment in CsrfViewMiddleware.process_view().Chris Jerdonek2021-03-251-8/+8
* Refs #32579 -- Optimized good_hosts creation in CsrfViewMiddleware.process_vi...Chris Jerdonek2021-03-251-4/+3
* Fixed #32571 -- Made CsrfViewMiddleware handle invalid URLs in Referer header.Adam Donaghy2021-03-191-1/+4
* Fixed #16010 -- Added Origin header checking to CSRF middleware.Tim Graham2021-03-181-1/+50
* Refs #16010 -- Required CSRF_TRUSTED_ORIGINS setting to include the scheme.Tim Graham2021-03-181-1/+9
* Refs #26601 -- Made get_response argument required and don't accept None in m...Mariusz Felisiak2021-01-142-12/+4
* Made small readability improvements.Martin Thoma2020-10-281-3/+2
* Fixed #32124 -- Added per-view opt-out for APPEND_SLASH behavior.Carlton Gibson2020-10-221-4/+5
* Fixed #31789 -- Added a new headers interface to HttpResponse.Tom Carrick2020-09-145-12/+14
* Fixed #31928 -- Fixed detecting an async get_response in various middlewares.Kevin Michel2020-08-282-17/+11
* Refs #30573 -- Rephrased "Of Course" and "Obvious(ly)" in documentation and c...Adam Johnson2020-05-041-1/+1
* Fixed #28699 -- Fixed CSRF validation with remote user middleware.Colton Hicks2020-02-261-1/+4
* Fixed #31291 -- Renamed salt to mask for CSRF tokens.Ram Rachum2020-02-251-20/+20
* Refs #26601 -- Deprecated passing None as get_response arg to middleware clas...Claude Paroz2020-02-182-0/+12
* Fixed #30765 -- Made cache_page decorator take precedence over max-age Cache-...Flavio Curella2020-01-161-9/+14
View Lorry Controller Status