Permalink
Commits on Sep 17, 2016
  1. Merge pull request #62 from monostop/master

    Added Python 3 classifier to setup.py
    committed on GitHub Sep 17, 2016
Commits on Sep 16, 2016
Commits on Sep 9, 2016
  1. Merge pull request #60 from alanhamlett/master

    improve test coverage and prevent hijacking requests with invalid json
    committed on GitHub Sep 9, 2016
Commits on Sep 8, 2016
  1. Merge pull request #59 from alanhamlett/master

    prevent Jinja2 from displaying csrf_token() output wrapped with b''
    committed on GitHub Sep 8, 2016
Commits on Mar 19, 2016
  1. Merge pull request #57 from alanhamlett/master

    option to disable Referer check
    committed Mar 19, 2016
Commits on Mar 18, 2016
  1. Merge pull request #56 from alanhamlett/master

    better error exception descriptions
    committed Mar 18, 2016
Commits on Mar 16, 2016
  1. version 0.2.2

    committed Mar 16, 2016
  2. Merge pull request #53 from closeio/fix-session-write

    Don't write session unless it's modified
    committed Mar 16, 2016
  3. Merge pull request #54 from closeio/fix-unicode-urls

    Fix problems with unicode URLs
    committed Mar 16, 2016
  4. Python 2.5/2.6 compatibility

    thomasst committed Mar 16, 2016
Commits on Mar 15, 2016
  1. Don't modify the session if it doesn't change

    This fixes unnecessary writes with session backends that rely on the "modified"
    flag set through werkzeug's CallbackDict.
    thomasst committed Mar 15, 2016
Commits on Feb 16, 2016
  1. Merge pull request #52 from rodeo-code/master

    add optional CSRF_COOKIE_DOMAIN setting
    committed Feb 16, 2016
Commits on Nov 25, 2015
  1. Merge pull request #49 from macrotim/master

    Fixed docs/index.rst
    committed Nov 25, 2015
  2. Fixed docs/index.rst

    macrotim committed Nov 25, 2015
Commits on Sep 9, 2015
  1. version 0.2.1

    committed Sep 9, 2015
Commits on Jun 18, 2015
  1. Merge pull request #47 from killpanda/master

    add exempt url prefix support
    committed Jun 18, 2015
  2. add exempt url prefix support

    killpanda committed Jun 17, 2015
Commits on Nov 2, 2014
  1. Merge pull request #45 from maxcountryman/current-app

    use current_app, and _app_ctx_stack
    committed Nov 2, 2014
  2. use _app_ctx_stack.top

    committed Nov 2, 2014
Commits on Oct 23, 2014
  1. fixup docstring

    committed Oct 23, 2014
  2. use current_app, and _app_ctx_stack

    This removes the use of a specific app object from the extension,
    instead prefering the `current_app` proxy provided by Flask. This means
    that the use of Flask's global `g` (actually meant to be used by users
    but not extensions) is necessarily replaced by `_app_ctx_stack`. As a
    result, it is now possible to use a single instance of SeaSurf with
    multiple Flask application objects. Such an example might be with the
    factory pattern.
    
    Additionally a good deal of clean has happened which may not be
    backwards compatible, including removal of the helper functions `csrf`
    and `xsrf` as well as use of Python's preferred string interpolator,
    `format`.
    
    Fixes #44
    committed Oct 23, 2014
Commits on Apr 29, 2014
Commits on Nov 21, 2013
  1. Typo

    Djoume Salvetti committed Nov 21, 2013
Commits on Sep 9, 2013
  1. version 0.1.22

    committed Sep 9, 2013