Re: Safe settings context processor

2006-08-21 Thread Ivan Sagalaev
SmileyChris wrote: > But Ivan, you need to access the STYLE_URL setting. Having access to > settings via SafeSettings could be useful still, right? Not much. Adding couple of needed settings in my own project's context processor (which I already have anyway) is not a big deal. SafeSettings then

Re: XSS comments from PHP Creator

2006-08-21 Thread [EMAIL PROTECTED]
I haven't RTFA - so take this with a grain of salt, but this depends on what you mean by data sanitisation. If you're talking application arguments - then yes, these should be white listed. If however, you're talking about user submitted content, then no. Why? security in web applications is very

Re: Proposal: Search Manipulator

2006-08-21 Thread Corey Oordt
Here is my code for the AutomaticSearchManipulator: from django.db.models.manipulators import * from django.db.models.query import Q class AutomaticSearchManipulator (AutomaticManipulator): """ A generic manipulator for searching. It does all the work for "query by example" quer

Flush HttpResponse content

2006-08-21 Thread arnaud
Hello, I'm trying to write a view in Django that outputs data for a long period of time, and returns it to the client as it gets produced. For example, if I wanted to build a malling application, I have to display the email address each time an email is sent, say every 2 sec. Processing can b

Re: django unicode-conversion, beginning

2006-08-21 Thread gabor
Adrian Holovaty wrote: > On 8/8/06, gabor <[EMAIL PROTECTED]> wrote: >> i think unicodizing django can be done in 4 easily separated steps/parts: >> >> 1. request/response >> 2. templating-system >> 3. database-system >> 4. "overall unicode-conversion". this is mostly about replacing >> bytestring

Re: Flush HttpResponse content

2006-08-21 Thread Ivan Sagalaev
[EMAIL PROTECTED] wrote: > For example, if I wanted to build a malling application, I have to > display the email address each time an email is sent, say every 2 sec. > Processing can be quite long, so I cannot accumulate the output and > return the HttpResponse at the end, because the connecti

Re: Default escaping -- again!

2006-08-21 Thread SmileyChris
James Bennett wrote: > On 7/28/06, Roland van Laar <[EMAIL PROTECTED]> wrote: > > Would it be better to couple it with the mimetype? A text/plain should > > by default not be excaped. > > What would be *best* is for there to be no magical implied > escaping/unescaping of anything, only explicit es

Re: Default escaping -- again!

2006-08-21 Thread Alan Green
On 7/29/06, Malcolm Tredinnick <[EMAIL PROTECTED]> wrote: > We are trying to keep the auto-escaping environment completely within > the control of the template author. Thanks. This is really important as even a plain old HTML file can require several different kinds of escaping in different part

New Manipulators and Validation Aware models.

2006-08-21 Thread Brantley Harris
I have built a proposal for a new Manipulator system. Here are some of the benefits of this new system: - Custom form views become very simple, and intuitive. - Validation aware models are harnessed. - Forms are raised as an exception. This allows the writer to assume the data is correct the wh

[Fw]The Python Web Framework

2006-08-21 Thread limodou
http://www.cmlenz.net/blog/2006/08/the_python_web_.html Some points I think are reasonable, for example: django configuration -- I like python! My Blog: http://www.donews.net/limodou My Django Site: http://www.djangocn.org NewEdit Maillist: http://groups.google.com/group/NewEdit --~--~

Re: XSS comments from PHP Creator

2006-08-21 Thread Ian Holsman
On 21/08/2006, at 9:24 PM, [EMAIL PROTECTED] wrote: > > @ Ahmad - mod_security (modsecurity.org) is fantastic, and I highly > recommend installing it on all apaches, but filtering content at the > webserver level is a sledgehammer approach and should only be done for > *really* bad content (e.g.

Re: XSS comments from PHP Creator

2006-08-21 Thread Ahmad Alhashemi
On 8/22/06, Ian Holsman <[EMAIL PROTECTED]> wrote: > On 21/08/2006, at 9:24 PM, [EMAIL PROTECTED] wrote: > > @ Ahmad - mod_security (modsecurity.org) is fantastic, and I highly > > recommend installing it on all apaches, but filtering content at the > > webserver level is a sledgehammer approach a

Improved Norwegian translation files

2006-08-21 Thread Lisa
Excuse me if this is not the appropriate place for this post. I am using Django's i18n feature (which works fantastic). But there are both errors and omissions from the Norwegian translations files (django.po, django.mo, djangoja.po & djangoja.mo). I have improved these files for my own use, bu

Re: Improved Norwegian translation files

2006-08-21 Thread limodou
On 8/22/06, Lisa <[EMAIL PROTECTED]> wrote: > > Excuse me if this is not the appropriate place for this post. I am > using Django's i18n feature (which works fantastic). But there are > both errors and omissions from the Norwegian translations files > (django.po, django.mo, djangoja.po & djangoj

Re: Improved Norwegian translation files

2006-08-21 Thread Kenneth Gonsalves
On 22-Aug-06, at 11:46 AM, Lisa wrote: > Can I email these 4 files to someone and have them incorporated into > the latest Django release? If so, please provide me with an e-mail > address. Thanks in advance. create a ticket on the wiki and attach the files with your comments -- regards kg

slow response when using manage runserver without Internet connection

2006-08-21 Thread DD
Hi, I am using the Django built-in web server. The server's reponse time is nomal when connecting to Internet, once it's offline, the speed is extremely slow. Does anyone have experience how to fix it? Thanks, --~--~-~--~~~---~--~~ You received this message beca