Re: Standalone is_safe_url() function

2018-11-05 Thread 'Ivan Anishchuk' via Django developers (Contributions to Django itself)
Yeah, it can be pretty useful at times, for example, in api clients. I used it quite a few times and had no idea it's not a part of the public api. Ivan. On Sun, Oct 28, 2018 at 12:29 PM Adam Johnson wrote: > I needed that functionality on another project that doesn't use Django at >> all. >> >

Re: Standalone is_safe_url() function

2018-10-28 Thread Adam Johnson
> > I needed that functionality on another project that doesn't use Django at > all. > If this was my own project, I would have installed Django and imported the function. Afaict it doesn't depend on settings or any other setup so it should work from an import. The only concern would be size of si

Re: Standalone is_safe_url() function

2018-10-10 Thread ivan via Django developers (Contributions to Django itself)
Hi Markus, Well, adding new requirements for every function might be not a scalable approach, but if some stuff in django important for security was separated into a sub-project it could allow more people to patch their projects more easily. From what I've seen in various projects I worked in,

Standalone is_safe_url() function

2018-10-10 Thread Markus Holtermann
Hi all, Django provides a function `django.utils.is_safe_url()` to ensure that a given URL (absolute or relative) is safe to redirect to. I needed that functionality on another project that doesn't use Django at all. I thus built a standalone is-safe-url Python package that can be installed fro