ANN: Pylons 0.9.6.1 Released

[Ben Bangert]

I've just released a minor update, Pylons 0.9.6.1. The most important fix prompting this release was that private functions (those starting with _) were actually exposed under 0.9.6, this update remedies that security hole. Thanks Tomasz Nazar for the bug catch.

with-pylons=test.ini



Full Changelog:
0.9.6.1 (September 27th, 2007)

  Tomasz Nazar.

  with doc tests.

  level for a little better performance.


Cheers,
Ben

For those using nosetests, Pylons now has a nose plugin extension that ensures the Pylons app is loaded *before* doc tests are run. This means that you can have and run model doc tests. You'll need a [nosetests] block in your setup.cfg as the Pylons Unit test docs note, and add this section: Or you can add the --with-pylons option to the command line if you run nosetests directly. * Fixed validate decorator to resume pre-0.9.6 behavior of only validating POST requests by default. Added option to validate during GET as well and a recursion avoidance check to prevent validate from running more than once. * WARNING: Fixed a security hole allowing private controller methods (those beginning with an underscore) to be accessed from the outside. Found by * Added nose plugin '--with-pylons=test.ini' option to load the Pylons app before scanning for unit tests. This enables Pylons apps to be unit tested * PylonsBaseWSGIApp now caches controller lookup and the effective logging

smime.p7s
Description: S/MIME cryptographic signature