Re: FR: Setting for CSRF Header (pull-request included)

2013-12-02 Thread Wesley Alvaro
I agree; that's exactly the issue I'm trying to rectify. I'd like the backend to be constant and just work. We have many applications that run off of the same Django setup, essentially differing only in their handlers. That's why I'd like to configure the backend once and my front-ends (not sha

Security Advisory: ImageField abuse

2013-12-02 Thread Jacob Kaplan-Moss
Hi folks - We've just published a short security advisory about ImageFields: https://www.djangoproject.com/weblog/2013/dec/02/image-field-advisory/ ImageField expects a valid image file, but depending on your app it may allow uploads on non-image content, such as HTML or JavaScript. Unfortun

Re: How to integrate Postgresql db with Django,so that data will be retrieved from that postgresql db table and show it on browser via html

2013-12-02 Thread Tim Graham
Hi, django-developers is for discussing the development of Django itself, not for answering user queries. If you have a "how do I" question, please direct it to django-users. Thanks! On Monday, December 2, 2013 1:03:28 AM UTC-5, Swastik Acharya wrote: > > django 1.4 version > postgresql 9.1 vers

How to integrate Postgresql db with Django,so that data will be retrieved from that postgresql db table and show it on browser via html

2013-12-02 Thread Swastik Acharya
django 1.4 version postgresql 9.1 version I have successfully loaded all the html files and css on browser using django. Now i have some tables in postgresql ,which i need to integrate it with django and .html files so that data will be read and execute both from html file inputs and database