I updated pyramid_csrf_multi_scheme to work with the 1.10 line of pyramid on github (https://github.com/jvanasco/pyramid_csrf_multi_scheme ) and pypi (pyramid_csrf_multi_scheme)
the package is designed for people who need to support csrf in a mixed scheme environment, and offers `DualCookieCSRFStoragePolicy` which reimplements Pyramid's `CookieCSRFStoragePolicy` with two slight differences: * there are separate HTTP and HTTPS csrf cookies. expiring the HTTPS will expire the HTTP, otherwise the HTTP is only accessible on HTTP connections and HTTPS on HTTPS connections * `cookie_profile` is replaced with `cookie_profile_secure` and `cookie_profile_http` If you need csrf on a mixed scheme environment, you may find this package helpful. -- You received this message because you are subscribed to the Google Groups "pylons-discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to pylons-discuss+unsubscr...@googlegroups.com. To post to this group, send email to pylons-discuss@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/pylons-discuss/6542c2f4-da47-4a85-be2e-d37fa3de934b%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.