I updated pyramid_csrf_multi_scheme to work with the 1.10 line of pyramid 
on github (https://github.com/jvanasco/pyramid_csrf_multi_scheme ) and pypi 
(pyramid_csrf_multi_scheme)

the package is designed for people who need to support csrf in a mixed 
scheme environment, and offers `DualCookieCSRFStoragePolicy` which 
reimplements Pyramid's `CookieCSRFStoragePolicy` with two slight 
differences:

* there are separate HTTP and HTTPS csrf cookies.  expiring the HTTPS will 
expire the HTTP, otherwise the HTTP is only accessible on HTTP connections 
and HTTPS on HTTPS connections
* `cookie_profile` is replaced with `cookie_profile_secure` and 
`cookie_profile_http` 

If you need csrf on a mixed scheme environment, you may find this package 
helpful.

-- 
You received this message because you are subscribed to the Google Groups 
"pylons-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to pylons-discuss+unsubscr...@googlegroups.com.
To post to this group, send email to pylons-discuss@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/pylons-discuss/6542c2f4-da47-4a85-be2e-d37fa3de934b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to