[Repoze-dev] config.scan() and test dependencies

2010-06-24 Thread Chris Withers
Hi All, How can I get config.scan() to exclude my test folders? My tests have package dependencies not normally needed, so the scan fails with ImportErrors for those packages that are *only* test dependencies... Chris -- Simplistix - Content Management, Batch Processing Python Consulting

Re: [Repoze-dev] config.scan() and test dependencies

2010-06-24 Thread Chris McDonough
On Thu, 2010-06-24 at 08:04 +0100, Chris Withers wrote: Hi All, How can I get config.scan() to exclude my test folders? My tests have package dependencies not normally needed, so the scan fails with ImportErrors for those packages that are *only* test dependencies... Can't right now. -

[Repoze-dev] Paste 1.7.4, security fix for XSS hole

2010-06-24 Thread Ian Bicking
Paste 1.7.4 is released. The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser.

Re: [Repoze-dev] config.scan() and test dependencies

2010-06-24 Thread Chris Withers
Chris McDonough wrote: On Thu, 2010-06-24 at 08:04 +0100, Chris Withers wrote: Hi All, How can I get config.scan() to exclude my test folders? My tests have package dependencies not normally needed, so the scan fails with ImportErrors for those packages that are *only* test

Re: [Repoze-dev] config.scan() and test dependencies

2010-06-24 Thread Chris McDonough
On Thu, 2010-06-24 at 08:06 +0100, Chris Withers wrote: Chris McDonough wrote: On Thu, 2010-06-24 at 08:04 +0100, Chris Withers wrote: Hi All, How can I get config.scan() to exclude my test folders? My tests have package dependencies not normally needed, so the scan fails with

Re: [Repoze-dev] Paste 1.7.4, security fix for XSS hole

2010-06-24 Thread Wichert Akkerman
On 6/24/10 09:07 , Ian Bicking wrote: I believe the changes to 1.7.4 are limited and upgrading will have a low impact. Is there a changelog somewhere? The paste website still lists 1.7.3 as the last release and the pypi page has no changelog information. If I look at

Re: [Repoze-dev] static views and @@

2010-06-24 Thread Paul Everitt
On Jun 24, 2010, at 3:34 AM, Wichert Akkerman wrote: On 6/24/10 09:28 , Chris Withers wrote: Hi All, I've registered a static view with: config.add_static_view('static','mypackage:templates/static') Which, if I read the docs, means I should be able to build urls such as:

Re: [Repoze-dev] static views and @@

2010-06-24 Thread Chris Withers
Paul Everitt wrote: I can't remember seeing any use of @@ in BFG docs. Where did you see that? http://docs.repoze.org/bfg/current/narr/traversal.html#traversal-chapter The traversal algorithm exposes two special cases: [snip[ Yep, and in my case, I can to this from the warning box at

Re: [Repoze-dev] cogbin is back - please add/update keyword turbogears2 in your setup.py and upload to pypi.

2010-06-24 Thread Lukasz Szybalski
On Wed, Jun 23, 2010 at 10:40 PM, Chris McDonough chr...@plope.com wrote: On Wed, 2010-06-23 at 22:28 -0500, Lukasz Szybalski wrote: repoze.what-pylons shows up under turbogears category. If it was changed to turbogears2 then it would show up under tg2? Not sure if it actually works with tg1?