#2219: tg.ignore_parameter for TG2
------------------------+---------------------------------------------------
Reporter: toshio | Owner: faide
Type: defect | Status: new
Priority: normal | Milestone: 2.0
Component: TurboGears | Version: 2.0b1
Severity: normal | Keywords:
------------------------+---------------------------------------------------
TurboGears1 has had a config option tg.ignore_parameters since r4185.
That config option allows you to set a list of parameters that you don't
want any of your methods to complain about. This is useful when dealing
with javascript libraries (as mentioned when the change went in:
http://trac.turbogears.org/ticket/1653 ). I am using it in order to set
a CSRF protecting token that should be accepted by any urls in my TG1 app.
AFAICT, there isn't an equivalent to this in TG2 and it makes implementing
the CSRF protection a bit harder (or perhaps just different and I don't
know where to look :-). Any chance that we could get an equivalent
feature added to TG2?
--
Ticket URL: <http://trac.turbogears.org/ticket/2219>
TurboGears <http://www.turbogears.org/>
TurboGears front-to-back web development
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google
Groups "TurboGears Tickets" group.
This group is read-only. No posting by normal members allowed.
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/turbogears-tickets?hl=en?hl=en
-~----------~----~----~----~------~----~------~--~---
