summaryrefslogtreecommitdiff
path: root/docs/ref
diff options
context:
space:
mode:
authorTim Graham <timograham@gmail.com>2015-08-17 09:34:50 -0400
committerTim Graham <timograham@gmail.com>2015-09-23 19:31:09 -0400
commit04ee4059d71dbc6aa029907e251360eaf00e11bb (patch)
treed675a92c2f0beec5e3904c7b02e415d91d8e5c10 /docs/ref
parent3af9b70028487be81c4f6ca65ca0d1f2be337e4f (diff)
Refs #24022 -- Removed the ssi tag per deprecation timeline.
Diffstat (limited to 'docs/ref')
-rw-r--r--docs/ref/checks.txt6
-rw-r--r--docs/ref/settings.txt27
-rw-r--r--docs/ref/templates/api.txt17
-rw-r--r--docs/ref/templates/builtins.txt39
4 files changed, 4 insertions, 85 deletions
diff --git a/docs/ref/checks.txt b/docs/ref/checks.txt
index 208e3fb81f..36f0b6222b 100644
--- a/docs/ref/checks.txt
+++ b/docs/ref/checks.txt
@@ -252,9 +252,9 @@ that might occur as a result of a version upgrade.
* **1_8.W001**: The standalone ``TEMPLATE_*`` settings were deprecated in
Django 1.8 and the :setting:`TEMPLATES` dictionary takes precedence. You must
put the values of the following settings into your defaults ``TEMPLATES``
- dict: :setting:`TEMPLATE_DIRS`, :setting:`ALLOWED_INCLUDE_ROOTS`,
- :setting:`TEMPLATE_CONTEXT_PROCESSORS`, :setting:`TEMPLATE_DEBUG`,
- :setting:`TEMPLATE_LOADERS`, :setting:`TEMPLATE_STRING_IF_INVALID`.
+ dict: :setting:`TEMPLATE_DIRS`, :setting:`TEMPLATE_CONTEXT_PROCESSORS`,
+ :setting:`TEMPLATE_DEBUG`, :setting:`TEMPLATE_LOADERS`,
+ :setting:`TEMPLATE_STRING_IF_INVALID`.
Admin
-----
diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt
index 6a398e1c60..a5d8715e69 100644
--- a/docs/ref/settings.txt
+++ b/docs/ref/settings.txt
@@ -99,32 +99,6 @@ This validation only applies via :meth:`~django.http.HttpRequest.get_host()`;
if your code accesses the ``Host`` header directly from ``request.META`` you
are bypassing this security protection.
-.. setting:: ALLOWED_INCLUDE_ROOTS
-
-ALLOWED_INCLUDE_ROOTS
----------------------
-
-Default: ``[]`` (Empty list)
-
-.. deprecated:: 1.8
-
- This setting, along with the :ttag:`ssi` template tag, is deprecated and
- will be removed in Django 1.10.
-
-.. versionchanged:: 1.8
-
- You can also set the ``'allowed_include_roots'`` option in the
- :setting:`OPTIONS <TEMPLATES-OPTIONS>` of a ``DjangoTemplates`` backend
- instead.
-
-A list of strings representing allowed prefixes for the ``{% ssi %}`` template
-tag. This is a security measure, so that template authors can't access files
-that they shouldn't be accessing.
-
-For example, if :setting:`ALLOWED_INCLUDE_ROOTS` is ``['/home/html', '/var/www']``,
-then ``{% ssi /home/html/foo.txt %}`` would work, but ``{% ssi /etc/passwd %}``
-wouldn't.
-
.. setting:: APPEND_SLASH
APPEND_SLASH
@@ -3433,7 +3407,6 @@ Serialization
Templates
---------
-* :setting:`ALLOWED_INCLUDE_ROOTS`
* :setting:`TEMPLATES`
* :setting:`TEMPLATE_CONTEXT_PROCESSORS`
* :setting:`TEMPLATE_DEBUG`
diff --git a/docs/ref/templates/api.txt b/docs/ref/templates/api.txt
index a8311d30fd..5f6e12934c 100644
--- a/docs/ref/templates/api.txt
+++ b/docs/ref/templates/api.txt
@@ -48,7 +48,7 @@ probably isn't the documentation you're looking for. An instance of the
of that backend and any attribute defaults mentioned below are overridden by
what's passed by :class:`~django.template.backends.django.DjangoTemplates`.
-.. class:: Engine(dirs=None, app_dirs=False, allowed_include_roots=None, context_processors=None, debug=False, loaders=None, string_if_invalid='', file_charset='utf-8', libraries=None, builtins=None)
+.. class:: Engine(dirs=None, app_dirs=False, context_processors=None, debug=False, loaders=None, string_if_invalid='', file_charset='utf-8', libraries=None, builtins=None)
.. versionadded:: 1.8
@@ -65,21 +65,6 @@ what's passed by :class:`~django.template.backends.django.DjangoTemplates`.
It defaults to ``False``.
- * ``allowed_include_roots`` is a list of strings representing allowed
- prefixes for the ``{% ssi %}`` template tag. This is a security measure,
- so that template authors can't access files that they shouldn't be
- accessing.
-
- For example, if ``'allowed_include_roots'`` is ``['/home/html',
- '/var/www']``, then ``{% ssi /home/html/foo.txt %}`` would work, but ``{%
- ssi /etc/passwd %}`` wouldn't.
-
- It defaults to an empty list.
-
- .. deprecated:: 1.8
-
- ``allowed_include_roots`` is deprecated.
-
* ``context_processors`` is a list of dotted Python paths to callables
that are used to populate the context when a template is rendered with a
request. These callables take a request object as their argument and
diff --git a/docs/ref/templates/builtins.txt b/docs/ref/templates/builtins.txt
index 359907d261..1da27a18e6 100644
--- a/docs/ref/templates/builtins.txt
+++ b/docs/ref/templates/builtins.txt
@@ -958,45 +958,6 @@ this example, the space around ``Hello`` won't be stripped::
</strong>
{% endspaceless %}
-.. templatetag:: ssi
-
-ssi
-^^^
-
-.. deprecated:: 1.8
-
- This tag has been deprecated and will be removed in Django 1.10. Use the
- :ttag:`include` tag instead.
-
-Outputs the contents of a given file into the page.
-
-Like a simple :ttag:`include` tag, ``{% ssi %}`` includes the contents of
-another file -- which must be specified using an absolute path -- in the
-current page::
-
- {% ssi '/home/html/ljworld.com/includes/right_generic.html' %}
-
-The first parameter of ``ssi`` can be a quoted literal or any other context
-variable.
-
-If the optional ``parsed`` parameter is given, the contents of the included
-file are evaluated as template code, within the current context::
-
- {% ssi '/home/html/ljworld.com/includes/right_generic.html' parsed %}
-
-Note that if you use ``{% ssi %}``, you'll need to define
-``'allowed_include_roots'`` in the :setting:`OPTIONS <TEMPLATES-OPTIONS>` of
-your template engine, as a security measure.
-
-.. note::
- With the :ttag:`ssi` tag and the ``parsed`` parameter
- there is no shared state between files -- each include is a completely
- independent rendering process. This means it's not possible for example to
- define blocks or alter the context in the current page using the included
- file.
-
-See also: :ttag:`{% include %}<include>`.
-
.. templatetag:: templatetag
templatetag