diff options
| author | Tim Graham <timograham@gmail.com> | 2015-08-17 09:34:50 -0400 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2015-09-23 19:31:09 -0400 |
| commit | 04ee4059d71dbc6aa029907e251360eaf00e11bb (patch) | |
| tree | d675a92c2f0beec5e3904c7b02e415d91d8e5c10 /docs/ref | |
| parent | 3af9b70028487be81c4f6ca65ca0d1f2be337e4f (diff) | |
Refs #24022 -- Removed the ssi tag per deprecation timeline.
Diffstat (limited to 'docs/ref')
| -rw-r--r-- | docs/ref/checks.txt | 6 | ||||
| -rw-r--r-- | docs/ref/settings.txt | 27 | ||||
| -rw-r--r-- | docs/ref/templates/api.txt | 17 | ||||
| -rw-r--r-- | docs/ref/templates/builtins.txt | 39 |
4 files changed, 4 insertions, 85 deletions
diff --git a/docs/ref/checks.txt b/docs/ref/checks.txt index 208e3fb81f..36f0b6222b 100644 --- a/docs/ref/checks.txt +++ b/docs/ref/checks.txt @@ -252,9 +252,9 @@ that might occur as a result of a version upgrade. * **1_8.W001**: The standalone ``TEMPLATE_*`` settings were deprecated in Django 1.8 and the :setting:`TEMPLATES` dictionary takes precedence. You must put the values of the following settings into your defaults ``TEMPLATES`` - dict: :setting:`TEMPLATE_DIRS`, :setting:`ALLOWED_INCLUDE_ROOTS`, - :setting:`TEMPLATE_CONTEXT_PROCESSORS`, :setting:`TEMPLATE_DEBUG`, - :setting:`TEMPLATE_LOADERS`, :setting:`TEMPLATE_STRING_IF_INVALID`. + dict: :setting:`TEMPLATE_DIRS`, :setting:`TEMPLATE_CONTEXT_PROCESSORS`, + :setting:`TEMPLATE_DEBUG`, :setting:`TEMPLATE_LOADERS`, + :setting:`TEMPLATE_STRING_IF_INVALID`. Admin ----- diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt index 6a398e1c60..a5d8715e69 100644 --- a/docs/ref/settings.txt +++ b/docs/ref/settings.txt @@ -99,32 +99,6 @@ This validation only applies via :meth:`~django.http.HttpRequest.get_host()`; if your code accesses the ``Host`` header directly from ``request.META`` you are bypassing this security protection. -.. setting:: ALLOWED_INCLUDE_ROOTS - -ALLOWED_INCLUDE_ROOTS ---------------------- - -Default: ``[]`` (Empty list) - -.. deprecated:: 1.8 - - This setting, along with the :ttag:`ssi` template tag, is deprecated and - will be removed in Django 1.10. - -.. versionchanged:: 1.8 - - You can also set the ``'allowed_include_roots'`` option in the - :setting:`OPTIONS <TEMPLATES-OPTIONS>` of a ``DjangoTemplates`` backend - instead. - -A list of strings representing allowed prefixes for the ``{% ssi %}`` template -tag. This is a security measure, so that template authors can't access files -that they shouldn't be accessing. - -For example, if :setting:`ALLOWED_INCLUDE_ROOTS` is ``['/home/html', '/var/www']``, -then ``{% ssi /home/html/foo.txt %}`` would work, but ``{% ssi /etc/passwd %}`` -wouldn't. - .. setting:: APPEND_SLASH APPEND_SLASH @@ -3433,7 +3407,6 @@ Serialization Templates --------- -* :setting:`ALLOWED_INCLUDE_ROOTS` * :setting:`TEMPLATES` * :setting:`TEMPLATE_CONTEXT_PROCESSORS` * :setting:`TEMPLATE_DEBUG` diff --git a/docs/ref/templates/api.txt b/docs/ref/templates/api.txt index a8311d30fd..5f6e12934c 100644 --- a/docs/ref/templates/api.txt +++ b/docs/ref/templates/api.txt @@ -48,7 +48,7 @@ probably isn't the documentation you're looking for. An instance of the of that backend and any attribute defaults mentioned below are overridden by what's passed by :class:`~django.template.backends.django.DjangoTemplates`. -.. class:: Engine(dirs=None, app_dirs=False, allowed_include_roots=None, context_processors=None, debug=False, loaders=None, string_if_invalid='', file_charset='utf-8', libraries=None, builtins=None) +.. class:: Engine(dirs=None, app_dirs=False, context_processors=None, debug=False, loaders=None, string_if_invalid='', file_charset='utf-8', libraries=None, builtins=None) .. versionadded:: 1.8 @@ -65,21 +65,6 @@ what's passed by :class:`~django.template.backends.django.DjangoTemplates`. It defaults to ``False``. - * ``allowed_include_roots`` is a list of strings representing allowed - prefixes for the ``{% ssi %}`` template tag. This is a security measure, - so that template authors can't access files that they shouldn't be - accessing. - - For example, if ``'allowed_include_roots'`` is ``['/home/html', - '/var/www']``, then ``{% ssi /home/html/foo.txt %}`` would work, but ``{% - ssi /etc/passwd %}`` wouldn't. - - It defaults to an empty list. - - .. deprecated:: 1.8 - - ``allowed_include_roots`` is deprecated. - * ``context_processors`` is a list of dotted Python paths to callables that are used to populate the context when a template is rendered with a request. These callables take a request object as their argument and diff --git a/docs/ref/templates/builtins.txt b/docs/ref/templates/builtins.txt index 359907d261..1da27a18e6 100644 --- a/docs/ref/templates/builtins.txt +++ b/docs/ref/templates/builtins.txt @@ -958,45 +958,6 @@ this example, the space around ``Hello`` won't be stripped:: </strong> {% endspaceless %} -.. templatetag:: ssi - -ssi -^^^ - -.. deprecated:: 1.8 - - This tag has been deprecated and will be removed in Django 1.10. Use the - :ttag:`include` tag instead. - -Outputs the contents of a given file into the page. - -Like a simple :ttag:`include` tag, ``{% ssi %}`` includes the contents of -another file -- which must be specified using an absolute path -- in the -current page:: - - {% ssi '/home/html/ljworld.com/includes/right_generic.html' %} - -The first parameter of ``ssi`` can be a quoted literal or any other context -variable. - -If the optional ``parsed`` parameter is given, the contents of the included -file are evaluated as template code, within the current context:: - - {% ssi '/home/html/ljworld.com/includes/right_generic.html' parsed %} - -Note that if you use ``{% ssi %}``, you'll need to define -``'allowed_include_roots'`` in the :setting:`OPTIONS <TEMPLATES-OPTIONS>` of -your template engine, as a security measure. - -.. note:: - With the :ttag:`ssi` tag and the ``parsed`` parameter - there is no shared state between files -- each include is a completely - independent rendering process. This means it's not possible for example to - define blocks or alter the context in the current page using the included - file. - -See also: :ttag:`{% include %}<include>`. - .. templatetag:: templatetag templatetag |
