summaryrefslogtreecommitdiff
path: root/django/middleware
AgeCommit message (Expand)Author
2021-01-14Refs #26601 -- Made get_response argument required and don't accept None in m...Mariusz Felisiak
2020-10-28Made small readability improvements.Martin Thoma
2020-10-22Fixed #32124 -- Added per-view opt-out for APPEND_SLASH behavior.Carlton Gibson
2020-09-14Fixed #31789 -- Added a new headers interface to HttpResponse.Tom Carrick
2020-08-28Fixed #31928 -- Fixed detecting an async get_response in various middlewares.Kevin Michel
2020-05-04Refs #30573 -- Rephrased "Of Course" and "Obvious(ly)" in documentation and c...Adam Johnson
2020-02-26Fixed #28699 -- Fixed CSRF validation with remote user middleware.Colton Hicks
2020-02-25Fixed #31291 -- Renamed salt to mask for CSRF tokens.Ram Rachum
2020-02-18Refs #26601 -- Deprecated passing None as get_response arg to middleware clas...Claude Paroz
2020-01-16Fixed #30765 -- Made cache_page decorator take precedence over max-age Cache-...Flavio Curella
2019-10-29Fixed #30899 -- Lazily compiled import time regular expressions.Hasan Ramezani
2019-10-23Refs #26601 -- Removed obsolete workarounds for MIDDLEWARE_CLASSES setting.Sergey Fedoseev
2019-09-09Fixed #29406 -- Added support for Referrer-Policy header.Nick Pope
2019-09-09Fixed #30426 -- Changed X_FRAME_OPTIONS setting default to DENY.Claude Paroz
2019-04-24Removed unnecessary assignments in various code.Jon Dufresne
2019-03-30Optimized CommonMiddleware's check for DISALLOWED_USER_AGENTS.Brad
2019-01-28Fixed #30137 -- Replaced OSError aliases with the canonical OSError.Jon Dufresne
2018-10-30Capitalized SecurityMiddleware headers for consistency with other headers.Artur Juraszek
2018-09-08Fixed #29728 -- Prevented session resaving if CSRF cookie is unchanged.Michal Čihař
2018-08-01Fixed CVE-2018-14574 -- Fixed open redirect possibility in CommonMiddleware.Andreas Hug
2018-05-04Fixed #26688 -- Fixed HTTP request logging inconsistencies.Samir Shah
2018-04-13Fixed #27863 -- Added support for the SameSite cookie flag.Alex Gaynor
2018-03-16Fixed hanging indentation in various code.Mariusz Felisiak
2018-02-14Fixed #28693 -- Fixed crash in CsrfViewMiddleware when an HTTPS request has a...Tomer Chachamu
2018-02-06Fixed #28833 -- Prevented CacheMiddleware from caching responses with "Cache-...shanghui
2018-01-03Fixed #28982 -- Simplified code with and/or.Дилян Палаузов
2017-11-14Fixed #28795 -- Removed 'not in' checks and used dict.setdefault().Дилян Палаузов
2017-11-11Refs #26447 -- Removed outdated ETag comment in CommonMiddleware.Tim Graham
2017-09-22Refs #26447 -- Removed the USE_ETAGS setting per deprecation timeline.Tim Graham
2017-09-20Fixed #28488 -- Reallowed error handlers to access CSRF tokens.Florian Apolloner
2017-03-04Refs #27656 -- Updated remaining docstring verbs according to PEP 257.Anton Samarchyan
2017-02-27Imported django.http classes instead of django.http.Asif Saifuddin Auvi
2017-01-30Refs #23919 -- Assumed request COOKIES and META are strClaude Paroz
2017-01-18Refs #23919 -- Removed most of remaining six usageClaude Paroz
2017-01-18Refs #23919 -- Removed encoding preambles and future importsClaude Paroz
2016-11-30Refs #16859 -- Allowed storing CSRF tokens in sessions.Raphael Michel
2016-11-29Fixed #27402 -- Fixed incorrect LocaleMiddleware redirects with prefix_defaul...Krzysztof Urbaniak
2016-11-06Fixed #26812 -- Fixed APPEND_SLASH on a URL including querystring with a trai...Sven Engström
2016-11-05Fixed #27346 -- Stopped setting the Content-Length header in ConditionalGetMi...Adam Malinowski
2016-10-17Fixed #27344 -- Made ConditionalGetMiddleware only process GET requests.Kevin Christopher Henry
2016-10-14Fixed #27345 -- Stopped setting the Date header in ConditionalGetMiddleware.Tim Graham
2016-10-13Refs #19705 -- Made GZipMiddleware make ETags weak.Kevin Christopher Henry
2016-10-10Fixed #26447 -- Deprecated settings.USE_ETAGS in favor of ConditionalGetMiddl...Denis Cornehl
2016-09-14Fixed #27211 -- Made UpdateCacheMiddleware include caching headers for "304 N...Rinat Khabibiev
2016-09-10Fixed #27083 -- Added support for weak ETags.Kevin Christopher Henry
2016-08-10Fixed #26947 -- Added an option to enable the HSTS header preload directive.Ed Morley
2016-07-15Fixed #26765 -- Made CommonMiddleware no longer set an ETag when response has...andrewnester
2016-06-27Fixed #5897 -- Added the Content-Length response header in CommonMiddlewareClaude Paroz
2016-06-17Refs #26601 -- Improved backwards-compatibility of DEP 5 middleware exception...Carl Meyer
2016-06-04Removed an unused logger in middleware/common.pyTim Graham
generated by cgit v1.3 (git 2.53.0) at 2026-05-01 23:37:10 +0000