Maximilian Tagher
6b22a0b9be
Give more detail in the error message for too large request bodies.
...
* Just to be helpful to developers, give the maximum body length and their body length
* Also point developers to the function to change that value
(I don't think this leaks any sensitive info, because you can always binary search with different request body sizes to find the maximum allowable)
2018-01-18 18:30:34 -08:00
Maximilian Tagher
5cdc0a39ac
Document whitelisting certain routes to not need CSRF protection
...
This question came up on the #yesod Slack channel and I think it's moderately common; I've seen it elsewhere.
2017-12-29 23:44:08 -05:00
Sibi Prabakaran
323d7f4322
Fix haddock doc for the Yesod.Core.Unsafe module
2017-12-13 02:33:37 +05:30
Maximilian Tagher
1275cce1af
Give better error messages when CSRF validation fails
...
* This is important because historically these errors have tripped people up
* Making security as easy as possible is important so that it doesn't just get turned off
* Giving clear directions about where to get the CSRF token (a cookie) and where to send it (a header/param) is especially helpful to frontend developers not necessarily familiar with the backend codebase
2017-11-26 09:00:30 -05:00
Josh Berman
6d6afcf826
point changelog to PR not issue
2017-11-26 12:09:17 +02:00
Josh Berman
79ab662a80
Fix docs on languages set and getMessageRender to use it ( #1325 )
2017-11-26 11:52:37 +02:00
Ian Duncan
05b2193e9f
Code review fixes for #1444
2017-09-08 09:00:12 +09:00
Ian Duncan
fd872cff40
Add support to yesod-core for weak etags
2017-09-06 10:08:45 +09:00
Sibi Prabakaran
7cfefdf3fa
Merge remote-tracking branch 'origin/master' into header-yesod
...
Conflicts resolved in:
yesod-core/ChangeLog.md
yesod-core/yesod-core.cabal
2017-07-28 17:01:03 +05:30
Sibi Prabakaran
19ff5c2006
Fix warning in test code
2017-07-28 16:58:11 +05:30
Michael Snoyman
4b34fe9c72
Fix deprecation warning for LTS 8
2017-07-23 12:25:29 +03:00
Michael Snoyman
06ca675bb6
Version bump
2017-07-20 13:58:15 +03:00
Sibi Prabakaran
617591aa4e
Do case insensitive equality on header name
2017-07-14 13:44:21 +05:30
Sibi Prabakaran
89fc6c46e2
Fix ordering logic in replaceHeader function
2017-07-13 16:29:08 +05:30
Sibi Prabakaran
f3ed12ed81
Add additional test to make sure that header value is not lost
2017-07-13 12:43:16 +05:30
Sibi Prabakaran
18951b0de7
Update the replace logic to obey proper ordering
2017-07-13 12:42:30 +05:30
Sibi Prabakaran
8416bb6569
Add Haddock documentation for the added function
2017-07-13 11:27:03 +05:30
Sibi Prabakaran
a31c270893
Update Changelog and do verion bump of the package
2017-07-13 11:24:57 +05:30
Sibi Prabakaran
3cec499c85
ScopedTypeVariables is also needed
2017-07-13 11:17:03 +05:30
Sibi Prabakaran
4e0b084df2
Enable test in YesodCoreTest
2017-07-13 11:16:47 +05:30
Sibi Prabakaran
839b56b032
Implement replaceOrAddHeader function
2017-07-13 11:10:54 +05:30
Sibi Prabakaran
301f4bc630
Expose YesodCoreTest.Header module
2017-07-13 11:07:13 +05:30
Sibi Prabakaran
051339f3dc
Add test code for HTTP headers properties
2017-07-13 11:05:57 +05:30
Josh Berman
ec85ef735c
Work with TH from GHC 8.2.1-rc2
2017-07-03 06:44:25 -04:00
James Parker
70f643b7e9
Merge branch 'master' of https://github.com/yesodweb/yesod into dev.jp
2017-06-01 11:24:54 -04:00
James Haver II
5ee51262de
Update ChangeLog and Hackage comments
2017-05-12 01:04:13 +08:00
James Haver II
56b09eef93
Add WaiSubsiteWithAuth
2017-05-12 00:13:07 +08:00
Alan Zimmerman
01d5f02cee
GHC 7.6 not supported
2017-04-12 19:31:40 +02:00
JP
db8bbcd8b5
Merge branch 'master' into dev.jp
2017-03-27 12:10:04 -04:00
James Parker
6b000ecfb4
Version bump and fix for old versions of TH.
2017-03-27 12:06:44 -04:00
James Parker
997714f4c2
Accept multiple argument types inside brackets
2017-03-27 02:42:47 -04:00
James Parker
adf89bcf84
Contexts can be parsed and included in instances. Standalone deriving is used when
...
a context is provided. Type variables can be included in routes/TH.
2017-03-27 00:10:32 -04:00
Michael Snoyman
de9f5bc4c9
Version bump for #1363
2017-03-26 18:14:40 +03:00
James Parker
6c7a40ea5b
Adds curly brackets to route parser.
2017-03-22 18:30:08 -04:00
Michael Snoyman
55623b76f6
Improve ChangeLog
2017-03-01 08:53:13 +02:00
Sibi Prabakaran
6d7ba59e4b
Update changelog
2017-02-17 00:22:57 +05:30
Sibi Prabakaran
470858f81c
Better Haddock rendering. Since -> @since
2017-02-17 00:21:31 +05:30
Sibi Prabakaran
797278243e
Add and export getPostParams function
2017-02-17 00:18:17 +05:30
Michael Snoyman
cdc6c8ae04
Version bumps/changelog updates
2017-02-08 11:20:31 +02:00
Michael Snoyman
954f813569
Fix route parsing for CRLF line endings
2017-02-07 15:49:23 +02:00
Michael Snoyman
aefd074efa
Cleanup GHC 8 redundant constraints
2017-02-05 13:35:12 +02:00
Michael Snoyman
3dc2d10b30
Compile with -Wall -Werror
2017-02-05 12:09:18 +02:00
Michael Snoyman
64ed0792bc
Check mime-type for JSON bodies #1330
2017-02-02 08:10:19 +02:00
Isaac Elliott
2d98587cce
Fixed misspelling of 'utilities'
2017-01-15 18:34:16 +10:00
Michael Snoyman
33f58e2bd1
Allow vector 0.12
2017-01-09 00:10:45 +02:00
Ollie Charles
57a9420d99
yesod-core: Build with template-haskell-2.12.0
2017-01-04 13:08:09 +00:00
Michael Snoyman
9a484f9163
defaultMessageWidget
2016-12-07 20:08:47 -05:00
Michael Snoyman
ae7dfd2408
Changelog for #1310
2016-12-07 08:52:55 -05:00
Aleksey Uimanov
80f0b3cd70
Add comments and bump minor version to 1.4.29
2016-12-07 14:04:51 +05:00
Aleksey Uimanov
47ef36012d
export getGetMaxExpires
2016-12-05 19:33:04 +05:00
