Maximilian Tagher
6b22a0b9be
Give more detail in the error message for too large request bodies.
...
* Just to be helpful to developers, give the maximum body length and their body length
* Also point developers to the function to change that value
(I don't think this leaks any sensitive info, because you can always binary search with different request body sizes to find the maximum allowable)
2018-01-18 18:30:34 -08:00
Maximilian Tagher
1275cce1af
Give better error messages when CSRF validation fails
...
* This is important because historically these errors have tripped people up
* Making security as easy as possible is important so that it doesn't just get turned off
* Giving clear directions about where to get the CSRF token (a cookie) and where to send it (a header/param) is especially helpful to frontend developers not necessarily familiar with the backend codebase
2017-11-26 09:00:30 -05:00
Josh Berman
79ab662a80
Fix docs on languages set and getMessageRender to use it ( #1325 )
2017-11-26 11:52:37 +02:00
Ian Duncan
fd872cff40
Add support to yesod-core for weak etags
2017-09-06 10:08:45 +09:00
Sibi Prabakaran
a31c270893
Update Changelog and do verion bump of the package
2017-07-13 11:24:57 +05:30
Sibi Prabakaran
301f4bc630
Expose YesodCoreTest.Header module
2017-07-13 11:07:13 +05:30
James Parker
70f643b7e9
Merge branch 'master' of https://github.com/yesodweb/yesod into dev.jp
2017-06-01 11:24:54 -04:00
James Haver II
5ee51262de
Update ChangeLog and Hackage comments
2017-05-12 01:04:13 +08:00
Alan Zimmerman
01d5f02cee
GHC 7.6 not supported
2017-04-12 19:31:40 +02:00
James Parker
6b000ecfb4
Version bump and fix for old versions of TH.
2017-03-27 12:06:44 -04:00
Michael Snoyman
de9f5bc4c9
Version bump for #1363
2017-03-26 18:14:40 +03:00
Michael Snoyman
cdc6c8ae04
Version bumps/changelog updates
2017-02-08 11:20:31 +02:00
Michael Snoyman
3dc2d10b30
Compile with -Wall -Werror
2017-02-05 12:09:18 +02:00
Michael Snoyman
64ed0792bc
Check mime-type for JSON bodies #1330
2017-02-02 08:10:19 +02:00
Michael Snoyman
33f58e2bd1
Allow vector 0.12
2017-01-09 00:10:45 +02:00
Michael Snoyman
9a484f9163
defaultMessageWidget
2016-12-07 20:08:47 -05:00
Aleksey Uimanov
80f0b3cd70
Add comments and bump minor version to 1.4.29
2016-12-07 14:04:51 +05:00
Aleksey Uimanov
2bd3a936c9
fix blaze-markup version bounds
2016-12-02 16:26:19 +05:00
Michael Snoyman
312adc40d5
Version bump for #1310
2016-11-30 13:40:46 +02:00
Michael Snoyman
00cf852216
Version bump for #1308
2016-11-29 13:47:33 +02:00
Michael Snoyman
bbca01ce71
languages reflects setLanguage
2016-11-04 11:10:26 +02:00
Michael Snoyman
856e60eb9b
Version bump
2016-09-25 14:34:38 +03:00
Michael Snoyman
87afb38635
Version bump for #1268
2016-08-29 07:04:34 +03:00
Michael Snoyman
e5b3cf6dc7
Version bump
2016-08-28 14:59:55 +03:00
Michael Snoyman
f6891b0373
Merge branch 'BL/samesite' of https://github.com/bobjflong/yesod into bobjflong-BL/samesite
2016-08-10 15:17:25 +03:00
Michael Snoyman
629d4c49a4
Version bump for #1257
2016-08-10 08:42:04 +03:00
Michael Snoyman
c24d0e7f80
Allow deepseq 1.3
2016-06-22 23:01:44 +03:00
Michael Snoyman
a3d9a13abe
Proper handling of impure exceptions within HandlerError values
2016-06-22 18:24:18 +03:00
Michael Snoyman
85e7fd7e33
Version bump for #1241
2016-06-20 17:30:28 +03:00
Adam Bergmark
7f9f8b450e
yesod-core needs bytestring >= 0.10
2016-06-04 18:55:35 +02:00
Bob Long
aed1e27cb7
Bump cookie version in cabal file
2016-05-01 17:21:33 +01:00
Michael Snoyman
bf0ca2bc10
Version bump
2016-04-25 16:57:40 +03:00
Michael Snoyman
b00d372c76
Fix benchmark compilation of yesod-core
2016-04-21 20:17:05 +03:00
Maximilian Tagher
5a5cfd6c7a
Bump version for CSRF logging changes, and improve error message.
2016-03-28 23:36:31 -07:00
Michael Snoyman
da4948592d
Version bump
2016-03-29 09:14:02 +03:00
Michael Snoyman
406694cd29
Version bump for #1182
2016-03-13 08:26:24 +02:00
Michael Snoyman
cf5a390cad
Add _token parameter to redirectToPost #1151
2016-01-24 14:37:44 +02:00
Michael Snoyman
aa36a22834
Version bump for yesod-core
2016-01-21 09:59:45 +02:00
Michael Snoyman
d346b8361f
Version bump ( fixes #1128 )
2015-12-19 20:08:17 +02:00
Michael Snoyman
bff65b7942
Version bump for #1122
2015-12-14 11:50:25 +02:00
Michael Snoyman
de3818784a
getApprootText
2015-12-04 14:40:50 +02:00
Michael Snoyman
5d0a4567f3
Add the guessApproot function (pinging @gregwebs)
2015-10-13 10:32:25 +00:00
Greg Weber
1567145110
version bump yesod-core to 1.4.15
2015-08-23 17:20:42 -07:00
Michael Snoyman
0fcbbb7951
Version bump
2015-08-20 08:02:42 +03:00
Maximilian Tagher
33982b2112
Add CSRF protection functions/middleware that support AJAX requests
2015-08-17 16:52:39 -07:00
Michael Snoyman
09343872c4
Version bump
2015-08-11 07:50:24 +03:00
Michael Snoyman
0b0341a280
vector 0.11
2015-07-15 19:10:17 +03:00
Andrew Martin
b88295cf05
stop the module import cycle
2015-06-05 13:20:03 -04:00
Michael Snoyman
b20c19d2c5
Version bump
2015-06-04 09:43:06 +03:00
Michael Snoyman
882956255a
Better support for multiple cookie headers
2015-04-02 16:40:14 +03:00
