Maximilian Tagher
6b22a0b9be
Give more detail in the error message for too large request bodies.
...
* Just to be helpful to developers, give the maximum body length and their body length
* Also point developers to the function to change that value
(I don't think this leaks any sensitive info, because you can always binary search with different request body sizes to find the maximum allowable)
2018-01-18 18:30:34 -08:00
Michael Snoyman
e2b0a5c454
Merge pull request #1474 from yesodweb/documentCustomizingCSRFByRoute
...
Document whitelisting certain routes to not need CSRF protection
2017-12-31 06:24:39 +02:00
Michael Snoyman
f9a87f4022
Merge pull request #1473 from yesodweb/fix1459
...
Fix Haddock syntax error and test failures introduced by #1459
2017-12-30 18:13:41 +02:00
Michael Snoyman
65093b6b24
Merge branch 'master' into fix1459
2017-12-30 18:13:32 +02:00
Michael Snoyman
ed40b136ea
Fix broken Haddocks
2017-12-30 18:06:45 +02:00
Maximilian Tagher
5cdc0a39ac
Document whitelisting certain routes to not need CSRF protection
...
This question came up on the #yesod Slack channel and I think it's moderately common; I've seen it elsewhere.
2017-12-29 23:44:08 -05:00
Maximilian Tagher
51bdb66252
Fix Haddock syntax error and test failures introduced by #1459
2017-12-29 20:20:18 -05:00
Maximilian Tagher
3bf6a89595
Update PULL_REQUEST_TEMPLATE.md
2017-12-29 20:17:48 -05:00
Maximilian Tagher
5af7fe95ec
Merge pull request #1470 from csi-adziahel/patch-1
...
Fix typo breaking some parsers
2017-12-28 15:23:40 -08:00
Michael Snoyman
3df82600b8
Merge pull request #1459 from pythonissam/bylabel-exact
...
Bylabel exact
2017-12-27 13:02:42 +02:00
kotaro
daa953ed1f
Add PR link into the deprecated pragmas
2017-12-27 09:47:57 +09:00
Andrey Dyagel
8a0778a58a
Fix typo breaking some parsers
2017-12-22 16:15:13 +03:00
Michael Snoyman
5a5cd81276
Support typed-process-0.2.0.0 ( fixes #1467 )
2017-12-19 11:53:41 +02:00
kotaro
8e52b490fe
Insert deprecated pragmas for byLabel and fileByLabel
2017-12-18 14:10:12 +09:00
kotaro
8cf44ff7c8
Small fix of haddock
2017-12-18 13:34:16 +09:00
pythonissam
31903c34f8
fileByLabelExact: Created the exact version of fileByLabel
2017-12-17 08:50:48 +00:00
Maximilian Tagher
96758a4d58
Merge pull request #1465 from psibi/unsafe-haddock
...
Fix haddock doc for the Yesod.Core.Unsafe module
2017-12-12 15:14:21 -08:00
Sibi Prabakaran
323d7f4322
Fix haddock doc for the Yesod.Core.Unsafe module
2017-12-13 02:33:37 +05:30
Michael Snoyman
64b5bdb347
Merge pull request #1460 from yesodweb/updated-coc
...
Switch CoC to Contributor Covenant
2017-12-10 18:22:46 +02:00
Michael Snoyman
09ac889376
Merge pull request #1462 from psibi/master
...
Fixed exposed version number and also haddock syntax for Yesod.Auth module
2017-12-08 12:07:28 +02:00
Sibi Prabakaran
aff72a7365
Fix since markup
2017-12-08 15:33:15 +05:30
Sibi Prabakaran
663220f334
Fix exposed version number and also haddock syntax
2017-12-08 15:30:32 +05:30
Michael Snoyman
c122af25ad
Merge pull request #1461 from LiveViewTech/redirect_to_current
...
Redirect to current
2017-12-08 09:02:59 +02:00
Casey Allred
e40178a854
adding link to the PR in changelog.md
2017-12-07 14:24:48 -07:00
Casey Allred
108c0c3984
merged master
2017-12-07 14:22:28 -07:00
Casey Allred
30ccfc8089
didn't mean to change this signature
2017-12-07 14:01:36 -07:00
Casey Allred
f82d08b32a
add a way to control redirection to current location when redirectLogin is called
2017-12-07 13:56:53 -07:00
Michael Snoyman
f7f2c1edbd
Switch CoC to Contributor Covenant
2017-12-06 16:02:01 +02:00
kotaro
baf30d0c9d
Improve comments
2017-12-04 17:12:51 +09:00
pythonissam
699203f5af
Update the Changelog
2017-12-02 10:14:24 +00:00
pythonissam
e5c04a0b8e
Version bump
2017-12-02 09:57:40 +00:00
pythonissam
db87b76816
Add version info
2017-12-02 09:56:56 +00:00
pythonissam
8f218307be
Improve the function name
2017-12-02 09:46:41 +00:00
pythonissam
57e25eaf39
Improve the document
2017-12-02 09:44:49 +00:00
pythonissam
8693c72c41
Remove the original nameFromLabel
2017-12-02 08:05:59 +00:00
pythonissam
70ec8c6823
new function genericNameFromLabel which abstracts the match methods
2017-12-02 08:00:31 +00:00
Maximilian Tagher
c81ad91cd1
Merge pull request #1455 from yesodweb/csrfBetterErrors
...
Give better error messages when CSRF validation fails
2017-11-26 10:41:02 -05:00
Maximilian Tagher
1275cce1af
Give better error messages when CSRF validation fails
...
* This is important because historically these errors have tripped people up
* Making security as easy as possible is important so that it doesn't just get turned off
* Giving clear directions about where to get the CSRF token (a cookie) and where to send it (a header/param) is especially helpful to frontend developers not necessarily familiar with the backend codebase
2017-11-26 09:00:30 -05:00
Michael Snoyman
18de949b03
Merge pull request #1457 from bermanjosh/langFix
...
Fix docs on `languages` set and `getMessageRender` to use it (#1325 )
2017-11-26 12:40:56 +02:00
Josh Berman
6d6afcf826
point changelog to PR not issue
2017-11-26 12:09:17 +02:00
Josh Berman
79ab662a80
Fix docs on languages set and getMessageRender to use it ( #1325 )
2017-11-26 11:52:37 +02:00
pythonissam
80aa45cf18
Simply, create the exact version of byLabel
2017-11-26 07:22:25 +00:00
pythonissam
cab78b65c2
Add a failure test case for byLabel
2017-11-26 04:45:02 +00:00
Maximilian Tagher
c21e77947c
Merge pull request #1456 from eborden/eborden/fix-constraints-on-get404
...
Fix constraints on get404 and getBy404
2017-11-17 14:13:33 -08:00
Evan Rutledge Borden
cfb8fd9b21
Version bump for get404 and getBy404 constraint changes.
2017-11-17 14:41:57 -05:00
Evan Rutledge Borden
33d3200399
Fix constraints on get404 and getBy404
...
The constraints on `get404` and `getBy404` were overly powerful. They were
constrained by `PersistStore` and `PersistStoreUnique`, which is an alias for
`PersistStoreWrite...`. These only need `PersistStoreRead...` to accomplish
their job.
2017-11-17 14:28:20 -05:00
Maximilian Tagher
d848a7123f
Merge pull request #1451 from yesodweb/githubTemplates
...
Add Github issue and PR templates, plus contributing guidelines
2017-11-16 09:28:22 -08:00
Maximilian Tagher
8208e3deac
Fix typo in Haddocks of assertEq
2017-11-15 11:32:59 -08:00
Maximilian Tagher
3247237c44
Respond to @psibi's comments
2017-11-08 22:43:51 -08:00
Maximilian Tagher
7a4b2812c1
Update contributing guidelines based of Snoyberg's "How to Send Me a PR" post
2017-11-08 22:32:15 -08:00
