diff options
| author |  Gareth Coles <[email protected]> | 2018-04-05 09:54:20 +0100 |
|---|---|---|
| committer | Gareth Coles <[email protected]> | 2018-04-05 09:54:20 +0100 |
| commit | e61f3943ee23a52f408661dcd6d161d7a555b94b (patch) | |
| tree | 23687fd7b945d21577900e9ab82ba42c7a311ea2 | |
| parent | Attempt to fix CSRF; add debug info to staff page (diff) | |
A few smaller fixes
| -rw-r--r-- | pysite/route_manager.py | 5 | ||||
| -rw-r--r-- | pysite/views/ws/rst.py | 6 |
2 files changed, 10 insertions, 1 deletions
diff --git a/pysite/route_manager.py b/pysite/route_manager.py index b36ccadd..e6d2c92c 100644 --- a/pysite/route_manager.py +++ b/pysite/route_manager.py @@ -36,6 +36,11 @@ class RouteManager: self.app.config["PREFERRED_URL_SCHEME"] = PREFERRED_URL_SCHEME self.app.config["WTF_CSRF_CHECK_DEFAULT"] = False # We only want to protect specific routes + # We make the token valid for the lifetime of the session because of the wiki - you might spend some + # time editing an article, and it seems that session lifetime is a good analogue for how long you have + # to edit + self.app.config["WTF_CSRF_TIME_LIMIT"] = None + self.app.before_request(self.db.before_request) self.app.teardown_request(self.db.teardown_request) diff --git a/pysite/views/ws/rst.py b/pysite/views/ws/rst.py index c85c10a0..52bdf09b 100644 --- a/pysite/views/ws/rst.py +++ b/pysite/views/ws/rst.py @@ -21,7 +21,11 @@ class RSTWebsocket(WS): def on_message(self, message): self.log.debug(f"RST | Message: {message}") - self.send(publish_parts(source=message, writer_name="html5")["html_body"]) + self.send( + publish_parts( + source=message, writer_name="html5", settings_overrides={"traceback": True} + )["html_body"] + ) def on_close(self): self.log.debug("RST | WS closed.") |