Menu

#15 document tg.ignore_parameter for TG2

2.1.2
closed
nobody
docs
enhancement
normal
documentation
2.1.0
2011-07-21
2011-03-10
No

TurboGears1 has had a config option tg.ignore_parameters since r4185. That config option allows you to set a list of parameters that you don't want any of your methods to complain about. This is useful when dealing with javascript libraries (as mentioned when the change went in: http://trac.turbogears.org/ticket/1653 ). I am using it in order to set a CSRF protecting token that should be accepted by any urls in my TG1 app.

AFAICT, there isn't an equivalent to this in TG2 and it makes implementing the CSRF protection a bit harder (or perhaps just different and I don't know where to look :-). Any chance that we could get an equivalent feature added to TG2?


Ohhh yes, I had a nightmare with http://trac.turbogears.org/ticket/1653 in my last TG2 project (ExtJS)

+1 on this one.


needs to be documented here: http://www.turbogears.org/2.1/docs/main/Config.html

Discussion