pkgsrc/www/py-django-cors-headers/PLIST
adam 974f5b934f py-django-cors-headers: updated to 3.0.1
3.0.1:

Allow 'null' in CORS_ORIGIN_WHITELIST check.


3.0.0:

CORS_ORIGIN_WHITELIST now requires URI schemes, and optionally ports. This is part of the CORS specification (Section 3.2) that was not implemented in this library, except from with the CORS_ORIGIN_REGEX_WHITELIST setting. It fixes a security issue where the CORS middleware would allow requests between schemes, for example from insecure http:// Origins to a secure https:// site.

You will need to update your whitelist to include schemes, for example from this:

CORS_ORIGIN_WHITELIST = ['example.com']
...to this:

CORS_ORIGIN_WHITELIST = ['https://example.com']
Removed the CORS_MODEL setting, and associated class. It seems very few, or no users were using it, since there were no bug reports since its move to abstract in version 2.0.0 (2017-01-07). If you are using this functionality, you can continue by changing your model to not inherit from the abstract one, and add a signal handler for check_request_enabled that reads from your model. Note you'll need to handle the move to include schemes for Origins.
2019-05-13 15:54:51 +00:00

24 lines
933 B
Text

@comment $NetBSD: PLIST,v 1.3 2019/05/13 15:54:51 adam Exp $
${PYSITELIB}/${EGG_INFODIR}/PKG-INFO
${PYSITELIB}/${EGG_INFODIR}/SOURCES.txt
${PYSITELIB}/${EGG_INFODIR}/dependency_links.txt
${PYSITELIB}/${EGG_INFODIR}/requires.txt
${PYSITELIB}/${EGG_INFODIR}/top_level.txt
${PYSITELIB}/corsheaders/__init__.py
${PYSITELIB}/corsheaders/__init__.pyc
${PYSITELIB}/corsheaders/__init__.pyo
${PYSITELIB}/corsheaders/checks.py
${PYSITELIB}/corsheaders/checks.pyc
${PYSITELIB}/corsheaders/checks.pyo
${PYSITELIB}/corsheaders/conf.py
${PYSITELIB}/corsheaders/conf.pyc
${PYSITELIB}/corsheaders/conf.pyo
${PYSITELIB}/corsheaders/defaults.py
${PYSITELIB}/corsheaders/defaults.pyc
${PYSITELIB}/corsheaders/defaults.pyo
${PYSITELIB}/corsheaders/middleware.py
${PYSITELIB}/corsheaders/middleware.pyc
${PYSITELIB}/corsheaders/middleware.pyo
${PYSITELIB}/corsheaders/signals.py
${PYSITELIB}/corsheaders/signals.pyc
${PYSITELIB}/corsheaders/signals.pyo