deform

deform copied to clipboard

deform2: Fix sortable tinymce instances

10

Problem: the tinyMCE editor does not like jQuery-sortable. After changing the order of a sequence item containing a tinyMCE instance the editor will lose its content, instead displaying a grey...

sgarcez

Fix sequence widgets

3

# Example ## Before  ## After 

krysros

Tested on Debian 11.3 with Python 3.9, where all functional tests fails with v0.29.0 but pass with v0.31.0.

krysros

Fix bug when CSRF token does not appear in a form

2

This fixes a bug when csrf_token value appears empty in a form in the case when a schema has been created before creating a session factory, i.e. ..input type="hidden" name="csrf_token"...

adisloom

Update docs with Bootstrap 4/Deform 3/Python 3 references

2

When Deform 3.0 is approaching release, review all the docs and docstrings for any references to obsolete versions and update accordingly.

stevepiercy

Make parent formid a part of autogenerated oid

7

Better late then never :) https://github.com/Pylons/deform/issues/394

ezag

deserialize lost data

3

Hi! This is my form post: `MultiDict([('_charset_', 'UTF-8'), ('__formid__', 'deform'), ('token', '2993df2af005fdedea14ea7d79dcde97c7b0e677'), ('__start__', 'sdate:mapping'), ('date', '2021-08-20'), ('dt_date-visible', '20/08/2021'), ('__end__', 'sdate:mapping'), ('__start__', 'estimated_edate:mapping'), ('date', '2021-08-20'), ('dt_date-visible', '20/08/2021'), ('__end__', 'estimated_edate:mapping'), ('name', 'AAA'),...

apocalipsys

Form.formid has no effect on Field.oid autogeneration

1

As per [docs](https://docs.pylonsproject.org/projects/deform/en/latest/api.html#deform.Form), `formid` argument is intended for placing more than one Deform form into a single page. Though [autogenerated `oid`s](https://github.com/Pylons/deform/blob/2.0.8/deform/field.py#L169) will conflict in this case (violating HTML standard and...

ezag

Prevent browser from auto-filling CheckedPasswordWidget

5

Browser support is incomplete, but better than nothing :). See https://caniuse.com/mdn-html_global_attributes_autocomplete_new-password

JocelynDelalande

Support for Content-Security-Policy headers via nonce attribute of script/style tags, to avoid need for unsafe-inline CSP rule

4

Setting the ``Content-Security-Policy`` (CSP) HTTP header (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy), which is a good thing, means that inline ```` and ```` tags will be blocked by the browser unless either the ``unsafe-inline`` CSP...

RudolfCardinal