#32124: Allow individual views to opt-out of APPEND_SLASH behaviour.
------------------------------------------+------------------------
               Reporter:  Carlton Gibson  |          Owner:  nobody
                   Type:  New feature     |         Status:  new
              Component:  HTTP handling   |        Version:  3.1
               Severity:  Normal          |       Keywords:
           Triage Stage:  Unreviewed      |      Has patch:  0
    Needs documentation:  0               |    Needs tests:  0
Patch needs improvement:  0               |  Easy pickings:  0
                  UI/UX:  0               |
------------------------------------------+------------------------
 The URL normalisation given by APPEND_SLASH is useful.

 I may wish to retain that but also have a sensitive view that opts-out of
 that behavior, to avoid it being revealed in a potential URL enumeration.

 I propose adjusting `CommonMiddleware` to detect a `_should_append_slash`
 boolean attribute on the view itself, to allow such an opt-out.

-- 
Ticket URL: <https://code.djangoproject.com/ticket/32124>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/056.99cea0b6dbf7db3fe76238ae83554a84%40djangoproject.com.

Reply via email to