Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
A package which logs to a Python logger when an exception is raised by a Pyramid application
pyramid_exclog
A package which logs Pyramid application exception (error) information to a standard Python logger. This add-on is most useful when used in production applications, because the logger can be configured to log to a file, to UNIX syslog, to the Windows Event Log, or even to email.
See the documentation at https://docs.pylonsproject.org/projects/pyramid-exclog/en/latest/ for more information.
This package will only work with Pyramid 1.5 and better.
Drop support for Python 2.7, 3.5, and 3.6.
Support Python 3.7, 3.8, 3.9, 3.10. See https://github.com/Pylons/pyramid_exclog/pull/35
Add exclog.hide_cookies
config option to mark certain
cookie values as hidden from messages.
See https://github.com/Pylons/pyramid_exclog/pull/39
Include the license file in the wheel. See https://github.com/Pylons/pyramid_exclog/pull/37
Refactor source repo, blackify, and remove tests from package. See https://github.com/Pylons/pyramid_exclog/pull/41
Drop support for Python 3.3.
Require Pyramid 1.5+.
Move the tween over the EXCVIEW
such that it also handles
exceptions caused by exception views.
See https://github.com/Pylons/pyramid_exclog/pull/32
Drop support for Python 2.6 and 3.2.
Add explicit support for Python 3.4 and 3.5.
Handle IOError exception when accessing request parameters.
Fix UnicodeDecodeError on Python 2 when QUERY_STRING is a str
containing non-ascii bytes.
Allways pass the logging module text rather than sometimes bytes and sometimes text.
Add explicit support for Python 3.3.
Do not error if the URL, query string or post data contains unexpected encodings.
Try to log an exception when logging fails: often the middleware is used just inside one which converts all errors into ServerErrors (500), hiding any exceptions triggered while logging.
Add unauthenticated_user()
to the output when the extra_info
key
is set to True (PR #11).
Add a hook for constructing custom log messages (PR #15).
Changed testing regime to allow setup.py dev
.
We no longer test under Python 2.5 (although it's not explicitly broken under 2.5).
exclog.extra_info
setting to the exclog configuration. If it's
true, send WSGI environment and params info in the log message.Improve documentation by providing examples of logging to file, email and by describing deltas to default Pyramid 1.2 logging config.
Use string value as factory to add_tween in includeme.
FAQs
A package which logs to a Python logger when an exception is raised by a Pyramid application
We found that pyramid-exclog demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.