Django的轻量级JSON辅助函数集合。
项目描述
A lightweight collection of JSON helpers for Django. Includes a template filter for safely outputting JSON, views that encode and decode JSON, and a helper for writing simple REST views.
A special JSON encoder is used to serialize QuerySets and objects with to_json methods.
过滤器
You can serialize an object in JSON using the |json filter. This is useful to generate safe JavaScript
{% load argonauts %}
<script type="application/javascript">
(function () {
var object_list = {{ object_list|json }};
// do something with object_list
})();
</script>|json is safe to use anywhere in XML or XHTML except in an attribute. It’s important to use this tag rather than dumping the output of json.dumps into HTML, because an attacker could output a closing tag and effect an XSS attack. For example, if we output json.dumps("</script><script>console.log('xss'); //") in template like this
<script>
var somedata = {{ somedata_as_json|safe }};
</script>We get
<script>
var somedata = "</script>
<script>
console.log('xss'); //";
</script>This allows the attacker to inject their own JavaScript. The |json tag prevents this by encoding the closing </script> tag with JSON’s unicode escapes. If we output {{ somedata|json }}, we get
<script>
var somedata = "\u0060xscript\u0062x\u0060xscript\u0062xconsole.log('xss');//";
</script>它还会转义 ampersands 以生成有效的 XML。例如，使用值 foo & bar
<document><json>{{ value|json }}</json></document>
<!-- Results in valid XML:
<document><json>"foo \u0038x bar"</json></document>
-->视图
JsonResponseMixin
JsonResponseMixin 实现了将对象序列化为 JSON 响应的 render_to_response 方法。因此，它与通用 Django 视图兼容
from django.db import models
from django.views.generic.detail import BaseDetailView
from argonauts.views import JsonResponseMixin
class Blog(models.Model):
title = models.CharField(max_length=255)
body = models.TextField()
def to_json(self):
return {
'title': self.title,
'body': self.body,
}
class BlogDetailView(JsonResponseMixin, BaseDetailView):
"""
Detail view returning object serialized in JSON
"""
model = BlogJsonRequestMixin
JsonRequestMixin 通过 data() 方法提供对请求数据的访问。
from django.views.generic.base import View
from argonauts.views import JsonRequestMixin:
from argonauts.http import JsonResponse
class EchoView(JsonRequestMixin, View):
def dispatch(self, *args, **kwargs):
return JsonResponse(self.data())RestView
RestView 是一个抽象类。子类应实现 auth()，用于处理身份验证，以及至少一个 HTTP 方法。
RestView 实现了 OPTIONS HTTP 方法，并从 JsonRequestMixin 和 JsonResponseMixin 继承。
from django.core.exceptions import PermissionDenied
from argonauts.views import RestView
from .utils import get_action
class CrazyRestView(RestView):
def auth(self, *args, **kwargs):
if not self.request.user.is_superuser:
raise PermissionDenied
def post(self, *args, **kwargs):
action = kwargs.pop('action')
action_func = get_action(action)
return self.render_to_response(action_func(self.data()))变更日志
1.2.0 (2016-09-20)
为 JsonTestClient 添加了对没有 Content-Type 头的请求的支持
移除了对旧版本 Django 的支持（<= 1.7）
1.1.4 (2015-07-29)
测试模拟的 http 请求不总是有字符集
1.1.3 (2015-05-27)
修复了包（包括 MANIFEST.in 中的 CHANGELOG）
1.1.2 (2015-05-27)
添加了 JsonTestCase 和 JsonTestMixin
1.1.1 (2015-04-20)
修复了包
1.1.0 (2015-04-20)
清理
放弃了 Django 1.3 的支持
添加了对 Python 3 的支持
更新了文档
将测试切换到 py.test
切换到 zest.releaser
1.0.1 (2013-10-06)
修复了测试
1.0.0 (2013-07-05)
初始发布
从 django-fusionbox 中提取
安全 JSON 序列化器
安全 JSON 模板过滤器
JSON 视图
django-argonauts-1.2.0.tar.gz 的哈希值
| 算法 | 哈希摘要 | |
|---|---|---|
| SHA256 | 7a41748545c839ed8145036c0b9f2d0cd03fa856ee77aa0f6ba4d96e4086811a |
|
| MD5 | 22e8d2efc63eea80c714bfb38a2956a0 |
|
| BLAKE2b-256 | 00fa440898ae46aceb7094d3b5b2bdd5f63a2190b80e21becf46609aa4ef6571 |
