As the Flask tutorial explicitly returns messages that might reveal useful information to potential attackers, a section was added to raise awareness that in a real world application the reader might want to use more generic error messages as advised by the OWASP project (a link to the documentation of OWASP is provided).
* Clean up tutorial docs for installable app pattern
- reading sequentially through the tutorial works.
- fixes references to `export FLASK_APP=flaskr.flaskr`
* Fixes titles for each section of flaskr tutorial
* Revert grammar
* Emphasize the Packaging Guide
- adds more general packaging resource
- removes the emphasis put on setuptools
* rephrase and remove note admonitions
- expanded on few points
- removed note blocks, they are unneccessary
* Remove note about reinstalling to update cli
- I had mistakenly thought it was necessary to
re-install the app to update the cli.
- the `--editable` flag detects the change and
the cli updates without issue.
* Converts example/flaskr to have a setup.py
Makes the flaskr app easier to run, ex. workflow:
- pip install --editable .
- export FLASK_APP=flaskr.flaskr
- flask initdb
- flask run
Testing is also easier now:
- python setup.py test
* Fixed an import error in flaskr/tests
- the statement `import flaskr` caused errors in python3
- `from . import flaskr` fixes the issue in 2.7.11 and 3.5.1
* Better project structure and updates the docs
- Re-factors *flaskr*'s project structure a bit
- Updates docs to make sense with the new structure
- Adds a new step about installing Flask apps with setuptools
- Switches first-person style writing to second-person (reads better IMO)
- Adds segments in *testing.rst* for running tests with setuptools
* Remove __init__.py from tests
- py.test recommends not using __init__.py
* Fix testing import errors
