معرفی شرکت ها
django-json-tag-0.0.1
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشتر
تبلیغات ما
مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.
مشاهده بیشترتوضیحات
A lightweight collection of JSON helpers for Django.
| ویژگی | مقدار |
|---|---|
| سیستم عامل | - |
| نام فایل | django-json-tag-0.0.1 |
| نام | django-json-tag |
| نسخه کتابخانه | 0.0.1 |
| نگهدارنده | ['Thomas Grainger'] |
| ایمیل نگهدارنده | ['django-json-tag@graingert.co.uk'] |
| نویسنده | fusionbox, inc. |
| ایمیل نویسنده | programmers@fusionbox.com |
| آدرس صفحه اصلی | https://github.com/graingert/django-json-tag |
| آدرس اینترنتی | https://pypi.org/project/django-json-tag/ |
| مجوز | - |
===============
django-json-tag
===============
.. image:: https://api.travis-ci.org/graingert/django-json-tag.png
:alt: Building Status
:target: https://travis-ci.org/graingert/django-json-tag
A lightweight collection of JSON helpers for Django. Includes a template filter
for safely outputting JSON, views that encode and decode JSON, and a helper for
writing simple REST views.
A special JSON encoder is used to serialize QuerySets and objects with
``to_json`` methods.
------
Filter
------
You can serialize an object in JSON using the ``|json`` filter. This is useful
to generate safe JavaScript:
.. code:: html
{% load json_tag %}
<script type="application/javascript">
(function () {
var object_list = {{ object_list|json }};
// do something with object_list
})();
</script>
``|json`` is safe to use anywhere in XML or XHTML except in a double quoted attribute. It's
important to use this tag rather than dumping the output of ``json.dumps`` into
HTML, because an attacker could output a closing tag and effect an XSS attack.
For example, if we output ``json.dumps("</script><script>console.log('xss');
//")`` in template like this:
.. code:: html
<script>
var somedata = {{ somedata_as_json|safe }};
</script>
We get:
.. code:: html
<script>
var somedata = "</script>
<script>
console.log('xss'); //";
</script>
This allows the attacker to inject their own JavaScript. The ``|json`` tag
prevents this by encoding the closing ``</script>`` tag with JSON's unicode
escapes. If we output ``{{ somedata|json }}``, we get:
.. code:: html
<script>
var somedata = "\u0060xscript\u0062x\u0060xscript\u0062xconsole.log(\u0027xss\u0027);//";
</script>
json_tag also escapes single quotes this allows you to write valid JS for tools like
eslint-plugin-html and for use in single quoted XML or XHTML attributes:
.. code:: html
<script data-data='{{ extra|json }}'>
var somedata = JSON.parse('{{ somedata|json }}');
</script>
It also escapes ampersands in order to generate valid XML. For example, with the value
``foo & bar``:
.. code:: xml
<document><json>{{ value|json }}</json></document>
<!-- Results in valid XML:
<document><json>"foo \u0038x bar"</json></document>
-->
---
Tag
---
You can also serialize multiple objects at the same time with the `{% json %}`
template tag.
To create an Array, use:
.. code:: html
{% load json_tag %}
<script type="module">
const [ham, spam, eggs] = {% json ham spam eggs %};
// do something with ham, spam and eggs.
</script>
To create an Object, use:
.. code:: html
{% load json_tag %}
<script type="module">
const { ham, spam, eggs } = {% json ham=user spam=author eggs=owner %};
// do something with ham, spam and eggs.
</script>
If you mix args and kwargs, however, you get an array-like object with
numeric properties from the args and string properties from the kwargs.
.. code:: html
{% load json_tag %}
<script type="module">
import assert from 'assert';
const x = {% json ham spam=author eggs=owner %};
const [ham] = Array.from(x);
const { spam, eggs, length } = x;
assert(length === 1);
const y = Array.prototype.map.call(x, v => v + 1);
assert.deepEqual(y, [ham+1]);
// do something with ham, spam and eggs.
</script>
The `length` property is populated from the number of args passed to
allow use with Array methods like Array.prototype.map or Array.from.
You can override it, but it is likely to cause Array methods to fail:
.. code:: html
{% load json_tag %}
<script type="module">
import assert from 'assert';
const x = {% json ham spam=author eggs=owner length='banana'%};
const [ham] = Array.from(x);
assert(typeof ham === 'undefined');
const { spam, eggs, length } = x;
assert(length === 'banana');
const y = Array.prototype.map.call(x, v => v + 1);
assert.deepEqual(y, []);
// do something with spam and eggs.
</script>
-----
Views
-----
``JsonResponseMixin``
=====================
``JsonResponseMixin`` implements ``render_to_response`` method that serializes
an object into a JSON response. Thus it is compatible with generic Django
views:
.. code:: python
from django.db import models
from django.views.generic.detail import BaseDetailView
from json_tag.views import JsonResponseMixin
class Blog(models.Model):
title = models.CharField(max_length=255)
body = models.TextField()
def to_json(self):
return {
'title': self.title,
'body': self.body,
}
class BlogDetailView(JsonResponseMixin, BaseDetailView):
"""
Detail view returning object serialized in JSON
"""
model = Blog
``JsonRequestMixin``
====================
``JsonRequestMixin`` gives access to the request data through ``data()`` method.
.. code:: python
from django.views.generic.base import View
from json_tag.views import JsonRequestMixin:
from json_tag.http import JsonResponse
class EchoView(JsonRequestMixin, View):
def dispatch(self, *args, **kwargs):
return JsonResponse(self.data())
``RestView``
============
``RestView`` is an abstract class. Subclasses should implement `auth()`, for
handling authentication, and at least one HTTP method.
``RestView`` implements `OPTIONS` http method, and inherits from
``JsonRequestMixin`` and ``JsonResponseMixin``.
.. code:: python
from django.core.exceptions import PermissionDenied
from json_tag.views import RestView
from .utils import get_action
class CrazyRestView(RestView):
def auth(self, *args, **kwargs):
if not self.request.user.is_superuser:
raise PermissionDenied
def post(self, *args, **kwargs):
action = kwargs.pop('action')
action_func = get_action(action)
return self.render_to_response(action_func(self.data()))
Changelog
=========
0.0.1 (2018-04-24)
------------------
- Rename module to json_tag
0.0.0 (2018-04-24)
------------------
Initial release:
- Extracted from django-argonauts
- `{% json %}` tag
- escape single quote
- fix travis tests
نحوه نصب
نصب پکیج whl django-json-tag-0.0.1:
pip install django-json-tag-0.0.1.whl
نصب پکیج tar.gz django-json-tag-0.0.1:
pip install django-json-tag-0.0.1.tar.gz