#django

how is that you can use a simple proxy to change the origin of a web request

that defies expectations, why isn't that a security flaw?

you can get around CORS by simple rewriting the origin of the request?

CORS is a browser thing

i know that

so your other browser tabs can't steal sessions and stuff

man if i had a nickel every time someone said "cors is a browser thing" lol

a proxy can make whatever requests it wants

can anyone help? https://www.reddit.com/r/webdev/comments/7mq87n...

but a proxy can't steal your session

unless it also successfully poses as the site you're trying to attack

I try to read file during upload file I got this error. https://dpaste.de/MLom

link is correct as lik this https://storage.googleapis.com/subtitle-world/m...

doismellburning ▸ it seems i can bypass this problem in dev by using the webpack-dev-server proxy table and just proxying the API/auth requests

now to see if i can set a cookie via an ajax api authentication request

when I download file the filename include with directory path.

like this movie%2F316029%2Fko%2FHacksaw_Ridge_2016.E00.170222.BRRip.x264.720p.EVO

Howdy, I've got a model that references its self (many-to-many) and I'm trying to work out a way of getting all the id's for a filtered list of objects, and its sub (related) objects in one go.

hypertiger we need more code

Currently, I'm using an .all() on the primary/parent list of objects, but can't work out how to get the primary AND the sub-objects too.

hypertiger sounds like you should just be calling it with `safe` https://docs.djangoproject.com/en/2.0/ref/templ...

aussiejames: prefetch related

Oh yes, of course.

Don't know why that's not mentioned on the "making queries" documentation page...

FunkyBob, is there a way to use prefetch_related and consolidate/flatten the results into a single list of objects? Can't see anything that looks like it will do that in the doco.

values_list(flat=True)?

Yeah, using Values List for something already, not sure it will do what I want - I'm just trying to build something in the shell to test.

so you want the distinct set where parent=X or parent__parent=X ?

I want a combined list where parent=X with its children (if any, some parents don't have children of the same object type)

but with multiple parents

Currently: https://dpaste.de/GJEJ

to get the parents, without children

that query includes all non related objects of other jobs

django is also capable of using subqueries so you do not need to reduce the inner queryset to id's, you can pass it as is

Cool. So this might be a bit cleaner: https://dpaste.de/H5Dd

and has the correct order of calls to only prefetch the related assets, not jobs.

not quite, prefetch does not work with a subquery so effectively it does the same as the other version

prefetch_related does not merge the related objects in the queryset, you still need to iterate each relation to access them

*outer queryset

yeah, makes sense. I didn't think it did.

I'll just do a loop to bundle them in together to a master collection of assets,

Thanks!

ugh, being hungover at work is literally the worst

LITERALLY

I can barely remember what it's like to be drunk, let alone hung over :(

well I can't approve of the first part but the second part of that sentence sounds nice

FunkyBob: you don't happen to have examples of Django revenue-share declarations do you? (https://www.reddit.com/r/django/comments/7morjd...)

can anyone help? https://www.reddit.com/r/webdev/comments/7mq87n...

doismellburning: interesting... a question for the DSF, surely?

theology: Celery

FunkyBob, yes i am using celery

theology: then yes, you can concurrently run background tasks

What are possible causes of decimal.InvalidOperation upon .save() ?

all my values look like valid floats

microdex: Decimal != Float

microdex: also, dpaste.de the FULL TRACEBACK

ok

FunkyBob, i mean, would the process be automatic? user 1 logs in and does func x, user 2 logs in and does func x, func x runs as a background task. Will i have 2 background tasks running?

theology: if you have 2 background workers... sure

FunkyBob, so only one worker is allowed per background task?

FunkyBob: perhaps, but I figure there might be people out there the DSF doesn't know about

FunkyBob: http://dpaste.com/06GPZMR

thanks

theology: no, only one background task per worker at a time

thats full stack trace

ok

tradespace ? that sounds familiar

FunkyBob, so when people upload videos to youtube or something, are there millions of workers running background tasks?

using something similar to celerh

celery*

Yeah its trading module

I figured Django can just take floats and save them to my decimal field

probably can

This is why the decimal.InvalidOperation is confusing

theology: pretty much