3 Commits

Author	SHA1	Message	Date
Tim Graham	abf5ccc29c	Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.	2015-10-29 17:28:37 -04:00
Tim Graham	8cc41ce7a7	Fixed DoS possiblity in contrib.auth.views.logout() ... Thanks Florian Apolloner and Carl Meyer for review. This is a security fix.	2015-08-18 08:03:43 -04:00
Tim Graham	b0ab74dfca	Added stub release notes for security releases.	2015-08-18 08:03:39 -04:00