django1/django/http
Mariusz Felisiak e7fba62248 [3.0.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files.
Thanks Claude Paroz for the initial patch.
Thanks Dennis Brinkrolf for the report.

Backport of d4d800ca1a from main.
2021-04-06 08:33:16 +02:00
..
__init__.py Fixed #26052 -- Moved conditional_content_removal() processing to the test client. 2016-04-25 07:56:07 -04:00
cookie.py Fixed #27863 -- Added support for the SameSite cookie flag. 2018-04-13 20:58:31 -04:00
multipartparser.py [3.0.x] Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files. 2021-04-06 08:33:16 +02:00
request.py [3.0.x] Fixed E128, E741 flake8 warnings. 2020-05-12 08:55:06 +02:00
response.py [3.0.x] Fixed #31790 -- Fixed setting SameSite cookies flag in HttpResponse.delete_cookie(). 2020-07-16 09:30:15 +02:00