django1/django/middleware
Aymeric Augustin 380545bf85 [1.7.x] Prevented leaking the CSRF token through caching.
This is a security fix. Disclosure will follow shortly.

Backport of c083e3815a from master
2014-04-21 18:29:24 -04:00
..
__init__.py Imported Django from private SVN repository (created from r. 8825) 2005-07-13 01:25:57 +00:00
cache.py [1.7.x] Prevented leaking the CSRF token through caching. 2014-04-21 18:29:24 -04:00
clickjacking.py More attacking E302 violators 2013-11-02 13:12:09 -07:00
common.py Fixed #21188 -- Introduced subclasses for to-be-removed-in-django-XX warnings 2014-03-08 09:57:40 +01:00
csrf.py Fixed #22185 -- Added settings.CSRF_COOKIE_AGE 2014-03-06 08:28:43 -05:00
doc.py Fixed #21188 -- Introduced subclasses for to-be-removed-in-django-XX warnings 2014-03-08 09:57:40 +01:00
gzip.py More attacking E302 violators 2013-11-02 13:12:09 -07:00
http.py More attacking E302 violators 2013-11-02 13:12:09 -07:00
locale.py Fixed #21389 -- Accept most valid language codes 2014-02-26 16:58:04 +01:00
transaction.py Fixed #21188 -- Introduced subclasses for to-be-removed-in-django-XX warnings 2014-03-08 09:57:40 +01:00