django1/django
Luke Plant 364583b894 Fixed #14235 - UnicodeDecodeError in CSRF middleware
Thanks to jbg for the report.

This changeset essentially backs out [13698] in favour of a method that
sanitizes the token rather than escaping it.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@13732 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-10 22:56:56 +00:00
..
bin Fixed #10102 -- Set svn:executable on daily_cleanup script. Thanks to John Scott for the report 2009-03-14 05:18:02 +00:00
conf When possible, sanity check the timezone setting to see if the Unix-like 2010-09-10 19:36:51 +00:00
contrib Fixed id attribute generation in the admin docs page. Patch from simeon. 2010-09-10 22:37:17 +00:00
core Fixed #11158 - get_image_dimensions very slow/incorrect after 1 call 2010-09-10 18:45:25 +00:00
db Fixed #13798 -- Added connection argument to the connection_created signal. Thanks to liangent for the report, and Alex Gaynor for the patch. 2010-08-30 13:21:18 +00:00
dispatch Fixed #12164 -- Removed the Python 2.3 compatibility imports and workarounds. Thanks to timo and claudep for the patch. 2010-05-04 14:00:30 +00:00
forms Fixed #13095 -- `formfield_callback` keyword argument is now more sane and works with widgets defined in `ModelForm.Meta.widgets`. Thanks, hvdklauw for bug report, vung for initial patch, and carljm for review. 2010-09-10 22:46:22 +00:00
http Fixed #13572: copies of QueryDicts now have their encoding set correctly. 2010-05-28 16:39:52 +00:00
middleware Fixed #14235 - UnicodeDecodeError in CSRF middleware 2010-09-10 22:56:56 +00:00
shortcuts Fixed #11960 -- Improved error message for redirects. Thanks, mattmcc 2010-01-10 18:44:39 +00:00
template Fixed #14235 - UnicodeDecodeError in CSRF middleware 2010-09-10 22:56:56 +00:00
templatetags Fixed #13453: Corrected typo in template syntax error message. Thanks jheasly. 2010-05-01 02:29:32 +00:00
test Fixed #14116 -- Added a flag to enable CSRF checks in the test client. Thanks to jon@licq.org for the suggestion. 2010-08-27 13:54:13 +00:00
utils Added more readable __str__ and __repr__ methods to MergeDict. 2010-09-10 19:24:24 +00:00
views Added explanatory note on CSRF failure page for the case of a missing Referer header. 2010-09-03 16:28:10 +00:00
__init__.py Django is now 1.3 pre-alpha. 2010-06-19 21:14:56 +00:00