django1/django/contrib/auth
Luke Plant 6feef0c13e Fixed #14612 - Password reset page leaks valid user ids publicly.
Thanks to PaulM for the report.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@14456 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-11-04 12:36:55 +00:00
..
fixtures Refs #7521 -- Re-reverted [7716] (originally reverted in [7726]), now modified to use the new TestCase urlpattern framework. 2008-06-30 13:11:12 +00:00
handlers Small change to modpython auth handler to support Apache 2.2 2007-09-15 18:36:31 +00:00
management Sped up the create_permissions signal handler (and thus the test suite) by restructuring its queries. 2010-11-04 00:01:54 +00:00
tests Fixed #14612 - Password reset page leaks valid user ids publicly. 2010-11-04 12:36:55 +00:00
__init__.py Fixed #14436 -- Escalated 1.2 PendingDeprecationWarnings to DeprecationWarnings, and removed 1.1 deprecated code. 2010-10-11 12:20:07 +00:00
admin.py Fixed #12804 - regression with decorating admin views. 2010-02-09 15:02:39 +00:00
backends.py Fixed #12164 -- Removed the Python 2.3 compatibility imports and workarounds. Thanks to timo and claudep for the patch. 2010-05-04 14:00:30 +00:00
context_processors.py Fixed #12066 - Moved auth context processor from core to the auth app. Thanks, Rob Hudson. 2010-02-21 23:40:47 +00:00
create_superuser.py Fixed #7392 -- Corrected a typo in the backwards-compatibility layer to the new createsuperuser command. 2008-06-08 08:45:14 +00:00
decorators.py Added login_url argument to login_required decorator. Thanks mhlakhani and ericflo for the report and patch. 2010-09-10 19:38:57 +00:00
forms.py Fixed #14386, #8960, #10235, #10909, #10608, #13845, #14377 - standardize Site/RequestSite usage in various places. 2010-10-04 14:20:47 +00:00
middleware.py Fixed #11509 -- Modified usage of "Web" to match our style guide in various documentation, comments and code. Thanks to timo and Simon Meers for the work on the patch. 2010-10-09 08:12:50 +00:00
models.py Fixed #14436 -- Escalated 1.2 PendingDeprecationWarnings to DeprecationWarnings, and removed 1.1 deprecated code. 2010-10-11 12:20:07 +00:00
tokens.py Fixed #14445 - Use HMAC and constant-time comparison functions where needed. 2010-10-14 20:54:30 +00:00
urls.py Tests for password change process. Thanks, Mike Richardson. Fixed #8402. 2008-08-23 18:20:49 +00:00
views.py Fixed #14612 - Password reset page leaks valid user ids publicly. 2010-11-04 12:36:55 +00:00