innov
/
django1
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity
django1/django/contrib
History
Russell Keith-Magee aae5a96d57 Ensure that passwords are never long enough for a DoS. 
* Limit the password length to 4096 bytes
  * Password hashers will raise a ValueError
  * django.contrib.auth forms will fail validation
* Document in release notes that this is a backwards incompatible change

Thanks to Josh Wright for the report, and Donald Stufft for the patch.

This is a security fix; disclosure to follow shortly.
 		2013-09-15 13:42:23 +08:00
..
admin Fixed error handling in 3c5775d36f for non-operational webdrivers. 2013-09-14 23:24:48 +02:00
admindocs Fixed #20989 -- Removed useless explicit list comprehensions. 2013-08-30 10:57:51 -04:00
auth Ensure that passwords are never long enough for a DoS. 2013-09-15 13:42:23 +08:00
comments Fixed #20841 -- Added messages to NotImplementedErrors 2013-09-10 11:09:59 -04:00
contenttypes Fixed #16869 -- BaseGenericInlineFormSet.save_new should use form's save() method 2013-09-07 20:00:38 -04:00
flatpages Updated flatpages tests to override CSRF_FAILURE_VIEW. 2013-07-30 13:04:30 -04:00
formtools Fixed a number of lint warnings, particularly around unused variables. 2013-08-04 09:17:10 -07:00
gis Fixed inspectdb test for spatialite >=4 2013-09-12 11:14:16 +02:00
humanize Refactored code and tests that relied on django.utils.tzinfo. 2013-09-09 22:32:52 +02:00
messages Fixed #20841 -- Added messages to NotImplementedErrors 2013-09-10 11:09:59 -04:00
redirects Updated translation templates and removed en translations 2013-05-02 16:25:23 +02:00
sessions Fixed #20841 -- Added messages to NotImplementedErrors 2013-09-10 11:09:59 -04:00
sitemaps Took advantage of django.utils.six.moves.urllib.*. 2013-09-05 14:39:23 -05:00
sites Rename allow_syncdb to allow_migrate 2013-07-30 12:08:59 +01:00
staticfiles Fixed #20841 -- Added messages to NotImplementedErrors 2013-09-10 11:09:59 -04:00
syndication Refactored code and tests that relied on django.utils.tzinfo. 2013-09-09 22:32:52 +02:00
webdesign Fixed #20989 -- Removed useless explicit list comprehensions. 2013-08-30 10:57:51 -04:00
__init__.py
…