django1/django
Tim Graham baf2542c4f Fixed DoS possibility in ModelMultipleChoiceField.
This is a security fix. Disclosure following shortly.

Thanks Keryn Knight for the report and initial patch.
2015-01-13 13:03:06 -05:00
..
apps Fixed #12663 -- Formalized the Model._meta API for retrieving fields. 2015-01-06 19:25:12 -05:00
bin Started attackign the next flake8 violation 2013-10-31 08:42:28 -07:00
conf Fixed #24124 -- Changed context_processors in the default settings.py 2015-01-12 13:17:44 -05:00
contrib Fixed #24136 -- Prevented crash when convert_extent input is None 2015-01-13 17:27:11 +01:00
core Stripped headers containing underscores to prevent spoofing in WSGI environ. 2015-01-13 13:03:05 -05:00
db Fixed #24031 -- Added CASE expressions to the ORM. 2015-01-12 18:15:34 -05:00
dispatch Added return value to Signal.disconnect(). 2015-01-02 12:00:41 -05:00
forms Fixed DoS possibility in ModelMultipleChoiceField. 2015-01-13 13:03:06 -05:00
http Closed files in FileResponse; refs #24072 2015-01-05 14:54:55 -05:00
middleware Fixed #23815 -- Prevented UnicodeDecodeError in CSRF middleware 2015-01-06 08:42:58 +01:00
template Accounted for multiple template engines in template responses. 2015-01-12 21:01:34 +01:00
templatetags Cleaned up the django.template namespace. 2014-12-28 14:47:31 +01:00
test Fixed #24118 -- Added --debug-sql option for tests. 2015-01-12 08:16:08 +00:00
utils Fixed is_safe_url() to handle leading whitespace. 2015-01-13 13:03:06 -05:00
views Fixed #24133 -- Replaced formatting syntax in success_url placeholders 2015-01-12 22:51:22 +01:00
__init__.py Simplified get_version() in django/__init__.py 2014-11-24 07:02:29 -05:00
shortcuts.py Fixed #24097 -- Prevented AttributeError in redirect_to_login 2015-01-10 10:05:02 +01:00