Commit Graph

3 Commits

Author SHA1 Message Date
Carl Meyer 316b8d4974 Stripped headers containing underscores to prevent spoofing in WSGI environ.
This is a security fix. Disclosure following shortly.

Thanks to Jedediah Smith for the report.
2015-01-13 13:03:05 -05:00
Tim Graham 958aeda4b5 Added stub release notes for security releases. 2015-01-13 13:03:05 -05:00
Tim Graham ce17b045bf Added 1.4.18 release notes. 2015-01-05 14:24:34 -05:00