p15693087
/
django
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
django/docs/topics
History
Shai Berger 5112e65ef2 Fixed #20869 -- made CSRF tokens change every request by salt-encrypting them 
Note that the cookie is not changed every request, just the token retrieved
by the `get_token()` method (used also by the `{% csrf_token %}` tag).

While at it, made token validation strict: Where, before, any length was
accepted and non-ASCII chars were ignored, we now treat anything other than
`[A-Za-z0-9]{64}` as invalid (except for 32-char tokens, which, for
backwards-compatibility, are accepted and replaced by 64-char ones).

Thanks Trac user patrys for reporting, github user adambrenecki
for initial patch, Tim Graham for help, and Curtis Maloney,
Collin Anderson, Florian Apolloner, Markus Holtermann & Jon Dufresne
for reviews.
 		2016-05-19 05:02:19 +03:00
..
_images Optimise the rest of the PNGs in docs 2015-05-29 15:22:40 +10:00
auth Fixed #26601 -- Improved middleware per DEP 0005. 2016-05-17 07:22:22 -04:00
class-based-views Fixed typo in docs/topics/class-based-views/mixins.txt 2016-04-18 20:25:54 -04:00
db Fixed #10506, #13793, #14891, #25201 -- Introduced new APIs to specify models' default and base managers. 2016-05-17 12:07:22 +07:00
forms Fixed #22383 -- Added support for HTML5 required attribute on required form fields. 2016-04-21 19:16:38 -04:00
http Fixed #26601 -- Improved middleware per DEP 0005. 2016-05-17 07:22:22 -04:00
i18n Fixed #26601 -- Improved middleware per DEP 0005. 2016-05-17 07:22:22 -04:00
testing Fixed #26601 -- Improved middleware per DEP 0005. 2016-05-17 07:22:22 -04:00
cache.txt Fixed #26601 -- Improved middleware per DEP 0005. 2016-05-17 07:22:22 -04:00
checks.txt Refs #26351 -- Added check hook to support database-related checks 2016-04-08 20:28:00 +02:00
conditional-view-processing.txt Fixed typo in docs/topics/conditional-view-processing.txt 2016-05-12 20:07:34 -04:00
email.txt Added import in docs/topics/email.txt example. 2016-02-12 13:44:38 -05:00
external-packages.txt Fixed #26554 -- Updated docs URLs to readthedocs.io 2016-04-28 10:09:57 -04:00
files.txt Fixed #26483 -- Updated docs.python.org links to use Intersphinx. 2016-05-08 18:07:43 -04:00
index.txt Fixed #26020 -- Normalized header stylings in docs. 2016-01-22 12:12:17 -05:00
install.txt Fixed #26554 -- Updated docs URLs to readthedocs.io 2016-04-28 10:09:57 -04:00
logging.txt Fixed #26483 -- Updated docs.python.org links to use Intersphinx. 2016-05-08 18:07:43 -04:00
migrations.txt Fixed #26124 -- Added missing code formatting to docs headers. 2016-02-01 10:42:05 -05:00
pagination.txt Refs #14131 -- Documented why paginating large QuerySets may be slow. 2016-04-06 11:06:38 -04:00
performance.txt Fixed typos in docs. 2016-03-13 19:48:24 +01:00
python3.txt Fixed #26483 -- Updated docs.python.org links to use Intersphinx. 2016-05-08 18:07:43 -04:00
security.txt Fixed #20869 -- made CSRF tokens change every request by salt-encrypting them 2016-05-19 05:02:19 +03:00
serialization.txt Fixed #26483 -- Updated docs.python.org links to use Intersphinx. 2016-05-08 18:07:43 -04:00
settings.txt Clarified that setting names must be uppercase. 2016-05-03 12:53:24 -04:00
signals.txt Fixed #26493 -- Documented how built-in signals are sent. 2016-04-13 07:48:18 -04:00
signing.txt Fixed #26124 -- Added missing code formatting to docs headers. 2016-02-01 10:42:05 -05:00
templates.txt Fixed #26410 -- Added a docs example for loader.render_to_string(). 2016-03-31 08:31:55 -04:00