django/docs/releases/1.9.5.txt

==========================
Django 1.9.5 release notes
==========================

*Under development*

Django 1.9.5 fixes several bugs in 1.9.4.

Bugfixes
========

* Made ``MultiPartParser`` ignore filenames that normalize to an empty string
  to fix crash in ``MemoryFileUploadHandler`` on specially crafted user input
  (:ticket:`26325`).
Added stub release notes for 1.9.5/1.8.12. 2016-03-05 23:00:40 +08:00			`==========================`
			`Django 1.9.5 release notes`
			`==========================`

			`Under development`

			`Django 1.9.5 fixes several bugs in 1.9.4.`

			`Bugfixes`
			`========`

Fixed #26325 -- Made MultiPartParser ignore filenames that normalize to an empty string. 2016-03-07 20:06:46 +08:00			* Made ``MultiPartParser`` ignore filenames that normalize to an empty string
			to fix crash in ``MemoryFileUploadHandler`` on specially crafted user input
			(:ticket:`26325`).