mirror of
https://github.com/django/django.git
synced 2025-10-31 09:41:08 +00:00
Fixed #26020 -- Normalized header stylings in docs.
This commit is contained in:
@@ -8,7 +8,7 @@ Django 1.5.5 fixes a couple security-related bugs and several other bugs in the
|
||||
1.5 series.
|
||||
|
||||
Readdressed denial-of-service via password hashers
|
||||
--------------------------------------------------
|
||||
==================================================
|
||||
|
||||
Django 1.5.4 imposes a 4096-byte limit on passwords in order to mitigate a
|
||||
denial-of-service attack through submission of bogus but extremely large
|
||||
@@ -16,7 +16,7 @@ passwords. In Django 1.5.5, we've reverted this change and instead improved
|
||||
the speed of our PBKDF2 algorithm by not rehashing the key on every iteration.
|
||||
|
||||
Properly rotate CSRF token on login
|
||||
-----------------------------------
|
||||
===================================
|
||||
|
||||
This behavior introduced as a security hardening measure in Django 1.5.2 did
|
||||
not work properly and is now fixed.
|
||||
|
||||
Reference in New Issue
Block a user