Simon Charette
|
f7c494f250
|
[1.6.x] Prevented data leakage in contrib.admin via query string manipulation.
This is a security fix. Disclosure following shortly.
|
2014-08-20 11:43:43 -04:00 |
|
Preston Holmes
|
0268b855f9
|
[1.6.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change.
This is a security fix. Disclosure following shortly.
|
2014-08-20 11:43:43 -04:00 |
|
Tim Graham
|
dd0c3f4ee1
|
[1.6.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names.
This is a security fix. Disclosure following shortly.
|
2014-08-20 11:43:43 -04:00 |
|
Florian Apolloner
|
da051da8df
|
[1.6.x] Prevented reverse() from generating URLs pointing to other hosts.
This is a security fix. Disclosure following shortly.
|
2014-08-20 11:43:43 -04:00 |
|
Tim Graham
|
52b878d805
|
[1.6.x] Added release note stubs for 1.5.9 and 1.4.14.
|
2014-08-20 11:43:43 -04:00 |
|