Michael Manfre 5d86458579 Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords. ...

Refs #20760.

Thanks Michael Manfre for the fix and to Adam Johnson for the review.

2024-07-09 09:21:19 -03:00

..

apps

…

conf

Updated source translation catalogs.

2024-05-22 15:55:26 -03:00

contrib

Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.

2024-07-09 09:21:19 -03:00

core

Fixed #35528 -- Added EmailMultiAlternatives.body_contains() helper method.

2024-06-21 12:00:56 +02:00

db

Fixed #35580 -- Allowed related fields referencing auto-created through models.

2024-07-09 13:50:12 +02:00

dispatch

…

forms

Fixed #35483 -- Added NUL (0x00) character validation to ModelChoiceFields.

2024-06-17 12:19:26 +02:00

http

Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.

2024-05-29 10:48:27 -03:00

middleware

Removed unneeded hyphens in "counterintuitive".

2024-07-04 08:30:19 +02:00

template

Fixed #35417 -- Updated BaseContext.new() with values to create a context that can be flattened.

2024-06-13 14:22:40 +02:00

templatetags

…

test

Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.

2024-05-29 10:48:27 -03:00

urls

…

utils

Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-07-09 09:21:19 -03:00

views

Removed hardcoded docs version in csrf template.

2024-05-21 11:03:39 +02:00

__init__.py

Bumped version; main is now 5.2 pre-alpha.

2024-05-22 15:44:07 -03:00

__main__.py

…

shortcuts.py

…