1
0
mirror of https://github.com/django/django.git synced 2024-12-22 17:16:24 +00:00
django/django
Michael Manfre 5d86458579 Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.
Refs #20760.

Thanks Michael Manfre for the fix and to Adam Johnson for the review.
2024-07-09 09:21:19 -03:00
..
apps Fixed #34687 -- Made Apps.clear_cache() clear get_swappable_settings_name() cache. 2023-06-30 08:27:15 +02:00
conf Updated source translation catalogs. 2024-05-22 15:55:26 -03:00
contrib Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords. 2024-07-09 09:21:19 -03:00
core Fixed #35528 -- Added EmailMultiAlternatives.body_contains() helper method. 2024-06-21 12:00:56 +02:00
db Fixed #35580 -- Allowed related fields referencing auto-created through models. 2024-07-09 13:50:12 +02:00
dispatch Fixed #35174 -- Fixed Signal.asend()/asend_robust() crash when all receivers are asynchronous. 2024-02-08 11:36:28 +01:00
forms Fixed #35483 -- Added NUL (0x00) character validation to ModelChoiceFields. 2024-06-17 12:19:26 +02:00
http Fixed 35467 -- Replaced urlparse with urlsplit where appropriate. 2024-05-29 10:48:27 -03:00
middleware Removed unneeded hyphens in "counterintuitive". 2024-07-04 08:30:19 +02:00
template Fixed #35417 -- Updated BaseContext.new() with values to create a context that can be flattened. 2024-06-13 14:22:40 +02:00
templatetags Refs #34233 -- Used str.removeprefix()/removesuffix(). 2023-01-18 19:11:18 +01:00
test Fixed 35467 -- Replaced urlparse with urlsplit where appropriate. 2024-05-29 10:48:27 -03:00
urls Fixed #35252 -- Optimized _route_to_regex(). 2024-03-05 13:09:10 +01:00
utils Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters. 2024-07-09 09:21:19 -03:00
views Removed hardcoded docs version in csrf template. 2024-05-21 11:03:39 +02:00
__init__.py Bumped version; main is now 5.2 pre-alpha. 2024-05-22 15:44:07 -03:00
__main__.py Applied Black's 2024 stable style. 2024-01-26 12:45:07 +01:00
shortcuts.py Applied Black's 2024 stable style. 2024-01-26 12:45:07 +01:00