Claude Paroz 6bd3896fcb [1.4.x] Fixed #18144 -- Added backwards compatibility with old unsalted MD5 passwords ...

Thanks apreobrazhensky at gmail.com for the report.
Backport of 63d6a50dd from master.

2013-02-02 12:10:38 +01:00

..

bin

Fixed #16225 -- Removed unused imports. Many thanks to Aymeric Augustin for the work on the patch and Alex for reviewing.

2011-07-13 09:35:51 +00:00

conf

[1.4.X] Fixed #17733 -- Discouraged setting TIME_ZONE to None when USE_TZ is True. Thanks berdario for the report.

2012-03-29 15:09:52 +00:00

contrib

[1.4.x] Fixed #18144 -- Added backwards compatibility with old unsalted MD5 passwords

2013-02-02 12:10:38 +01:00

core

[1.4.x] Fixed a security issue in image uploading. Disclosure and release forthcoming.

2012-07-30 22:00:17 +02:00

db

[1.4.x] Fixed SQLite's collapsing of same-valued instances in bulk_create

2012-11-24 01:28:25 +02:00

dispatch

Fixed #16225 -- Removed unused imports. Many thanks to Aymeric Augustin for the work on the patch and Alex for reviewing.

2011-07-13 09:35:51 +00:00

forms

[1.4.x] Fixed second security issue in image uploading. Disclosure and release forthcoming.

2012-07-30 22:00:17 +02:00

http

[1.4.X] Fixed a security issue in get_host.

2012-12-10 22:14:16 +01:00

middleware

Fixed #17817 -- Modified LocalMiddleware to use full URLs when redirecting to i18n URLs. Thanks to Paul for keeping an eye on the standards.

2012-03-02 22:35:26 +00:00

shortcuts

Fixed #15010 -- Added current_app parameter to close gap between TemplateResponse and render method. Thanks, acdha.

2011-01-05 22:41:43 +00:00

template

Fixed #17660 -- Standardize extends tag token parsing

2012-02-21 02:59:05 +00:00

templatetags

Fixed #17255 -- Removed "as" prefix from new timezone template filter names for the sake of clarity. Cheers to Aymeric Augustin for bearing with me.

2011-11-18 15:00:08 +00:00

test

[1.4.x] Made LiveServerTestCase to restore state on exit.

2012-07-22 11:06:16 -03:00

utils

[1.4.X] Fixed #18856 -- Ensured that redirects can't be poisoned by malicious users.

2012-12-10 22:14:16 +01:00

views

[1.4.X] Fixed #18856 -- Ensured that redirects can't be poisoned by malicious users.

2012-12-10 22:14:16 +01:00

__init__.py

[1.4.x] Bump version numbers for security release.

2012-12-10 15:45:04 -06:00