django/django
Jacob Kaplan-Moss 6e748b5db4 Fixed #11457: tightened the security check for "next" redirects after logins.
The new behavior still disallows redirects to off-site URLs, but now allows
redirects of the form `/some/other/view?foo=http://...`.

Thanks to brutasse.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@12635 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-03-01 19:58:53 +00:00
..
bin
conf Removed more stray tabs in Python files. 2010-02-27 16:30:27 +00:00
contrib Fixed #11457: tightened the security check for "next" redirects after logins. 2010-03-01 19:58:53 +00:00
core Fixed #12989 - Fixed verification of IDN URLs. Thanks to Fraser Nevett for the report and patch. 2010-02-28 12:01:18 +00:00
db Corrected an edge case introduced in r12602. Thanks to Ramiro Morales for the eagle eyes. 2010-02-26 16:11:25 +00:00
dispatch
forms Fixed #12779 - Sanitize numeric form field input according to decimal and thousand separator settings. 2010-03-01 10:19:24 +00:00
http Fixed #12470 - django.contrib.messages CookieStorage failing silently in safari when comma is used in message 2010-01-23 23:13:00 +00:00
middleware
shortcuts
template Removed more stray tabs in Python files. 2010-02-27 16:30:27 +00:00
templatetags Fixed #5972 - Allow the template filters to be used with the trans tag. Thanks for the initial patch, Dmitri Fedortchenko. 2010-02-21 23:43:28 +00:00
test Fixed #12932 -- Added an extra argument to suite_result() in the test runner, and added **kwargs as protection against future changes. Thanks to Eric Holscher for the report and patch. 2010-02-22 12:34:52 +00:00
utils Fixed #12779 - Sanitize numeric form field input according to decimal and thousand separator settings. 2010-03-01 10:19:24 +00:00
views Fixed #10216. Only try to gather template exception info if the exception is a Django TemplateSyntaxError. Thanks, Alex Gaynor. 2010-02-24 21:58:01 +00:00
__init__.py Bump version info to 1.2 beta. 2010-02-06 06:05:44 +00:00