Tim Graham 4c6bd574ad [1.6.x] Post-release version bump.

2015-01-13 14:15:55 -05:00

..

bin

Fixed #19252 -- Added support for wheel packages.

2013-05-01 13:46:06 +02:00

conf

[1.6.x] Fixed #21581 -- Fixed a number of issues with collectstatic.

2013-12-31 15:04:22 -05:00

contrib

[1.6.x] Fixed #23754 -- Always allowed reference to the primary key in the admin

2014-11-25 13:48:50 -05:00

core

[1.6.x] Stripped headers containing underscores to prevent spoofing in WSGI environ.

2015-01-13 13:10:11 -05:00

db

[1.6.x] Fixed #23370 -- defer() + select_related() crashed with inherited models.

2014-08-30 07:16:47 -04:00

dispatch

[1.6.x] Fixed #21486 -- Prevented settings config in signal connection

2013-11-23 18:49:06 +01:00

forms

[1.6.x] Fixed DoS possibility in ModelMultipleChoiceField.

2015-01-13 13:10:11 -05:00

http

[1.6.x] Fixed #22996 -- Prevented crash with unencoded query string

2014-08-19 22:55:35 +02:00

middleware

[1.6.x] Prevented leaking the CSRF token through caching.

2014-04-21 18:30:27 -04:00

shortcuts

Fixed #19692 -- Completed deprecation of mimetype in favor of content_type.

2013-01-31 13:54:40 +01:00

template

[1.6.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.

2013-09-10 21:03:51 -04:00

templatetags

[1.6.x] Took advantage of django.utils.six.moves.urllib.*.

2013-09-10 21:29:31 +02:00

test

[1.6.x] Fixed #21448 -- Fixed test client logout with cookie-based sessions

2013-11-26 20:42:54 +01:00

utils

[1.6.x] Fixed is_safe_url() to handle leading whitespace.

2015-01-13 13:10:11 -05:00

views

[1.6.x] Prevented views.static.serve() from using large memory on large files.

2015-01-13 13:10:11 -05:00

__init__.py

[1.6.x] Post-release version bump.

2015-01-13 14:15:55 -05:00