Tim Graham 536cc64240 [1.6.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths. ...

Thanks Rainer Koirikivi for the report and draft patch.

This is a security fix; disclosure to follow shortly.

Backport of 7fe5b656c9 from master

2013-09-10 21:03:51 -04:00

..

eggs

…

templates

Fixed #18169 -- NoReverseMatch not silenced if from block.super

2013-06-01 00:59:04 +03:00

templatetags

…

__init__.py

…

alternate_urls.py

…

filters.py

Fixed #20246 -- Added non-breaking spaces between values an units

2013-05-18 23:01:48 +02:00

loaders.py

Fixed template_tests so discovery doesn't directly find tests that require setuptools.

2013-04-12 15:42:58 -06:00

models.py

…

test_callables.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

test_context.py

[1.6.x] Fixed #17778 -- Prevented class attributes on context from resolving as template variables.

2013-08-15 10:22:56 -04:00

test_custom.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

test_nodelist.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

test_parser.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

test_response.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

test_smartif.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

test_unicode.py

Modified template_tests for unittest2 discovery.

2013-04-12 15:13:59 -06:00

tests.py

[1.6.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.

2013-09-10 21:03:51 -04:00

urls.py

…

views.py

…