Russell Keith-Magee aae5a96d57 Ensure that passwords are never long enough for a DoS. ...

* Limit the password length to 4096 bytes
  * Password hashers will raise a ValueError
  * django.contrib.auth forms will fail validation
* Document in release notes that this is a backwards incompatible change

Thanks to Josh Wright for the report, and Donald Stufft for the patch.

This is a security fix; disclosure to follow shortly.

2013-09-15 13:42:23 +08:00

..

0.95.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

0.96.txt

Fixed links to DATABASE ENGINE setting. refs #19516

2012-12-24 15:38:05 -05:00

1.0-alpha-1.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.0-alpha-2.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.0-beta-2.txt

Removed obsolete contrib.comments upgrade guide

2012-11-24 18:10:51 +01:00

1.0-beta.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.0-porting-guide.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.0.1.txt

Updated obsolete links in the documentation

2012-06-28 10:49:07 +02:00

1.0.2.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00

1.0.txt

Adapted uses of versionchanged/versionadded to the new form.

2013-04-20 17:18:35 +02:00

1.1-alpha-1.txt

Consolidated documentation for F() and Q()

2013-09-06 12:57:25 -05:00

1.1-beta-1.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.1-rc-1.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.1.2.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00

1.1.3.txt

Fixed #15253 -- Added 1.1.3 release notes, and added sections to the 1.2.4 and 1.3 release notes about the December security announcement.

2011-02-10 11:55:24 +00:00

1.1.4.txt

Fixed many more ReST indentation errors, somehow accidentally missed from [16955]

2011-10-14 00:12:01 +00:00

1.1.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.2-alpha-1.txt

Added missing markup to docs.

2013-03-22 13:50:07 -04:00

1.2-beta-1.txt

Fixed #19516 - Fixed remaining broken links.

2013-01-02 18:32:57 -05:00

1.2-rc-1.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.2.1.txt

Fixed a number of minor misspellings.

2013-07-27 18:46:03 -07:00

1.2.2.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.2.3.txt

Added placeholder release notes for the 1.2.1 and 1.2.3 releases.

2011-08-26 09:31:01 +00:00

1.2.4.txt

Fixed #17365, #17366, #18727 -- Switched to discovery test runner.

2013-05-10 23:08:45 -04:00

1.2.5.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.2.6.txt

Added basic release notes for 1.2.6 and 1.3.1.

2011-09-10 03:33:54 +00:00

1.2.7.txt

Added basic release notes for 1.2.7.

2011-09-11 02:28:08 +00:00

1.2.txt

Added missing markup to docs.

2013-03-22 13:50:07 -04:00

1.3-alpha-1.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.3-beta-1.txt

Fixed #19695 -- Retitle "Form Media" to "Form Assets".

2013-07-08 13:59:54 -04:00

1.3.1.txt

Added basic release notes for 1.2.6 and 1.3.1.

2011-09-10 03:33:54 +00:00

1.3.2.txt

Added 1.4.1 and 1.3.2 release notes

2012-08-31 20:35:50 +02:00

1.3.3.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.4.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.5.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.6.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.7.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.4-alpha-1.txt

Fixed #19897 - Updated static files howto.

2013-03-29 19:15:19 -04:00

1.4-beta-1.txt

Fixed #19897 - Updated static files howto.

2013-03-29 19:15:19 -04:00

1.4.1.txt

Added 1.4.1 and 1.3.2 release notes

2012-08-31 20:35:50 +02:00

1.4.2.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.4.3.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.4.4.txt

Fixed #21035 -- Changed docs to treat the acronym SQL phonetically.

2013-09-05 20:14:58 -04:00

1.4.5.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.4.6.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.4.7.txt

Added 1.4.7/1.5.3 release notes

2013-09-10 21:07:22 -04:00

1.4.txt

Fixed #20004 -- Moved non DB-related assertions to SimpleTestCase.

2013-05-18 19:04:34 -03:00

1.5-alpha-1.txt

Consolidated documentation for F() and Q()

2013-09-06 12:57:25 -05:00

1.5-beta-1.txt

Consolidated documentation for F() and Q()

2013-09-06 12:57:25 -05:00

1.5.1.txt

Added 1.5.1 release notes.

2013-03-28 15:03:19 -05:00

1.5.2.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.5.3.txt

Added 1.4.7/1.5.3 release notes

2013-09-10 21:07:22 -04:00

1.5.txt

Consolidated documentation for F() and Q()

2013-09-06 12:57:25 -05:00

1.6.txt

Fixed #21100 -- Noted that Create/UpdateViews.fields is new in 1.6

2013-09-13 09:34:12 -04:00

1.7.txt

Ensure that passwords are never long enough for a DoS.

2013-09-15 13:42:23 +08:00

index.txt

Added 1.4.7/1.5.3 release notes

2013-09-10 21:07:22 -04:00