django/docs/howto/auth-remote-user.txt at ba3a7636f1bb8c02eaabbeff9a3731ad27a82c5d

mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00

Files

Carl Meyer 316b8d4974 Stripped headers containing underscores to prevent spoofing in WSGI environ.

This is a security fix. Disclosure following shortly.

Thanks to Jedediah Smith for the report.

2015-01-13 13:03:05 -05:00

View Raw