chango.git, branch 1.4.18 django http://cgit.adnoto.dev/chango.git/atom?h=1.4.18 2015-01-13T18:14:08Z [1.4.x] Bumped version for 1.4.18 release. 2015-01-13T18:14:08Z Tim Graham timograham@gmail.com 2015-01-13T18:14:08Z urn:sha1:bd9dcd226b5b11fa40668553d26ce06000b3be75 [1.4.x] Added dates to release notes. 2015-01-13T18:10:54Z Tim Graham timograham@gmail.com 2015-01-13T18:08:57Z urn:sha1:88b7957b34b2305ece54a3aab57a87701279a1d8 [1.4.x] Prevented views.static.serve() from using large memory on large files. 2015-01-05T18:43:54Z Tim Graham timograham@gmail.com 2014-12-09T20:32:03Z urn:sha1:d020da6646c5142bc092247d218a3d1ce3e993f7 This is a security fix. Disclosure following shortly. [1.4.x] Fixed is_safe_url() to handle leading whitespace. 2015-01-05T18:43:32Z Tim Graham timograham@gmail.com 2014-12-03T21:14:00Z urn:sha1:4c241f1b710da6419d9dca160e80b23b82db7758 This is a security fix. Disclosure following shortly. [1.4.x] Stripped headers containing underscores to prevent spoofing in WSGI environ. 2015-01-05T18:43:15Z Carl Meyer carl@oddbird.net 2014-09-10T17:06:19Z urn:sha1:4f6fffc1dc429f1ad428ecf8e6620739e8837450 This is a security fix. Disclosure following shortly. Thanks to Jedediah Smith for the report. [1.4.x] Added stub release notes for security releases. 2015-01-05T18:42:52Z Tim Graham timograham@gmail.com 2014-11-25T22:06:31Z urn:sha1:113a8980f4f85c2013c7c4bd962daa463ec03554 [1.4.x] Fixed #24081 -- Downgraded six to 1.8.0. 2015-01-05T18:41:06Z Tim Graham timograham@gmail.com 2015-01-05T18:13:34Z urn:sha1:2fd8054fda5b8ec304d675f82f4bd80c16e3fd95 This reverts commit a25c444bc701b496f2b05f57fc3ec42cdac9dd85. six 1.9+ requires Python 2.6 so this commit restores Python 2.5 compatibility. [1.4.x] Removed wheel generation from Makefile. 2015-01-03T03:01:51Z Tim Graham timograham@gmail.com 2015-01-03T03:01:51Z urn:sha1:032ffade8acf6f79ff4cc7632d10df4619c32b72 [1.4.x] Post-release version bump. 2015-01-03T02:49:44Z Tim Graham timograham@gmail.com 2015-01-03T02:49:44Z urn:sha1:52136afda4fa085189cb0655c60e44287706d273 [1.4.x] Bumped version for 1.4.17 release. 2015-01-03T02:07:00Z Tim Graham timograham@gmail.com 2015-01-03T02:07:00Z urn:sha1:592187e11b934f83153133cd5b3a246a881359e7