chango.git, branch 1.4.19 django http://cgit.adnoto.dev/chango.git/atom?h=1.4.19 2015-01-27T16:55:02Z [1.4.x] Bumped version for 1.4.19 release. 2015-01-27T16:55:02Z Tim Graham timograham@gmail.com 2015-01-27T16:54:46Z urn:sha1:7dd4c5221a0975165c95142ba749553c7d7cff32 [1.4.x] Fixed #24158 -- Allowed GZipMiddleware to work with streaming responses 2015-01-27T00:22:47Z Benjamin Richter richter.benjamin@gmail.com 2015-01-25T22:22:46Z urn:sha1:1e39d0f6280abf34c7719db5e7ed1c333f5e5919 Backport of django.utils.text.compress_sequence and fix for django.middleware.gzip.GZipMiddleware when using iterators as response.content. [1.4.x] Designated Django 1.8 as the next LTS. 2015-01-19T17:09:43Z Tim Graham timograham@gmail.com 2015-01-19T17:08:20Z urn:sha1:9435474068c2ae2261105adbbe7aebdb80b778f3 Backport of c38db4d7e072e9a5002cb4897d9104e5eaa292ed from master [1.4.x] Fixed a static view test on Windows. 2015-01-14T18:57:59Z Tim Graham timograham@gmail.com 2015-01-14T18:46:15Z urn:sha1:99e6ac77f2b5c701896dd83ce99ff12278cdbeef Backport of a6f144fd4fee0090de3a99b1f50a4142722e7946 from master [1.4.x] Post-release version bump. 2015-01-13T19:16:07Z Tim Graham timograham@gmail.com 2015-01-13T19:16:07Z urn:sha1:4296a1da8b2acf118814669fa045a3c353c8892e [1.4.x] Bumped version for 1.4.18 release. 2015-01-13T18:14:08Z Tim Graham timograham@gmail.com 2015-01-13T18:14:08Z urn:sha1:bd9dcd226b5b11fa40668553d26ce06000b3be75 [1.4.x] Added dates to release notes. 2015-01-13T18:10:54Z Tim Graham timograham@gmail.com 2015-01-13T18:08:57Z urn:sha1:88b7957b34b2305ece54a3aab57a87701279a1d8 [1.4.x] Prevented views.static.serve() from using large memory on large files. 2015-01-05T18:43:54Z Tim Graham timograham@gmail.com 2014-12-09T20:32:03Z urn:sha1:d020da6646c5142bc092247d218a3d1ce3e993f7 This is a security fix. Disclosure following shortly. [1.4.x] Fixed is_safe_url() to handle leading whitespace. 2015-01-05T18:43:32Z Tim Graham timograham@gmail.com 2014-12-03T21:14:00Z urn:sha1:4c241f1b710da6419d9dca160e80b23b82db7758 This is a security fix. Disclosure following shortly. [1.4.x] Stripped headers containing underscores to prevent spoofing in WSGI environ. 2015-01-05T18:43:15Z Carl Meyer carl@oddbird.net 2014-09-10T17:06:19Z urn:sha1:4f6fffc1dc429f1ad428ecf8e6620739e8837450 This is a security fix. Disclosure following shortly. Thanks to Jedediah Smith for the report.