chango.git, branch 1.5.9 django http://cgit.adnoto.dev/chango.git/atom?h=1.5.9 2014-08-20T20:09:42Z [1.5.x] Bump version numbers for security release. 2014-08-20T20:09:42Z James Bennett james@b-list.org 2014-08-20T20:09:42Z urn:sha1:1f5ff0b1eb2f123523dd659916b6f0a4c0068249 [1.5.x] Prevented data leakage in contrib.admin via query string manipulation. 2014-08-20T15:44:02Z Simon Charette charette.s@gmail.com 2014-08-11T19:36:16Z urn:sha1:2a446c896e7c814661fb9c4f212b071b2a7fa446 This is a security fix. Disclosure following shortly. [1.5.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change. 2014-08-20T15:44:02Z Preston Holmes preston@ptone.com 2014-08-11T16:04:53Z urn:sha1:dd68f319b365f6cb38c5a6c106faf4f6142d7d88 This is a security fix. Disclosure following shortly. [1.5.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names. 2014-08-20T15:44:02Z Tim Graham timograham@gmail.com 2014-08-08T14:20:08Z urn:sha1:26cd48e166ac4d84317c8ee6d63ac52a87e8da99 This is a security fix. Disclosure following shortly. [1.5.x] Prevented reverse() from generating URLs pointing to other hosts. 2014-08-20T15:44:02Z Florian Apolloner florian@apolloner.eu 2014-07-17T19:59:28Z urn:sha1:45ac9d4fb087d21902469fc22643f5201d41a0cd This is a security fix. Disclosure following shortly. [1.5.x] Added release note stubs for 1.5.9 and 1.4.14. 2014-08-20T15:44:02Z Tim Graham timograham@gmail.com 2014-08-11T12:45:08Z urn:sha1:25d9ae5214b59f06f385190733914eaa459751ff [1.5.x] Corrected content_type parameter name in sitemap docs. 2014-08-14T01:45:36Z Tim Graham timograham@gmail.com 2014-08-14T01:44:16Z urn:sha1:27ab82f7fc72cdc9800f5cd6e0e1bc39a3175ef3 mimetype was deprecated in 1.5 per 11ec0253ab4cc926ab9e77619132cb398231ac33. Backport of a7443c24a3 from master [1.5.x] Added a warning that remove_tags() output shouldn't be considered safe. 2014-08-11T11:09:56Z Tim Graham timograham@gmail.com 2014-08-07T13:20:59Z urn:sha1:00ec30d3c43ff2be0bb4d0ff14310d67475503c8 Backport of 7efce77de2 from master [1.5.x] Fixed #23267 -- Fixed typo in Translation documentation 2014-08-11T10:10:52Z Ola Sitarska ola@sitarska.com 2014-08-11T10:01:14Z urn:sha1:5d6e4031dff26c3df32712e5037037a7c71a81ea Thanks to Tomin1 for the report. Backport of 2e7be92b4df29ac851d570e57da5dcf756c5ac52 from master. [1.5.x] Noted that django-jython requires Django 1.7. 2014-08-08T16:47:54Z Tim Graham timograham@gmail.com 2014-08-08T16:45:18Z urn:sha1:bafc7237a94894164ac99a82ce6eb0d4c09ba059 Backport of 72e98d5c16 from stable/1.6.x