chango.git, branch 1.6.10 django http://cgit.adnoto.dev/chango.git/atom?h=1.6.10 2015-01-13T18:12:22Z [1.6.x] Bumped version for 1.6.10 release. 2015-01-13T18:12:22Z Tim Graham timograham@gmail.com 2015-01-13T18:12:22Z urn:sha1:e2fea7c7145e6d26a17126c60bf090bab2932e7e [1.6.x] Added dates to release notes. 2015-01-13T18:10:25Z Tim Graham timograham@gmail.com 2015-01-13T18:08:57Z urn:sha1:f9de1998f9aac2387b6896653b3aa51ad372da81 [1.6.x] Fixed DoS possibility in ModelMultipleChoiceField. 2015-01-13T18:10:11Z Tim Graham timograham@gmail.com 2014-12-11T13:31:03Z urn:sha1:d7a06ee7e571b6dad07c0f5b519b1db02e2a476c This is a security fix. Disclosure following shortly. Thanks Keryn Knight for the report and initial patch. [1.6.x] Prevented views.static.serve() from using large memory on large files. 2015-01-13T18:10:11Z Tim Graham timograham@gmail.com 2014-12-09T20:32:03Z urn:sha1:553779c4055e8742cc832ed525b9ee34b174934f This is a security fix. Disclosure following shortly. [1.6.x] Fixed is_safe_url() to handle leading whitespace. 2015-01-13T18:10:11Z Tim Graham timograham@gmail.com 2014-12-03T21:14:00Z urn:sha1:72e0b033662faa11bb7f516f18a132728aa0ae28 This is a security fix. Disclosure following shortly. [1.6.x] Stripped headers containing underscores to prevent spoofing in WSGI environ. 2015-01-13T18:10:11Z Carl Meyer carl@oddbird.net 2014-09-10T17:06:19Z urn:sha1:d7597b31d5c03106eeba4be14a33b32a5e25f4ee This is a security fix. Disclosure following shortly. Thanks to Jedediah Smith for the report. [1.6.x] Added stub release notes for security releases. 2015-01-13T18:10:11Z Tim Graham timograham@gmail.com 2014-11-25T22:06:31Z urn:sha1:f143e25883bb420fd8ec140a09dc88a899e9607e [1.6.x] Fixed bad model example in admin docs. 2015-01-13T16:54:05Z Collin Anderson cmawebsite@gmail.com 2015-01-13T16:28:43Z urn:sha1:a1a230382d6e510199fb625d2d185a579713b712 Backport of e7771ec380a116dbef481001fb1ce664f5c7311e from master [1.6.x] Added 1.4.18 release notes. 2015-01-05T19:25:41Z Tim Graham timograham@gmail.com 2015-01-05T19:24:34Z urn:sha1:5e45c4f7c21202346ef2da7acd28cd7077350a78 Backport of ce17b045bf5629aac66f872c3f548205906e04db from master [1.6.x] Fixed #24070 -- Added tutorial topics to doc index. 2015-01-03T13:49:17Z Bibhas iambibhas@gmail.com 2015-01-03T09:41:42Z urn:sha1:3b76a82a266d7f96019445a9189ac9b129328e25 Backport of b738178825ec9378198d77ac69699513774f0884 from master