chango.git, branch 1.6.6 django http://cgit.adnoto.dev/chango.git/atom?h=1.6.6 2014-08-20T20:14:55Z [1.6.x] Update version number for security release. 2014-08-20T20:14:55Z James Bennett james@b-list.org 2014-08-20T20:14:55Z urn:sha1:8b19a4e275313cf2226f535d3ec10f414e0c6885 [1.6.x] Prevented data leakage in contrib.admin via query string manipulation. 2014-08-20T15:43:43Z Simon Charette charette.s@gmail.com 2014-08-07T04:18:10Z urn:sha1:f7c494f2506250b8cb5923714360a3642ed63e0f This is a security fix. Disclosure following shortly. [1.6.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change. 2014-08-20T15:43:43Z Preston Holmes preston@ptone.com 2014-08-11T16:04:53Z urn:sha1:0268b855f9eab3377f2821164ef3e66037789e09 This is a security fix. Disclosure following shortly. [1.6.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names. 2014-08-20T15:43:43Z Tim Graham timograham@gmail.com 2014-08-08T14:20:08Z urn:sha1:dd0c3f4ee1a30c1a1e6055061c6ba6e58c6b54d1 This is a security fix. Disclosure following shortly. [1.6.x] Prevented reverse() from generating URLs pointing to other hosts. 2014-08-20T15:43:43Z Florian Apolloner florian@apolloner.eu 2014-07-17T19:59:28Z urn:sha1:da051da8df5e69944745072611351d4cfc6435d5 This is a security fix. Disclosure following shortly. [1.6.x] Added release note stubs for 1.5.9 and 1.4.14. 2014-08-20T15:43:43Z Tim Graham timograham@gmail.com 2014-08-05T19:20:05Z urn:sha1:52b878d805c2dc810ddc1ea5493bb7b86455eacc [1.6.x] Added sphinx extension to ease generation of ticket links. 2014-08-19T21:47:21Z Tim Graham timograham@gmail.com 2014-08-19T14:22:51Z urn:sha1:48368d421cfd1ebef3217d44c349f5dcd6f0ec9d Backport of fca677fa43 from master [1.6.x] Fixed #17238 -- Added source code links to docs using sphinx.ext.viewcode. 2014-08-19T21:45:38Z Tim Graham timograham@gmail.com 2014-06-07T12:54:54Z urn:sha1:477ab02312d47969bdfd7c1616da27379bb1b967 Thanks santiagobasulto for the suggestion. Backport of 9ed4a8c6b1 from master [1.6.x] Fixed #22996 -- Prevented crash with unencoded query string 2014-08-19T20:55:35Z Claude Paroz claude@2xlibre.net 2014-08-19T20:38:45Z urn:sha1:9f9fdc4b0a33abfe3255302300ea1e3d1c33a3a0 Thanks Jorge Carleitao for the report and Aymeric Augustin, Tim Graham for the reviews. Backport of fa02120d36 from master. [1.6.x] Fixed #21801 -- Documented SingleObjectMixin.get_context_data() requires the object attribute. 2014-08-19T16:09:22Z Tim Graham timograham@gmail.com 2014-08-19T16:06:07Z urn:sha1:c0e49ef767e6fd7a4d77ab625e15383948ac250d Backport of 03c1609c47 from master