chango.git, branch 1.7.3 django http://cgit.adnoto.dev/chango.git/atom?h=1.7.3 2015-01-13T18:11:37Z [1.7.x] Bumped version for 1.7.3 release. 2015-01-13T18:11:37Z Tim Graham timograham@gmail.com 2015-01-13T18:11:37Z urn:sha1:6bf1930fb5c7c6a47992ff368e21c58f4f14b402 [1.7.x] Added dates to release notes. 2015-01-13T18:09:34Z Tim Graham timograham@gmail.com 2015-01-13T18:08:57Z urn:sha1:9b403a108cfd1e63b5a99174c65c65fc41116d6e [1.7.x] Fixed DoS possibility in ModelMultipleChoiceField. 2015-01-13T18:02:56Z Tim Graham timograham@gmail.com 2014-12-11T13:31:03Z urn:sha1:bcfb47780ce7caecb409a9e9c1c314266e41d392 This is a security fix. Disclosure following shortly. Thanks Keryn Knight for the report and initial patch. [1.7.x] Prevented views.static.serve() from using large memory on large files. 2015-01-13T18:02:56Z Tim Graham timograham@gmail.com 2014-12-09T20:32:03Z urn:sha1:818e59a3f0fbadf6c447754d202d88df025f8f2a This is a security fix. Disclosure following shortly. [1.7.x] Fixed is_safe_url() to handle leading whitespace. 2015-01-13T18:02:56Z Tim Graham timograham@gmail.com 2014-12-03T21:14:00Z urn:sha1:de67dedc771ad2edec15c1d00c083a1a084e1e89 This is a security fix. Disclosure following shortly. [1.7.x] Stripped headers containing underscores to prevent spoofing in WSGI environ. 2015-01-13T18:02:56Z Carl Meyer carl@oddbird.net 2014-09-10T17:06:19Z urn:sha1:41b4bc73ee0da7b2e09f4af47fc1fd21144c710f This is a security fix. Disclosure following shortly. Thanks to Jedediah Smith for the report. [1.7.x] Added stub release notes for security releases. 2015-01-13T18:02:55Z Tim Graham timograham@gmail.com 2014-11-25T22:06:31Z urn:sha1:33f1ccf5b1a928b8680e25b3e419834d139e04e8 [1.7.x] Fixed bad model example in admin docs. 2015-01-13T16:53:59Z Collin Anderson cmawebsite@gmail.com 2015-01-13T16:28:43Z urn:sha1:6a08020fcff3681202047ba002c700fedebc6e74 Backport of e7771ec380a116dbef481001fb1ce664f5c7311e from master [1.7.x] Fixed #24110 -- Rewrote migration unapply to preserve intermediate states 2015-01-10T23:35:49Z Markus Holtermann info@markusholtermann.eu 2015-01-10T14:18:06Z urn:sha1:ef5889409bba675499dfd38831358daba16811ab Backport of fdc2cc948725866212a9bcc97b9b7cf21bb49b90 and be158e36251df0b07556657da47cdaf10913c57a from master [1.7.x] Fixed #23967 -- Added formats for Greek 2015-01-10T16:11:57Z Serafeim Papastefanos spapas@gmail.com 2015-01-09T22:05:58Z urn:sha1:1a352fe1751cb1ec1dc2977e72cac9dc9b770bc1 Backport of 74f02557e0183812d6d60e2548985c5c40b3d27b from master