chango.git, branch 1.8.10 django http://cgit.adnoto.dev/chango.git/atom?h=1.8.10 2016-03-01T16:39:42Z [1.8.x] Bumped version for 1.8.10 release. 2016-03-01T16:39:42Z Tim Graham timograham@gmail.com 2016-03-01T16:39:22Z urn:sha1:ef08d8cf9e0d1ca62c6c291575d9e306cb09afcb [1.8.x] Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login. 2016-02-29T13:07:17Z Florian Apolloner florian@apolloner.eu 2016-02-13T20:09:46Z urn:sha1:f4e6e02f7713a6924d16540be279909ff4091eb6 This is a security fix. [1.8.x] Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth. 2016-02-29T13:07:17Z Mark Striemer mstriemer@mozilla.com 2016-02-22T21:55:51Z urn:sha1:382ab137312961ad62feb8109d70a5a581fe8350 This is a security fix. [1.8.x] Added stub release notes for security issues. 2016-02-29T13:07:17Z Tim Graham timograham@gmail.com 2016-02-19T16:33:17Z urn:sha1:922f228695701e70a223854b2466afc406c63cbb [1.8.x] Fixed #26286 -- Prevented content type managers from sharing their cache. 2016-02-26T21:24:28Z Simon Charette charette.s@gmail.com 2015-12-18T19:49:23Z urn:sha1:4701c81df3c32d8232ed733e5848186b1da61769 This should prevent managers methods from returning content type instances registered to foreign apps now that these managers are also attached to models created during migration phases. Thanks Tim for the review. Refs #23822. Backport of 3938b3ccaa85f1c366909a4839696007726a09da from master [1.8.x] Fixed a function signature in docs/topics/auth/default.txt. 2016-02-24T21:25:37Z Tim Graham timograham@gmail.com 2016-02-24T21:24:33Z urn:sha1:3b0b1e071d339e76fb8f3ca1b9250c23350d2ee0 Backport of 441c537b66233ae57bf0023f02d8262474229e1a from master [1.8.x] Removed docs of deprecated SimpleTestCase warnings behavior. 2016-02-24T14:59:23Z Tim Graham timograham@gmail.com 2016-02-24T14:57:39Z urn:sha1:4b8bd72a9ffa3e04d5fbc8ebe25808ecb7d8d265 Removed in Django 1.7 (4f6be9a0c43050500af598527e1453d27c5c5b85). Backport of 6637cd0ef2fd5f063df82000c18c64c246bb6e1b from master [1.8.x] Fixed #26267 -- Fixed BoundField to reallow slices of subwidgets. 2016-02-24T12:09:08Z Jon Dufresne jon.dufresne@gmail.com 2016-02-23T23:39:20Z urn:sha1:6c48edae769dee8c6b691cea525f85f40760d9d0 Backport of b41268135995cef46d40e550f9301fab20cf330d from master [1.8.x] Fixed many spelling mistakes in code, comments, and docs. 2016-02-23T15:27:15Z Josh Soref jsoref@users.noreply.github.com 2015-12-02T23:55:50Z urn:sha1:751e5fcaf7b1824c67676e8bfa6989872457bbbf Partial backport of 93452a70e8a62c7408eeded444f5088d4a26212d from master [1.8.x] Fixed #26188 -- Documented how to wrap password hashers. 2016-02-23T14:34:04Z Tim Graham timograham@gmail.com 2016-02-10T15:20:02Z urn:sha1:2d321d2393ebf5a8d69604d857fd7df77887ccf7 Backport of 5a541e2e6cb01e254f20c302093a24d7dc9af8ce from master