django.git/tests/regressiontests/requests/tests.py, branch 1.5b2 django http://cgit.adnoto.dev/django.git/atom?h=1.5b2 2012-12-10T21:13:28Z [1.5.X] Fixed a security issue in get_host. 2012-12-10T21:13:28Z Florian Apolloner florian@apolloner.eu 2012-11-27T21:24:31Z urn:sha1:77b06e41516d8136b56c040cba7e235b14750bfb Full disclosure and new release forthcoming. [1.5.x] Fixed #19101 -- Decoding of non-ASCII POST data on Python 3. 2012-11-03T12:07:02Z Aymeric Augustin aymeric.augustin@m4x.org 2012-11-03T11:54:06Z urn:sha1:b99707bdedbcbf832bd88eaefd488c841110a222 Thanks Claude Paroz. Backport of 095eca8 from master. [1.5.x] Fixed #5076 -- Properly decode POSTs with non-utf-8 payload encoding 2012-10-30T08:01:57Z Claude Paroz claude@2xlibre.net 2012-10-29T19:33:00Z urn:sha1:3f3076edbf8d6fb204984a1a7fddbde408d5b104 Thanks daniel at blogg.se for the report and Aymeric Augustin for his assistance on the patch. Backport of 6de6988f9 from master. [1.5.x] Don't use : as an invalid cookie character 2012-10-26T01:39:39Z Ian Clelland ian@fullfactor.com 2012-09-28T15:09:05Z urn:sha1:edaacc41124c562961df478be1382773216cac55 Since http://bugs.python.org/issue2193 has been resolved in favour of the colon in cookie names, we need to test invalid cookie removal using a different character. "@" is still considered invalid by all sources. Backport of 419e2137fabdcadadc728cb9bd94af929157dc3b from master Used @override_settings in several tests. 2012-10-20T21:22:46Z Aymeric Augustin aymeric.augustin@m4x.org 2012-10-20T21:22:46Z urn:sha1:d7c6a57d606bbb8185f9215ffce4c0516a9ae438 Used FakePayload in requests tests 2012-10-20T13:54:26Z Claude Paroz claude@2xlibre.net 2012-10-20T13:53:28Z urn:sha1:cfb3eb2e3d1af6d4f6ba852f50f57865e34ece38 Fixed #5611 -- Restricted accepted content types in parsing POST data 2012-10-20T12:56:16Z Claude Paroz claude@2xlibre.net 2012-10-20T12:33:57Z urn:sha1:dfd4a7175119ddb422d8426dcc15902265d5a428 Thanks paulegan for the report and Preston Holmes for the review. Added missed poisoned host header tests 2012-10-18T18:10:46Z Preston Holmes preston@ptone.com 2012-10-18T18:10:46Z urn:sha1:4fb510fde4db95d15205afefdefade97eee4d3ef [py3] Used BytesIO to test request streams 2012-08-11T09:11:20Z Claude Paroz claude@2xlibre.net 2012-08-11T09:11:20Z urn:sha1:97fe70d30bddfa24bf5ef5d2148a1a5ae6bf54b2 [py3] Used compatible imports of StringIO. 2012-08-08T12:50:01Z Aymeric Augustin aymeric.augustin@m4x.org 2012-08-07T13:41:54Z urn:sha1:396357741b88dfcd85486db673dbb822da8b2de0