diff options
| author | Russell Keith-Magee <russell@keith-magee.com> | 2011-09-10 00:47:00 +0000 |
|---|---|---|
| committer | Russell Keith-Magee <russell@keith-magee.com> | 2011-09-10 00:47:00 +0000 |
| commit | 5f287f75f2277ba821dcf5c444ab12d8eff6cce3 (patch) | |
| tree | f665fe5b63d6969753ba90080728fc23bd767279 /docs/internals | |
| parent | 33076af6f2aa5285b3a70246e14163b901b512f7 (diff) | |
Altered the behavior of URLField to avoid a potential DOS vector, and to avoid potential leakage of local filesystem data. A security announcement will be made shortly.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@16760 bcc190cf-cafb-0310-a4f2-bffc1f526a37
Diffstat (limited to 'docs/internals')
| -rw-r--r-- | docs/internals/deprecation.txt | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/docs/internals/deprecation.txt b/docs/internals/deprecation.txt index 105b39e937..8d5baaf407 100644 --- a/docs/internals/deprecation.txt +++ b/docs/internals/deprecation.txt @@ -115,6 +115,11 @@ their deprecation, as per the :ref:`deprecation policy beyond that of a simple ``TextField`` since the removal of oldforms. All uses of ``XMLField`` can be replaced with ``TextField``. + * ``django.db.models.fields.URLField.verify_exists`` has been + deprecated due to intractable security and performance + issues. Validation behavior has been removed in 1.4, and the + argument will be removed in 1.5. + 1.5 --- |