diff options
| author | Marti Raudsepp <marti@juffo.org> | 2016-10-24 15:22:00 -0400 |
|---|---|---|
| committer | Tim Graham <timograham@gmail.com> | 2016-11-01 09:36:44 -0400 |
| commit | 34e10720d81b8d407aa14d763b6a7fe8f13b4f2e (patch) | |
| tree | 3ef12503670fab54c6d67ccc179fb15685e1d00f /docs/ref | |
| parent | 3f8fcfbf3cb5f79135ec868faedc10e496957819 (diff) | |
[1.10.x] Fixed CVE-2016-9013 -- Generated a random database user password when running tests on Oracle.
This is a security fix.
Diffstat (limited to 'docs/ref')
| -rw-r--r-- | docs/ref/settings.txt | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/docs/ref/settings.txt b/docs/ref/settings.txt index 7619e4d827..6ddc219bca 100644 --- a/docs/ref/settings.txt +++ b/docs/ref/settings.txt @@ -797,7 +797,12 @@ Default: ``None`` This is an Oracle-specific setting. The password to use when connecting to the Oracle database that will be used -when running tests. If not provided, Django will use a hardcoded default value. +when running tests. If not provided, Django will generate a random password. + +.. versionchanged:: 1.10.3 + + Older versions used a hardcoded default password. This was also changed + in 1.9.11 and 1.8.16 to fix possible security implications. .. setting:: TEST_TBLSPACE |