diff options
| author | Erik Romijn <eromijn@solidlinks.nl> | 2014-05-17 11:29:08 +0200 |
|---|---|---|
| committer | Erik Romijn <eromijn@solidlinks.nl> | 2014-05-19 19:16:45 +0200 |
| commit | ba5ddf7aed542d25f0fdb25a04d87305de0f3972 (patch) | |
| tree | 5ae62b2434ee0dcac50c1e18801812a8cd42760c /docs | |
| parent | 3b765029f04a43a2ba432936553e33d7c4a4ce29 (diff) | |
Fixed #22638 -- Changed CookieWizardView to ignore invalid cookies
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/1.8.txt | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/docs/releases/1.8.txt b/docs/releases/1.8.txt index 6b0cb85058..21864aa3c2 100644 --- a/docs/releases/1.8.txt +++ b/docs/releases/1.8.txt @@ -45,7 +45,13 @@ Minor features :mod:`django.contrib.formtools` ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -* ... +* A :doc:`form wizard </ref/contrib/formtools/form-wizard>` using the + :class:`~django.contrib.formtools.wizard.views.CookieWizardView` will now ignore + an invalid cookie, and the wizard will restart from the first step. An invalid + cookie can occur in cases of intentional manipulation, but also after a secret + key change. Previously, this would raise ``WizardViewCookieModified``, a + ``SuspiciousOperation``, causing an exception for any user with an invalid cookie + upon every request to the wizard, until the cookie is removed. :mod:`django.contrib.gis` ^^^^^^^^^^^^^^^^^^^^^^^^^^ |