From ba5ddf7aed542d25f0fdb25a04d87305de0f3972 Mon Sep 17 00:00:00 2001 From: Erik Romijn Date: Sat, 17 May 2014 11:29:08 +0200 Subject: Fixed #22638 -- Changed CookieWizardView to ignore invalid cookies --- docs/releases/1.8.txt | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/releases/1.8.txt b/docs/releases/1.8.txt index 6b0cb85058..21864aa3c2 100644 --- a/docs/releases/1.8.txt +++ b/docs/releases/1.8.txt @@ -45,7 +45,13 @@ Minor features :mod:`django.contrib.formtools` ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -* ... +* A :doc:`form wizard ` using the + :class:`~django.contrib.formtools.wizard.views.CookieWizardView` will now ignore + an invalid cookie, and the wizard will restart from the first step. An invalid + cookie can occur in cases of intentional manipulation, but also after a secret + key change. Previously, this would raise ``WizardViewCookieModified``, a + ``SuspiciousOperation``, causing an exception for any user with an invalid cookie + upon every request to the wizard, until the cookie is removed. :mod:`django.contrib.gis` ^^^^^^^^^^^^^^^^^^^^^^^^^^ -- cgit v1.3