diff options
| author | Jacob Kaplan-Moss <jacob@jacobian.org> | 2009-07-29 05:35:51 +0000 |
|---|---|---|
| committer | Jacob Kaplan-Moss <jacob@jacobian.org> | 2009-07-29 05:35:51 +0000 |
| commit | d78cf61c992079a04892abe27c439431e4ef633b (patch) | |
| tree | c95d027f9a43d7df16a170b7916cd95a87c0d7de /django/__init__.py | |
| parent | 91f18400cc0fb37659e2dbaab5484ff2081f1f30 (diff) | |
BACKWARDS-INCOMPATIBLE CHANGE: Removed SetRemoteAddrFromForwardedFor middleware.
In a nutshell, it's been demonstrated that this middleware can never be made reliable enough for general-purpose use, and that (despite documentation to the contrary) its inclusion in Django may lead application developers to assume that the value of ``REMOTE_ADDR`` is "safe" or in some way reliable as a source of authentication. So it's gone.
See the Django 1.1 release notes for full details, as well as upgrade instructions.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11363 bcc190cf-cafb-0310-a4f2-bffc1f526a37
Diffstat (limited to 'django/__init__.py')
0 files changed, 0 insertions, 0 deletions