Aymeric Augustin 35c991aa06 Added a default limit to the maximum number of forms in a formset. ...

This is a security fix. Disclosure and advisory coming shortly.

2013-02-19 11:23:30 -07:00

..

bin

Advanced pending deprecation warnings.

2012-12-29 21:59:07 +01:00

conf

Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

2013-02-19 11:23:29 -07:00

contrib

Checked object permissions on admin history view.

2013-02-19 11:23:30 -07:00

core

Restrict the XML deserializer to prevent network and entity-expansion DoS attacks.

2013-02-19 11:23:30 -07:00

db

Ensured a connection is established when checking the database version.

2013-02-19 10:51:24 +01:00

dispatch

Fixed #16679 -- Use caching to speed up signal sending

2012-12-16 21:46:02 +02:00

forms

Added a default limit to the maximum number of forms in a formset.

2013-02-19 11:23:30 -07:00

http

Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

2013-02-19 11:23:29 -07:00

middleware

Fixed #19707 -- Reset transaction state after requests

2013-02-10 13:55:54 +02:00

shortcuts

Fixed #19692 -- Completed deprecation of mimetype in favor of content_type.

2013-01-31 13:54:40 +01:00

template

Fixed #19829 -- Fixed index lookups for NumPy arrays in templates.

2013-02-14 23:29:15 -08:00

templatetags

Fixed #19088 -- Always escape % inside blocktrans tag

2012-10-23 18:49:22 +02:00

test

Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

2013-02-19 11:23:29 -07:00

utils

Improved input sanitizing with thousand separators

2013-02-15 16:37:52 +01:00

views

Fixed #17260 -- Added time zone aware aggregation and lookups.

2013-02-16 09:19:04 +01:00

__init__.py

Advanced version identifiers for 1.6 cycle.

2012-10-26 22:01:34 -03:00