Carl Meyer c6d69c12ea Restrict the XML deserializer to prevent network and entity-expansion DoS attacks. ...

This is a security fix. Disclosure and advisory coming shortly.

2013-02-19 11:23:30 -07:00

..

cache

Fixed #19689 -- Renamed Model._meta.module_name to model_name.

2013-02-05 04:16:07 -05:00

files

Fixed #17061 -- Factored out importing object from a dotted path

2013-02-04 16:38:25 +01:00

handlers

Fixed #17061 -- Factored out importing object from a dotted path

2013-02-04 16:38:25 +01:00

mail

Fixed #17061 -- Factored out importing object from a dotted path

2013-02-04 16:38:25 +01:00

management

Fixed #19822 -- Added validation for uniqueness on USERNAME_FIELD on custom User models.

2013-02-15 09:00:55 +08:00

serializers

Restrict the XML deserializer to prevent network and entity-expansion DoS attacks.

2013-02-19 11:23:30 -07:00

servers

Fixed #17061 -- Factored out importing object from a dotted path

2013-02-04 16:38:25 +01:00

__init__.py

…

context_processors.py

[py3] Made csrf context processor return Unicode

2012-08-13 11:54:21 +02:00

exceptions.py

Fixed #3011 -- Added swappable auth.User models.

2012-09-26 18:48:09 +08:00

paginator.py

Paginator._get_page hook

2012-11-21 15:19:44 +13:00

signals.py

Major refactoring of django.dispatch with an eye towards speed. The net result is that signals are up to 90% faster.

2008-08-06 15:32:46 +00:00

signing.py

Fixed #17061 -- Factored out importing object from a dotted path

2013-02-04 16:38:25 +01:00

urlresolvers.py

Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:13:52 +01:00

validators.py

Fixed #19034 -- Added proper i18n pluralization for max/min length validation messages

2013-01-30 21:44:14 +01:00

wsgi.py

Fixed #16360 -- Added WSGI entrypoint to startproject layout, and enabled internal servers (runserver and runfcgi) to use an externally-defined WSGI application. Thanks to Armin Ronacher, Jannis Leidel, Alex Gaynor, ptone, and Jacob Kaplan-Moss.

2011-10-22 04:30:10 +00:00

xheaders.py

Fixed #19689 -- Renamed Model._meta.module_name to model_name.

2013-02-05 04:16:07 -05:00