Michael Manfre 5d86458579 Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords. ...

Refs #20760.

Thanks Michael Manfre for the fix and to Adam Johnson for the review.

2024-07-09 09:21:19 -03:00

..

fixtures

…

models

…

templates

…

__init__.py

…

backend_alias.py

…

client.py

…

common-passwords-custom.txt

…

settings.py

…

test_admin_multidb.py

Fixed #35520 -- Avoided opening transaction for read-only ModelAdmin requests.

2024-07-04 11:38:58 +02:00

test_auth_backends.py

…

test_basic.py

…

test_checks.py

Fixed #31405 -- Added LoginRequiredMiddleware.

2024-05-22 08:51:17 +02:00

test_context_processors.py

…

test_decorators.py

Fixed #31405 -- Added LoginRequiredMiddleware.

2024-05-22 08:51:17 +02:00

test_forms.py

Fixed #35477 -- Corrected 'required' errors in auth password set/change forms.

2024-05-30 16:31:01 -03:00

test_handlers.py

…

test_hashers.py

Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.

2024-07-09 09:21:19 -03:00

test_management.py

Fixed #35569 -- Improved wording of invalid ForeignKey error message.

2024-07-04 11:35:03 +02:00

test_middleware.py

Fixed #31405 -- Added LoginRequiredMiddleware.

2024-05-22 08:51:17 +02:00

test_migrations.py

…

test_mixins.py

…

test_models.py

…

test_remote_user.py

…

test_signals.py

…

test_templates.py

…

test_tokens.py

…

test_validators.py

…

test_views.py

Fixed #31405 -- Added LoginRequiredMiddleware.

2024-05-22 08:51:17 +02:00

urls_admin.py

…

urls_custom_user_admin.py

…

urls.py

Fixed #31405 -- Added LoginRequiredMiddleware.

2024-05-22 08:51:17 +02:00