3 Commits

Author	SHA1	Message	Date
Tim Graham	adc9fa8324	[1.9.x] Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions. ... Backport of abf5ccc29c45d53ec17541179bb5f0a75b28915d from master	2015-10-29 17:29:16 -04:00
Tim Graham	8cc41ce7a7	Fixed DoS possiblity in contrib.auth.views.logout() ... Thanks Florian Apolloner and Carl Meyer for review. This is a security fix.	2015-08-18 08:03:43 -04:00
Tim Graham	b0ab74dfca	Added stub release notes for security releases.	2015-08-18 08:03:39 -04:00