Tim Graham 58e08e80e3 [1.10.x] Fixed CVE-2017-12794 -- Fixed XSS possibility in traceback section of technical 500 debug page. ...

This is a security fix.

2017-09-05 11:19:56 -04:00

..

decorators

[1.10.x] Normalized spelling of ETag.

2016-09-09 11:00:58 -04:00

generic

Fixed #26207 -- Replaced dynamic classes with non-data descriptors for deferred instance loading.

2016-04-29 13:06:32 -04:00

__init__.py

Fixed #25385 -- Allowed importing views.generic.View from views.View.

2016-01-11 08:18:44 -05:00

csrf.py

Fixed #26201 -- Documented the consequences of rotating the CSRF token on login.

2016-04-05 11:02:38 -04:00

debug.py

[1.10.x] Fixed CVE-2017-12794 -- Fixed XSS possibility in traceback section of technical 500 debug page.

2017-09-05 11:19:56 -04:00

defaults.py

Fixed #26567 -- Updated references to obsolete RFC2616.

2016-05-03 11:14:40 -04:00

i18n.py

[1.10.x] Fixed #27418 -- Fixed occasional missing plural forms in JavaScriptCatalog.

2016-12-14 18:39:35 -05:00

static.py

[1.10.x] Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().

2017-04-04 10:17:35 -04:00