Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Fixed #24496 -- Added CSRF Referer checking against ↵ | Matt Robenolt | 2015-09-16 | 1 | -25/+19 |
| | | | | | | | CSRF_COOKIE_DOMAIN. Thanks Seth Gottlieb for help with the documentation and Carl Meyer and Joshua Kehn for reviews. | ||||
* | Made is_safe_url() reject URLs that start with control ↵ | Tim Graham | 2015-03-19 | 1 | -1/+3 |
| | | | | | | characters. This is a security fix; disclosure to follow shortly. | ||||
* | Fixed #24321 -- Improved `utils.http.same_origin` ↵ | Lukas Klein | 2015-02-12 | 1 | -0/+6 |
| | | | | compliance with RFC6454 | ||||
* | Sorted imports with isort; refs #23860. | Tim Graham | 2015-02-06 | 1 | -3/+2 |
| | |||||
* | Fixed is_safe_url() to handle leading whitespace. | Tim Graham | 2015-01-13 | 1 | -1/+2 |
| | | | | This is a security fix. Disclosure following shortly. | ||||
* | Fixed #23620 -- Used more specific assertions in the ↵ | Berker Peksag | 2014-11-03 | 1 | -2/+2 |
| | | | | Django test suite. | ||||
* | Consolidated some text utils into the utils_tests test ↵ | Loic Bistuer | 2014-09-23 | 1 | -0/+32 |
| | | | | package. | ||||
* | Fixed #23333 -- Made urlsafe_base64_decode() return ↵ | Ian Foote | 2014-08-23 | 1 | -0/+6 |
| | | | | proper type on Python 3. | ||||
* | Fixed #22909 -- Removed camelCasing in some tests. | Tim Graham | 2014-07-08 | 1 | -5/+5 |
| | | | | Thanks brylie. | ||||
* | Added additional checks in is_safe_url to account for ↵ | Erik Romijn | 2014-05-14 | 1 | -0/+30 |
| | | | | | | flexible parsing. This is a security fix. Disclosure following shortly. | ||||
* | Dropped fix_IE_for_vary/attach. | Aymeric Augustin | 2014-05-14 | 1 | -46/+0 |
| | | | | This is a security fix. Disclosure following shortly. | ||||
* | Fixed #21266 -- Fixed E201,E202 pep8 warnings. | Larry O'Neill | 2013-10-15 | 1 | -1/+1 |
| | |||||
* | Replaced "not PY3" by "PY2", new in six 1.4.0. | Aymeric Augustin | 2013-09-02 | 1 | -2/+2 |
| | |||||
* | Stopped using django.utils.unittest in the test suite. | Aymeric Augustin | 2013-07-01 | 1 | -1/+1 |
| | | | | Refs #20680. | ||||
* | Modified utils_tests for unittest2 discovery. | Preston Timmons | 2013-04-12 | 1 | -0/+163 |