|
@@ -112,17 +112,18 @@ The Storage Class
|
|
|
available for new content to be written to on the target storage
|
|
|
system.
|
|
|
|
|
|
- .. versionchanged:: 1.7
|
|
|
+ If a file with ``name`` already exists, an underscore plus a random
|
|
|
+ 7 character alphanumeric string is appended to the filename before
|
|
|
+ the extension.
|
|
|
|
|
|
- If a file with ``name`` already exists, an underscore plus a random 7
|
|
|
- character alphanumeric string is appended to the filename before the
|
|
|
- extension.
|
|
|
+ .. versionchanged:: 1.7
|
|
|
|
|
|
- Previously, an underscore followed by a number (e.g. ``"_1"``, ``"_2"``,
|
|
|
- etc.) was appended to the filename until an available name in the
|
|
|
- destination directory was found. A malicious user could exploit this
|
|
|
- deterministic algorithm to create a denial-of-service attack. This
|
|
|
- change was also made in Django 1.6.6, 1.5.9, and 1.4.14.
|
|
|
+ Previously, an underscore followed by a number (e.g. ``"_1"``,
|
|
|
+ ``"_2"``, etc.) was appended to the filename until an available
|
|
|
+ name in the destination directory was found. A malicious user could
|
|
|
+ exploit this deterministic algorithm to create a denial-of-service
|
|
|
+ attack. This change was also made in Django 1.6.6, 1.5.9, and
|
|
|
+ 1.4.14.
|
|
|
|
|
|
.. method:: get_valid_name(name)
|
|
|
|