Commit History

Author SHA1 Message Date
  Tim Graham f65eb15ac6 Fixed #22504 -- Corrected domain terminology in security guide. 10 years ago
  Moayad Mardini 3776926cfe Fixed #22493 - Added warnings to raw() and extra() docs about SQL injection 10 years ago
  Tim Graham 4965a77407 Removed PIL compatability layer per deprecation timeline. 10 years ago
  Tim Graham df6760f12c Added a warning regarding risks in serving user uploaded media. 11 years ago
  Tim Graham a3372f67cb Added a warning regarding session security and subdomains. 11 years ago
  Aymeric Augustin 1267d2d9bc Fixed #20330 -- Normalized spelling of "web server". 11 years ago
  Carl Meyer d51fb74360 Added a new required ALLOWED_HOSTS setting for HTTP host header validation. 11 years ago
  Aymeric Augustin ebd2598596 Removed django.contrib.markup. 12 years ago
  Tim Graham b3a8c9dab8 Fixed broken links, round 3. refs #19516 12 years ago
  Florian Apolloner 27560924ec Fixed a security issue in get_host. 12 years ago
  David Fischer 58786897a1 Formatting fix for host headers section 12 years ago
  David Fischer c65100248d Added CSRF with HTTPS/HSTS and forwarding note 12 years ago
  David Fischer ba141e6906 Added note about Strict Transport Security (HSTS) 12 years ago
  Luke Plant 0199bdc0b4 Rewrote security.txt SSL docs, noting SECURE_PROXY_SSL_HEADER. 12 years ago
  Luke Plant 718f149bb2 Added more explicit warnings about unconfigured reStructured Text usage in docs. 12 years ago
  Adrian Holovaty d3055b3382 Quick edit of docs/topics/security.txt to catch some basic formatting problems and reword an awkward section 13 years ago
  Russell Keith-Magee 893cea211a Added protection against spoofing of X_FORWARDED_HOST headers. A security announcement will be made shortly. 13 years ago
  Jannis Leidel f0280f2e94 Fixes #16482 -- Fixes typo in security docs. Thanks, charettes. 13 years ago
  Luke Plant 9896b0df73 Grammar fixes and content tweaks to XSS section of security docs. 13 years ago
  Luke Plant f5c9c2246e Improved warning about file uploads in docs, and added link from security overview page 13 years ago
  Jannis Leidel 3ee076b135 Fixed #16248 -- Corrected a few typos in the security docs. Thanks, buddelkiste. 13 years ago
  Luke Plant 528157ce73 Fixed #14201 - Add a "security overview" page to the docs 13 years ago