@@ -238,12 +238,12 @@ Fixed:
238238- issue2550992: avoid errors from invalid Authorization
239239 headers. (Joseph Myers)
240240- issue2551022: support non-ASCII prefixes in instance config for
241- finding static files. (Cédric Krier)
241+ finding static files. (Cedric Krier)
242242- issue2551023: Fix CSRF headers for use with wsgi and cgi. The
243243 env variable array used - separators rather than _. Compare:
244244 HTTP_X-REQUESTED-WITH to HTTP_X_REQUESTED_WITH. The last is
245245 correct. Also fix roundup-server to produce the latter form. (Patch
246- by Cédric Krier, reviewed/applied John Rouillard.)
246+ by Cedric Krier, reviewed/applied John Rouillard.)
247247- issue2551035 - fix XSS issue in wsgi and cgi when handing url not
248248 found/404. Reported by hannob at
249249 https://github.com/python/bugs.python.org/issues/34, issue opened by
@@ -258,9 +258,9 @@ Fixed:
258258 when using the anydbm backend (John Rouillard)
259259- issue2551041 - change permission check from "Create User" to "Register
260260 User" in page.html for the responsive and devel templates. (reporter
261- Cédric Krier, John Rouillard)
261+ Cedric Krier, John Rouillard)
262262- issue2550144 - fix use of undefined icing macro in devel
263- template. Replace with frame macro. (Cédric Krier)
263+ template. Replace with frame macro. (Cedric Krier)
264264- handle UnicodeDecodeError in file class when file contents are
265265 not text (e.g. jpg). (John Rouillard)
266266- issue2551033: prevent reverse engineering hidden data by using etags
0 commit comments