-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
2.1.36db70263 · ·
- Fixed a serious security issue in PlaceholderAdmin, allowing any active staff user to add, edit and delete any plugin, many thanks to Ben Hockey for triggering the discovery of this bug. - Fixed PlaceholderAdmin not respecting limits set in CMS_PLACEHOLDER_CONF, many thanks to Ben Hockey for reporting this. - Fixed show_submenu template tag not respecting in_navigation flags on pages, thanks to Iacopo Spalletti for the patch. - Fixed the way we prevent double-patching django.core.urlresolvers.reverse, thanks to Benjamin Wohlwend for the patch.
-
-
2.1.16593d611 · ·
Fixed a critical AJAX/CSRF issue brought to light by Django 1.2.5. CMS AJAX requests are now properly CSRF protected. Fixed toolbar CSS issues (#680)
-