Hi Shai,
Actually, I think this issue is very similar to what I wrote in the thread
of "Model-level validation". I have been using Django for 6 years, and I
was not aware that one can call translation.activate() with a language not
in django_settings.LANGUAGES. I was thinking this would raise an
Hello Djangonauts,
This suggestion is following from discussions of the security issue
which was resolved in today's release. In essence, the issue is that
language codes are optionally used as prefixes in URLs, and for this
use they also become part of regular expressions used by the URL
Details are available on the Django weblog:
https://www.djangoproject.com/weblog/2022/oct/04/security-releases/
--
You received this message because you are subscribed to the Google Groups
"Django developers (Contributions to Django itself)" group.
To unsubscribe from this group and stop
Week ending September 25, 2022
I was in Porto and participated in the Django Con Europe conference.
*Triaged: *
https://code.djangoproject.com/ticket/34021 - collect_translations
(invalid)
https://code.djangoproject.com/ticket/34022 - admin:logout fails to log
out non-staff users
