Re: Problem due to contenttype cache

2011-03-07 Thread Rahul
Hi carl, I have file a ticket for this. For details please find it on http://code.djangoproject.com/ticket/15568 Thanks, Rahul Priyadarshi On Mar 5, 9:27 am, Carl Meyer wrote: > On Mar 4, 5:55 am, Rahul wrote: > > > > > When i ran test

Re: CSRF Header broken on uWSGI

2011-03-07 Thread Gabriel Hurley
>From the information you've given I can't say what's causing your process to hang, but as to your other point about jQuery... yes, jQuery 1.5.0 had a legitimate bug that prevented headers from being properly set on AJAX requests. It was one of the reasons

Re: Brute force attacks

2011-03-07 Thread Rohit Sethi
Luke, I guess the real question is what's the risk of not including it out-of-the-box? What happens if Django users *do not* go out of their way to use a third party tool to protect against brute-forcing? Seems to me that they're likely susceptible in the absence of a network device or service

CSRF Header broken on uWSGI

2011-03-07 Thread Camilo Nova
Hi, im currently on: - Django version 1.3 rc 1 - uWSGI 0.9.6.8 - Python 2.6.5 - jQuery 1.5.1 This is my configuration from my production server, where i have an application that does simple operations on data, the general case is to have a form and send data over POST. Everything works fine

Re: Brute force attacks

2011-03-07 Thread Luke Plant
On 04/03/11 21:56, Rohit Sethi wrote: Hi all, I wanted to revisit a key security discussion. Brute force attacks are the 7th most prevalent attack by number of incidents in the Web Hacking Incidents Database (http://projects.webappsec.org/w/ page/13246995/Web-Hacking-Incident-Database), which

Re: Brute force attacks

2011-03-07 Thread Emil Filipov
On 7.3.2011 г. 22:09 ч., Eric Hutchinson wrote: I would just like to point out that a lot of my users all are behind various nats, so my webapp typically sees only a few ips that have valid users on them, and i have users whom i have to remind of their password on a daily basis. it could lead to

Re: Brute force attacks

2011-03-07 Thread Eric Hutchinson
I would just like to point out that a lot of my users all are behind various nats, so my webapp typically sees only a few ips that have valid users on them, and i have users whom i have to remind of their password on a daily basis. it could lead to a couple of dozen people being throttled for one

Re: Customizable Serialization

2011-03-07 Thread Vivek Narayanan
On Mar 6, 11:54 am, Russell Keith-Magee wrote: > On Sun, Mar 6, 2011 at 2:41 PM, Vivek Narayanan wrote: > > @Sebastien: I got your point about using a dict as an intermediate > > structure and the use of recursion, and I looked at your > >

Re: "sl" as language code for slovenian translation incorrect?

2011-03-07 Thread Jannis Leidel
On 07.03.2011, at 09:30, Gregor Müllegger wrote: > I just discovered some oddity in the naming of the "sl" (SL - > slovenian) locale. The company I'm currently working for has in-house > translations of some of their apps into the slovenian language and > they use the ISO code "si" (SI) -- which

"sl" as language code for slovenian translation incorrect?

2011-03-07 Thread Gregor Müllegger
Hi, I just discovered some oddity in the naming of the "sl" (SL - slovenian) locale. The company I'm currently working for has in-house translations of some of their apps into the slovenian language and they use the ISO code "si" (SI) -- which differs from django, which uses "sl" (SL). According