Mercurial > p > roundup > code
diff CHANGES.txt @ 5624:b3618882f906
issue2551023: Fix CSRF headers for use with wsgi and cgi. The
env variable array used - separators rather than _. Compare:
HTTP_X-REQUESTED-WITH to HTTP_X_REQUESTED_WITH. The last is
correct. Also fix roundup-server to produce the latter form. (Patch
by Cédric Krier)
| author | John Rouillard <rouilj@ieee.org> |
|---|---|
| date | Wed, 27 Feb 2019 21:47:39 -0500 |
| parents | 1ad3881fc683 |
| children | a5c890d308c3 |
line wrap: on
line diff
--- a/CHANGES.txt Sun Feb 24 22:49:30 2019 -0500 +++ b/CHANGES.txt Wed Feb 27 21:47:39 2019 -0500 @@ -82,7 +82,11 @@ headers. (Joseph Myers) - issue2551022: support non-ASCII prefixes in instance config for finding static files. (Cédric Krier) - +- issue2551023: Fix CSRF headers for use with wsgi and cgi. The + env variable array used - separators rather than _. Compare: + HTTP_X-REQUESTED-WITH to HTTP_X_REQUESTED_WITH. The last is + correct. Also fix roundup-server to produce the latter form. (Patch + by Cédric Krier, reviewed/applied John Rouillard.) 2018-07-13 1.6.0