Re: Thank you to our security aware developers

2012-12-07 Thread Ryan McIntosh
" To: django-developers@googlegroups.com Sent: Thursday, 6 December, 2012 11:06:38 PM Subject: Re: Thank you to our security aware developers So, I don't understand one thing. If it's checking the validity on the backend of a hidden field in the frontend, that should mean that the

Re: Thank you to our security aware developers

2012-12-07 Thread Pedro J. Aramburu
So, I don't understand one thing. If it's checking the validity on the backend of a hidden field in the frontend, that should mean that the backend should have the original (or proper) value of the frontend so why does it have that hidden field on the first place? El viernes, 30 de noviembre d

Re: Thank you to our security aware developers

2012-11-30 Thread Russell Keith-Magee
Hi Chris, Thanks for the kind words. It's always nice to know when your efforts are appreciated. As for the suggestion about the error message -- that's sounds like a reasonable idea to me; feel free to open a ticket. If you're looking to get involved in the development of Django itself, this sho

Thank you to our security aware developers

2012-11-30 Thread Chris Cogdon
I want to give a big "thumbs up" to the folk that worked on InlineForeignKeyField, inlineformset_factory, and their friends. I just used inlineformset_factory for my project, saw that it was writing the parent id out into hidden form variables and, thinking that this seemed "unnecessary" and a