Re: Django security releases issued: 4.0.1, 3.2.11, and 2.2.26

2022-01-04 Thread SJ Postmus
Hi! I have a question regarding the fix for CVE-2021-45116. In this fix the resolving logic for 'paths' passed to dictsort is simplified to no longer support indexing into lists, nor to support method-calls on objects. The explanation here is that: > Due to leveraging the Django Template Langua

Re: Django security releases issued: 4.0.1, 3.2.11, and 2.2.26

2022-01-05 Thread SJ Postmus
Dear Florian, Thank you for taking the time to reply to this email. From: django-developers@googlegroups.com on behalf of Florian Apolloner Sent: 04 January 2022 16:45 To: Django developers (Contributions to Django itself) Subject: Re: Django security releases issued: 4.0.1, 3.2.11, and 2.2.2