Subject: CVS commit: pkgsrc/www/py-django
From: Adam Ciarcinski
Date: 2016-07-19 09:32:42
Message id: 20160719073242.8CA91FBB5@cvs.NetBSD.org

Log Message:
Django 1.9.8 fixes a security issue and several bugs in 1.9.7.

Unsafe usage of JavaScript’s Element.innerHTML could result in XSS in the \ 
admin’s add/change related popup. Element.textContent is now used to \ 
prevent execution of the data.

The debug view also used innerHTML. Although a security issue wasn’t \ 
identified there, out of an abundance of caution it’s also updated to use \ 
textContent.

Bugfixes:

* Fixed missing varchar/text_pattern_ops index on CharField and TextField \ 
respectively when using AddField on PostgreSQL.
* Fixed makemessages crash on Python 2 with non-ASCII file names.

Files:
RevisionActionfile
1.74modifypkgsrc/www/py-django/Makefile
1.40modifypkgsrc/www/py-django/PLIST
1.57modifypkgsrc/www/py-django/distinfo