Skip to content

v0.6.0
Compare
Choose a tag to compare
@moggers87 moggers87 released this 17 Jun 21:16
v0.6.0
This tag was signed with the committer’s verified signature.
moggers87 Matt Molyneaux
GPG key ID: 63994C0E59A0BC57
Verified
Learn about vigilant mode.
070ae11

This release contains a fix for GHSA-6r3c-8xf3-ggrr. Thanks to Gianluca Pacchiella for reporting this issue and for providing the initial patch.

  • Fixed issue where django-sendfile could serve any file, even if it was
    outside SENDFILE_ROOT. SEDNFILE_ROOT is now required for all
    backends.
Assets 3
Loading