Branch: refs/heads/stable/1.4.x
  Home:   https://github.com/django/django
  Commit: 0317edf0c7779902d49c6efb8242af61e5569cde
      
https://github.com/django/django/commit/0317edf0c7779902d49c6efb8242af61e5569cde
  Author: Florian Apolloner <[email protected]>
  Date:   2013-09-24 (Tue, 24 Sep 2013)

  Changed paths:
    M django/contrib/auth/forms.py
    M django/contrib/auth/hashers.py
    M django/contrib/auth/tests/hashers.py

  Log Message:
  -----------
  Revert "[1.4.x] Ensure that passwords are never long enough for a DoS."

This reverts commit 3f3d887a6844ec2db743fee64c9e53e04d39a368.

This fix is no longer necessary, our pbkdf2 (see next commit) implementation
no longer rehashes the password every iteration.


  Commit: e2403db95a494c0660ef09f94d9fca1604111be2
      
https://github.com/django/django/commit/e2403db95a494c0660ef09f94d9fca1604111be2
  Author: Florian Apolloner <[email protected]>
  Date:   2013-09-24 (Tue, 24 Sep 2013)

  Changed paths:
    M django/utils/crypto.py

  Log Message:
  -----------
  [1.4.x] Fixed #21138 -- Increased the performance of our PBKDF2 
implementation.

Thanks go to Michael Gebetsroither for pointing out this issue and help on
the patch.

Backport of 68540fe4df44492571bc610a0a043d3d02b3d320 from master.


Compare: https://github.com/django/django/compare/ca77e38d243c...e2403db95a49

-- 
You received this message because you are subscribed to the Google Groups 
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-updates/5241e61a610f1_22bec75d582183c%40hookshot-fe5-pe1-prd.aws.github.net.mail.
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to