Berker Peksag <berker.pek...@gmail.com> added the comment:

Thank you for your quick response and for your detailed analysis, John.

I will attach a patch to implement your suggestions.

> My thought was that the random function wasn't so random. The new 1.5.1+
> (what will be 1.6) roundup uses more random data than 1.4.20. Addition
> of nonces to protect against csrf etc. consumes random data.

Should I open an upstream issue to document this at 
http://roundup.sourceforge.net/docs/upgrading.html ?

_______________________________________________________
PSF Meta Tracker <metatrac...@psf.upfronthosting.co.za>
<http://psf.upfronthosting.co.za/roundup/meta/issue644>
_______________________________________________________
_______________________________________________
Tracker-discuss mailing list
Tracker-discuss@python.org
https://mail.python.org/mailman/listinfo/tracker-discuss
Code of Conduct: https://www.python.org/psf/codeofconduct/

Reply via email to