Reporting here to avoid it get lost on 2.2 stable release due to wrong crank branch being used for release process.
Today it got reported an issue in dispatch that didn't check security when mixing _lookup and RestController. As crank default branch has changes that are related to Python3 support and shouldn't go into stable releases I forked a 0.6 branch where to apply the bugfix. The issue is now fixed but a new crank release from the 0.6 branch will be required. I'll update TG dependencies to require at least crank>0.6.2 to avoid using the bugged version in future releases. -- You received this message because you are subscribed to the Google Groups "TurboGears Trunk" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/turbogears-trunk?hl=en.
