Django Round-Up – Meetup Django CH #25

Transcript

1. Django Round-Up Sébastien Fievet Meetup Django CH #25
2. Django 1.7
3. Django 1.5 end-of-life
4. Django 1.4 LTS never-ending-release
5. remove_tags safety Yo dawg ! I heard you like tag so I put a tag into your tag to p0wn you !
6. reverse() can generate URLs pointing to other hosts CVE-2014-0480
7. File upload denial of service CVE-2014-0481
8. RemoteUserMiddleware session hijacking CVE-2014-0482
9. Data leakage via querystring manipulation in admin CVE-2014-0483
10. Technical Board BDFLs are dead! Long live to BDFLs!
11. pipsi pip script installer
12. High Performance Django Scaling Django like a Pro!
13. All You Need is L*** Daniele Procida
14. Links • https://docs.djangoproject.com/en/1.7/releases/1.7/ • https://www.djangoproject.com/weblog/2014/aug/20/security/ • https://www.djangoproject.com/weblog/2014/aug/11/remove-tags-advisory/ • https://docs.djangoproject.com/en/dev/internals/organization/#technical-board • https://github.com/mitsuhiko/pipsi • https://highperformancedjango.com/ • http://confreaks.com/videos/4454-DjangoCon2014-all-you-need-is-l