SECURITY bug fix #7

Merged
merged 1 commit into from Jan 3, 2012

Conversation

Projects
None yet
2 participants
Contributor

tomwys commented Jan 3, 2012

With current implementation user data is leaking. If django-envelope prefills form, all non-logged in users see pre-filled data.

@zsiciarz zsiciarz added a commit that referenced this pull request Jan 3, 2012

@zsiciarz zsiciarz Merge pull request #7 from tomwys/master
SECURITY bug fix
9149a59

@zsiciarz zsiciarz merged commit 9149a59 into zsiciarz:master Jan 3, 2012

Owner

zsiciarz commented Jan 3, 2012

Oh bugger! thanks for catching this, 0.4.1 with the fix will be out soon.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment