edan_f0

Geschiedenis

David Winterbottom f33af94a00 Stop using home-rolled encryption for basket cookies For anon users, the basket ID is stored in a cookie. Previously, this was stored with a simple crc32 hash to prevent users enumerating baskets by changing their cookies. However, home-rolled encryption is always a bad idea. In this case, it may have probably exposed too much information allowing the SECRET_KEY to be determined. This change switches away from the home-rolled encryption to use Django's built-in crypto signing functionality to store the basket ID. Thanks to Raphael Kimmig for reporting this issue and providing this patch.		12 jaren geleden
..
address	Rework how addresses are cleaned	12 jaren geleden
basket	Stop using home-rolled encryption for basket cookies	12 jaren geleden
catalogue	Revert review form API to be more explicit	12 jaren geleden
checkout	Allow shipping_address to be 'None' for an order	12 jaren geleden
core	Add tests for PhoneNumberField	12 jaren geleden
customer	Rework recently viewed products	12 jaren geleden
dashboard	Disallow selecting child products as parent	12 jaren geleden
forms	Adjust test generator to make tests pass	12 jaren geleden
offer	Extend offers to work when taxes aren't known	12 jaren geleden
partner	Correct broken tests from availability change	12 jaren geleden
payment	Ensure AMEX cards have 4 digits CCV numbers	12 jaren geleden
shipping	Support shipping methods when tax isn't known	12 jaren geleden
voucher	Support Django's 1.5 AUTH_USER_MODEL feature	12 jaren geleden
__init__.py	Moved tests into separate package.	13 jaren geleden
logging_tests.py	Use nose test generators instead of @dataProviders	12 jaren geleden
promotion_tests.py	Moved tests into separate package.	13 jaren geleden
settings_tests.py	Moved Oscar's templates into a new folder.	13 jaren geleden
utils_tests.py	Add compose function for combining decorators	12 jaren geleden
wishlist_tests.py	Use compatability layer for user in test	12 jaren geleden