4 ms·

For a second I got scared. Then I saw the fixes and realized that I don't have to panic-update. It is great that the issues are fixed but none of them seem very

For a second I got scared. Then I saw the fixes and realized that I don't have to panic-update. It is great that the issues are fixed but none of them seem very dangerous. DoS can always be done and I doubt many people use the XML serializer/admin log. Not sure about how many people use get_host(), but I imagine its not a lot of people.

daenz 14y ago
> DoS can always be done Assume you're not talking about DDoS, how?
- mpyne 14y ago
  Piss off the wrong person, normally...
- StavrosK 14y ago
  I've always wondered: What stops someone from uploading a 10 GB file using Django's upload forms? The file could even be very small when gzipped, it sounds like a reasonable and easy DoS attack.