News for hackers. Stuff that matters.

A comment on Security releases issued. Parent comment

Re:Security releases issued by pindi on Tuesday February 19, 2013 @04:33PM (#5247192)
No, Django's XML deserialization is not used automatically. It is only used for mass importing objects to the database, which most sites would allow only admin users to do.
[ Parent | on HN ]

There are no comments on this comment yet.