Skip to content

Releases: epandurski/cmbarter

Circular Multilateral Barter 1.11

30 Oct 15:19
Compare
Choose a tag to compare
    -- Improved the way session files are garbage-collected. This 
       closes a potential DoS-attack vector.

Circular Multilateral Barter 1.10

17 Oct 05:11
Compare
Choose a tag to compare
  -- Fixed a serious security problem in the WAP-application.

  -- Disabled "django.middleware.gzip.GZipMiddleware" because of
     the newly discovered "BREACH" attack against Django's CSRF
     protection. For more information check this link:
     https://www.djangoproject.com/weblog/2013/aug/06/breach-and-django/

  -- Now CMB automatically maintains a whitelist of IP-addresses.
     Site administrators can use this whitelist to configure their
     firewall to protect their web-server(s) from DoS attacks.

  -- Improved CuriousORM module. Now "CuriousORM" is a separate
     project and has its own repository at
     https://github.com/epandurski/CuriousORM/

  -- Now CMB's source code can be effortlessly transformed to work
     with Python 3. To do this, find all "PYTHON3"-tagged comments
     in the code and make the suggested substitutions. Then run
     "2to3" on the entire source tree. (You may skip
     "curiousorm.py" because it already is Python3 compatible.)

  -- Added "show_whitelist.py" command-line tool.
  -- Added "show_emails.py" command-line tool.
  -- Minor UI improvements.
  -- Minor bug-fixes.
  -- Closed few potential DoS-attack vectors.
  -- Better support for new versions of Django.
  -- Improved installation guide.