Skip to content

[pull] main from django:main#399

Merged
pull[bot] merged 5 commits intothreatcode:mainfrom
django:main
May 5, 2026
Merged

[pull] main from django:main#399
pull[bot] merged 5 commits intothreatcode:mainfrom
django:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 5, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

jacobtylerwalls and others added 5 commits May 5, 2026 14:33
…FileUploadHandler on ASGI.

In ASGI deployments, Content-Length is not guaranteed to reflect the
actual request body size, so relying on it to gate memory allocation
allowed the limit to be bypassed. The handler now enforces
DATA_UPLOAD_MAX_MEMORY_SIZE regardless of the declared header value.

Thanks to Kyle Agronick for the report. Refs #35289.

Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
…ion cookie with SESSION_SAVE_EVERY_REQUEST=True.

Thank you Jacob Walls and Natalia Bidart for reviews.
… contains an asterisk.

Thank you Ahmad Sadeddin for the report and Jacob Walls for the review.
@pull pull Bot locked and limited conversation to collaborators May 5, 2026
@pull pull Bot added the ⤵️ pull label May 5, 2026
@pull pull Bot merged commit 17b93fa into threatcode:main May 5, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants