21cc5acead
1.11.5: Fix CVE-2018-14574: Open redirect possibility in CommonMiddleware If the CommonMiddleware and the APPEND_SLASH setting are both enabled, and if the project has a URL pattern that accepts any path ending in a slash (many content management systems have such a pattern), then a request to a maliciously crafted URL of that site could lead to a redirect to another site, enabling phishing and other attacks. CommonMiddleware now escapes leading slashes to prevent redirects to other domains.
30 lines
901 B
Makefile
30 lines
901 B
Makefile
# $NetBSD: Makefile,v 1.101 2018/08/02 14:02:21 adam Exp $
|
|
|
|
DISTNAME= Django-1.11.15
|
|
PKGNAME= ${PYPKGPREFIX}-${DISTNAME:tl}
|
|
CATEGORIES= www python
|
|
MASTER_SITES= https://www.djangoproject.com/m/releases/${PKGVERSION_NOREV:R}/
|
|
|
|
MAINTAINER= joerg@NetBSD.org
|
|
HOMEPAGE= https://www.djangoproject.com/
|
|
COMMENT= Django, a high-level Python Web framework
|
|
LICENSE= modified-bsd
|
|
|
|
DEPENDS+= ${PYPKGPREFIX}-pytz-[0-9]*:../../time/py-pytz
|
|
|
|
USE_LANGUAGES= # none
|
|
|
|
REPLACE_PYTHON+= django/bin/django-admin.py
|
|
REPLACE_PYTHON+= django/conf/project_template/manage.py-tpl
|
|
|
|
post-patch:
|
|
${RM} ${WRKSRC}/django/contrib/admin/widgets.py.orig
|
|
|
|
post-install:
|
|
cd ${DESTDIR}${PREFIX}/bin && \
|
|
${MV} django-admin django-admin${PYVERSSUFFIX} && \
|
|
${MV} django-admin.py django-admin${PYVERSSUFFIX}.py || ${TRUE}
|
|
|
|
.include "../../lang/python/application.mk"
|
|
.include "../../lang/python/egg.mk"
|
|
.include "../../mk/bsd.pkg.mk"
|