Context Navigation

Changes between Version 7 and Version 8 of SecurityTeam

-              v7
+              v8
 === Security issue in the development server (runserver) ===
+Thanks for the report and for taking the time to submit it through the appropriate channel.
+After review, we've determined that this issue only affects the development server used by runserver. As documented at [0]:
+After review, we've determined that the reported issue only affects the development server used by runserver. As documented at [0]:
 "This lightweight development server has not gone through security audits or performance tests, hence is unsuitable for production. Making this server able to handle a production environment is outside the scope of Django."
+Also, our security policy at [1] states that:
+"[...] This means the following scenarios do not require a security release: Exploits that only affect local development, for example when using runserver."
 Because of this, the behavior you reported is not considered a security issue within the Django project. That said, we appreciate your diligence and have opened a public ticket to track a regular fix for this case, with appropriate credit for your report.
+Thanks for taking the time to submit it through the appropriate channel.
 [0] https://docs.djangoproject.com/en/stable/ref/django-admin/#django-admin-runserver
+[1] https://docs.djangoproject.com/en/stable/internals/security/#how-does-django-evaluate-a-report
 === Unauthenticated cache purge ===