[Python-Dev] Counting collisions for the win
ncoghlan at gmail.com
Fri Jan 20 06:18:36 CET 2012
On Fri, Jan 20, 2012 at 2:54 PM, Carl Meyer <carl at oddbird.net> wrote:
> I don't have the expertise to speak otherwise to the alternatives for
> fixing the collisions vulnerability, but I don't believe it's accurate
> to presume that Django would not want to fix a dict-ordering dependency,
> and use that as a justification for one approach over another.
It's more a matter of wanting deployment of a security fix to be as
painless as possible - a security fix that system administrators can't
deploy because it breaks critical applications may as well not exist.
Nick Coghlan | ncoghlan at gmail.com | Brisbane, Australia
More information about the Python-Dev