← Back to branch summary

~bzr-pqm/bzr/bzr.dev

« back to all changes in this revision

Viewing changes to BRANCH.TODO

  • Committer: John Arbash Meinel
  • Date: 2007-02-17 22:25:37 UTC
  • mto: This revision was merged to the branch mainline in revision 2298.
  • Revision ID: john@arbash-meinel.com-20070217222537-p0hxseinc3x84e96
Minor performance improvement, use None as signal rather than ROOT_ID
for xml5 inventories. Discover small bug in serialized text because of this.

Show diffs side-by-side

added added

removed removed

Lines of Context:
BRANCH.TODO
 
1
# This file is for listing TODOs for branches that are being worked on.
 
2
# It should ALWAYS be empty in the mainline or in integration branches.
 
3
# 
 
4
 
 
5
Security: it should be impossible, by default, to access files above the base of
 
6
the backing transport of the SmartServerRequestHandler.  Currently '..' and the
 
7
like are not vetted, however.
 
8
 
 
9
Similarly, the SmartWSGIApp should also be careful to disallow '..' and the
 
10
like.