On Tuesday 14 Oct 2014 15:38:31 you wrote: > Well spotted. This is a trivial fix, let's land this as part of 1.7 if > we can.
Let's not. If it's in 1.7 it needs to be pushed to all other releases at the same time because of disclosure.
We can safely SRU this as a security fix after the release.
On Tuesday 14 Oct 2014 15:38:31 you wrote:
> Well spotted. This is a trivial fix, let's land this as part of 1.7 if
> we can.
Let's not. If it's in 1.7 it needs to be pushed to all other releases at the
same time because of disclosure.
We can safely SRU this as a security fix after the release.