[1.3.x] Added ALLOWED_HOSTS setting for HTTP host header validation.

This is a security fix; disclosure and advisory coming shortly.
[1.3.x] Restrict the XML deserializer to prevent network and entity-expansion DoS attacks.

This is a security fix. Disclosure and advisory coming shortly.
[1.3.x] Checked object permissions on admin history view.

This is a security fix. Disclosure and advisory coming shortly.

Patch by Russell Keith-Magee.
[1.3.x] Added a default limit to the maximum number of forms in a formset.

This is a security fix. Disclosure and advisory coming shortly.
[1.3.x] Update 1.3.6 release notes for all security fixes.
[1.3.x] Bump version numbers for security release.
[1.3.x] Don't characterize XML vulnerabilities as DoS-only.
[1.3.x] Fixed #19857 -- Fixed broken docs link in project template.

Backport of 4cdfb24c98 from 1.4.x.
[1.4.x] Note that ALLOWED_HOSTS default changes in Django 1.5.
[1.3.x] Bump version numbers to roll a clean package.
[1.3.x] Bump version to no longer claim to be 1.3.7 final.
[1.3.x] Added missing release notes for older versions of Django

Backport of 3f6cc33cff from master
Fixed bad link
Merge pull request #2227 from jheasly/patch-1

Fixed bad link
[1.3.x] Fixed our Sphinx extension to work with latest Sphinx

This is pretty hacky, but there doesn't seem to be a nice way to fix it,
since we can't call the base method - we are deliberately overriding it in
order to not call the base method, which adds an unwanted 'border=1' to the
HTML.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@16223 bcc190cf-cafb-0310-a4f2-bffc1f526a37

Backport of e127e17b49 from master
[1.3.x] Added a bugfix in docutils 0.11 -- docs will now build properly.

Backport of a3a59a3197 from master
[1.3.x] Fixed djangodocs Sphinx extension to work with latest Sphinx

git-svn-id: http://code.djangoproject.com/svn/django/trunk@16231 bcc190cf-cafb-0310-a4f2-bffc1f526a37

Backport of 66fd824ee0 from master
[1.3.x] Fixed #21869 -- Fixed docs building with Sphinx 1.2.1.

Thanks tragiclifestories for the report.

Backport of e1d18b9d2e from master