Add json_response_for().
Use json_response_for() in the easy cases.
Return a dict in tree_json() and serialize in the caller with json_response_for().
Use json_response_for() for jsonp, too.
fixed areaMode=all regression
When setting areaMode=all only the area of last series was actually filled
start filled area from y 0 instead of bottom
"backporting" #170 into 0.9.x
"backporting" #170 into 0.9.x updated docs
Guard against bad folder permissions when walking stats directory.
Update time series pathExpression when changing data so that those series work properly with functions using evaluateTarget (movingAverage, etc)
Fix Composer XSS
Merge branch '0.9.x' of https://github.com/graphite-project/graphite-web into 0.9.x
Merge pull request #320 from obfuscurity/0.9.x
Merge pull request #356 from mattus/0.9.x-walkfix

Guard against bad folder permissions when walking stats directory.
Django 1.5 compatibility updates:

Allow SECRET_KEY to be set and warn if not
Add new (and required) ALLOWED_HOSTS setting
Use alternate style manage.py which is the only supported style in 1.5
Merge pull request #351 from fasterize/fix_getPercentile

Fix `functions._getPercentile` by ignoring None values
Merge pull request #366 from  kovyrin/path-expression-fix into 0.9.x

Make sure functions modifying time series update their pathExpression
Messaging middleware required by admin site as of 1.4
Merge pull request #394 from mleinart/django15

Django 1.5 compatibility updates
Merge pull request #393 from hvnsweeting/master

Update carbon-daemons.rst