tangentlabs/django-oscar-paypal — pull request #24 by codeinthehole (2013-06-13 13:18:42+00:00)
Title: Basket needs to be frozen while customer is at PayPal's site

At the moment, the library is vulnerable to basket manipulation while the customer is on the PayPal site, submitting payment information.