Thanks Josh Smeaton for help on the tests.

Thanks claudep for the patch.

Thanks Baptiste Mispelon for report and review.

Thanks tkrapp for the report and Tim Graham for the review.

Also fixed missing django/contrib/auth/common-passwords.txt.gz file
and added JavaScript tests.

Thanks Gwildor Sok for the report and Tim Graham for the review.

contrib.auth.mixins is based on our work with django-braces.

Following discussion on django-developers:
https://groups.google.com/d/topic/django-developers/IkRgMxTTzPQ/discussion

Due to the URL encoding applied by the tag for all parameters that might be
partly controllable by an end-user, there are no XSS/security problems
caused by this bug, only invalid HTML.

"As above" refers to a spatial orientation, which might
not be present, for example when the two password fields
are shown next to each other.

Only require GDAL if contained geometries need coordinate transformations.
Thanks drepo for the report and Tim Graham for the review.

Thanks Carl Meyer for review.

The whitespace added in 1101467c
broke the initial comparison.

The ticket was already fixed by
b68212f5.

Thanks to Beauhurst for commissioning the work on this ticket.

The test results were dependent on the order in which the
tests were run.