contrib.auth.mixins is based on our work with django-braces.

Following discussion on django-developers:
https://groups.google.com/d/topic/django-developers/IkRgMxTTzPQ/discussion

Due to the URL encoding applied by the tag for all parameters that might be
partly controllable by an end-user, there are no XSS/security problems
caused by this bug, only invalid HTML.

"As above" refers to a spatial orientation, which might
not be present, for example when the two password fields
are shown next to each other.

Only require GDAL if contained geometries need coordinate transformations.
Thanks drepo for the report and Tim Graham for the review.

Thanks Carl Meyer for review.

The whitespace added in 1101467c
broke the initial comparison.

The ticket was already fixed by
b68212f5.

Thanks to Beauhurst for commissioning the work on this ticket.

The test results were dependent on the order in which the
tests were run.

Thanks Flavio Curella and Berker Peksag for the initial patch.

Thanks Tim Graham for the review and kezabelle for the report.

Thanks Keryn Knight and Tim Graham for the reviews.