chango.git, branch 1.8.11 django http://cgit.adnoto.dev/chango.git/atom?h=1.8.11 2016-03-05T14:35:22Z [1.8.x] Bumped version for 1.8.11 release. 2016-03-05T14:35:22Z Tim Graham timograham@gmail.com 2016-03-05T14:35:22Z urn:sha1:a98e00f06834e5fdc945c2aca2c3498efb06ac7d [1.8.x] Added safety to URL decoding in is_safe_url() on Python 2 2016-03-04T22:39:46Z Claude Paroz claude@2xlibre.net 2016-03-04T22:33:35Z urn:sha1:beb392b85e71fdd41209d323126181d74090fecb The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef. Backport of 552f03869e from master. [1.8.x] Fixed #26308 -- Prevented crash with binary URLs in is_safe_url() 2016-03-04T20:16:51Z Claude Paroz claude@2xlibre.net 2016-03-04T14:41:52Z urn:sha1:28bed24f552aa01e5b69902493f5ee2e06514522 This fixes a regression introduced by c5544d28923. Thanks John Eskew for the reporti and Tim Graham for the review. Backport of ada7a4aef from master. [1.8.x] Added stub release notes for 1.8.11. 2016-03-04T14:48:11Z Tim Graham timograham@gmail.com 2016-03-04T14:47:43Z urn:sha1:f294b3833bb4f6af51ea3a49598e44787990f6a7 Backport of 2f0c785a4c2353a3035ba6022cec5e25fb9d569b from master [1.8.x] Fixed #26321 -- Added missing "for_save" parameter in expressions example. 2016-03-04T00:38:06Z Tim Graham timograham@gmail.com 2016-03-04T00:34:31Z urn:sha1:8b891cf3862658b6b297063b3efeb81f1985cda3 Thanks tomaszn for the patch. Backport of de8a11ba18d5902c668d4db47c38c9c6bdf9c1da from master [1.8.x] Fixed #26309 -- Documented that login URL settings no longer support dotted paths. 2016-03-03T12:49:06Z Alasdair Nicol alasdair@thenicols.net 2016-03-02T15:48:13Z urn:sha1:e4be3c80a1dc948adaecaab0d32e7537c8f7e011 Backport of 2404d209a5e8c4573927e14587735562b79e13ed from master [1.8.x] Fixed typo in 1.8.10 release date. 2016-03-02T12:10:21Z Dmitry Dygalo dadygalo@gmail.com 2016-03-02T07:15:53Z urn:sha1:6a9bb1447c6f11e05c02e5e29be542a68a579824 Backport of 5155c2b4587629c4bc77a11846e5b9d3ba5a43ef from master [1.8.x] Added CVE-2016-2512/2513 to security release archive. 2016-03-01T17:36:20Z Tim Graham timograham@gmail.com 2016-03-01T17:32:42Z urn:sha1:640c99e8b30c97533bc23a7742bd5c9c74353256 Backport of 24fc9352183c449a8b11d1c7b442e70aa61a8800 from master [1.8.x] Post-release version bump. 2016-03-01T17:22:54Z Tim Graham timograham@gmail.com 2016-03-01T17:22:54Z urn:sha1:8e8f14edacecb24755cf5bac443e63d9988957e3 [1.8.x] Bumped version for 1.8.10 release. 2016-03-01T16:39:42Z Tim Graham timograham@gmail.com 2016-03-01T16:39:22Z urn:sha1:ef08d8cf9e0d1ca62c6c291575d9e306cb09afcb