chango.git, branch 1.8b2 django http://cgit.adnoto.dev/chango.git/atom?h=1.8b2 2015-03-09T14:22:51Z [1.8.x] Bumped version to 1.8 beta 2. 2015-03-09T14:22:51Z Tim Graham timograham@gmail.com 2015-03-09T14:22:51Z urn:sha1:449d1effb81152e54f482784cf7febe965007096 [1.8.x] Refs #24461 -- Added test/release notes for XSS issue in ModelAdmin.readonly_fields 2015-03-09T14:15:12Z Baptiste Mispelon bmispelon@gmail.com 2015-03-08T10:50:32Z urn:sha1:35d68e8e766217924375e1a91533fee50159291c This issue was fixed by refs #24464. [1.8.x] Clarified an item in 1.7.6 release notes. 2015-03-09T14:11:44Z Tim Graham timograham@gmail.com 2015-03-09T14:06:18Z urn:sha1:980d604bf237b0e09a1c7754b74d1bb2bfed0b35 Backport of 300fdbbebba45cb4e7f32edc524171019d9bce80 from master [1.8.x] Fixed #24464 -- Made built-in HTML template filter functions escape their input by default. 2015-03-09T13:31:07Z Erik Romijn eromijn@solidlinks.nl 2015-03-08T11:34:55Z urn:sha1:d16e4e1d6f95e6f46bff53cc4fd0ab398b8e5059 This may cause some backwards compatibility issues, but may also resolve security issues in third party projects that fail to heed warnings in our documentation. Thanks Markus Holtermann for help with tests and docs. Backport of fa350e2f303572ee8f9a8302dda45a12288d3d95 from master [1.8.x] Fixed #24171 -- Fixed failure with complex aggregate query and expressions 2015-03-09T11:51:05Z Anssi Kääriäinen anssi.kaariainen@thl.fi 2015-03-04T12:56:20Z urn:sha1:3a0fe942ddf56ddcf4b958147f3914fe2788db30 The query used a construct of qs.annotate().values().aggregate() where the first annotate used an F-object reference and the values() and aggregate() calls referenced that F-object. Also made sure the inner query's select clause is as simple as possible, and made sure .values().distinct().aggreate() works correctly. Backport of fb146193c49e4c683dc8da39d9b7c479375fdb57 from master [1.8.x] Fixed typo in docs/howto/custom-template-tags.txt 2015-03-09T11:06:32Z Tim Graham timograham@gmail.com 2015-03-09T11:05:49Z urn:sha1:83269b2935fd0223def49626c2a8dcea821e93c3 Backport of 63f2dd4ad774d39fc7bbe05492d30efc45e4e7a9 from master [1.8.x] Fixed #21661 -- Expanded authentication views documentation 2015-03-08T19:40:33Z Rik gitaarik@gmail.com 2015-03-08T18:37:22Z urn:sha1:930fc4db7b8c4f7eeca5ce55fb7b7f8529b5a52a Backport of eb9b7abb833a6d317e355265552d47e0d8f24af8 from master. [1.8.x] Prevented some tests from writing in the CWD. 2015-03-07T15:40:17Z Aymeric Augustin aymeric.augustin@m4x.org 2015-02-21T20:09:30Z urn:sha1:311b880fa96ecafb4d52417505548e4a5822cc96 Backport of 90b069c33f3f8785a7d068a2032f130d2dbb0c75 from master [1.8.x] Fixed #24447 -- Made migrations add FK constraints for existing columns 2015-03-07T13:15:27Z Jean-Louis Fuchs ganwell@fangorn.ch 2015-03-05T12:41:15Z urn:sha1:1ae2df6bfc3afadd7edb29a5887711f70cdb52c6 When altering from e.g. an IntegerField to a ForeignKey, Django didn't add a constraint. Backport of f4f0060feaee6bbd76a0d575487682bc541111e4 from master [1.8.x] Fixed urlize regression with entities in query strings 2015-03-06T21:22:51Z Claude Paroz claude@2xlibre.net 2015-03-06T20:56:11Z urn:sha1:ac07890f959c467b3fc9c6dd6d36aafc2eff1fcc Refs #22267. Thanks Shai Berger for spotting the issue and Tim Graham for the initial patch. Backport of ec808e807 from master.