django.git/django/contrib/formtools/wizard.py, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2011-06-01T13:47:00Z Fixed #9200 -- Added new form wizard to formtools based on class based views. Many thanks to Stephan Jäkel, ddurham and ElliottM for their work. 2011-06-01T13:47:00Z Jannis Leidel jannis@leidel.info 2011-06-01T13:47:00Z urn:sha1:632dfa233839f8c76bd6b065b8420fe0ab96175a git-svn-id: http://code.djangoproject.com/svn/django/trunk@16307 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #11726 - FormWizard does sanity check on step number performed before dynamic steps can be inserted 2011-04-28T14:19:25Z Luke Plant L.Plant.98@cantab.net 2011-04-28T14:19:25Z urn:sha1:7b129a82b3418edba3e26fe654f303df184a3efc Thanks to Eric Friesen for the report and michalm/esper256 for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@16119 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Removed Django 1.2 compatibility fallback for form wizard hash 2011-03-30T17:34:49Z Luke Plant L.Plant.98@cantab.net 2011-03-30T17:34:49Z urn:sha1:fa4bbfcbfb4f693955f653bd06f384dd786e3c93 git-svn-id: http://code.djangoproject.com/svn/django/trunk@15951 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Removed a bunch of Python 2.4 workarounds now that we don't support it. Refs #15702 -- thanks to jonash for the patch. Splitting this over muliple commits to make it more manageable. 2011-03-28T01:40:43Z Adrian Holovaty adrian@holovaty.com 2011-03-28T01:40:43Z urn:sha1:a87be3554fc73a567b926ea51c13ea844b5113f8 git-svn-id: http://code.djangoproject.com/svn/django/trunk@15926 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #15075 - No longer possible to alter the form_list in FormWizard.process_step 2011-01-13T21:58:11Z Luke Plant L.Plant.98@cantab.net 2011-01-13T21:58:11Z urn:sha1:a6b9dbc57c39e2746f0ec70d9c7f3d4b93e0e1a6 Thanks to niels, stas for the report, and stas for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15196 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #14576 - FormWizard.done() method doesn't get passed the last form in the list 2010-11-16T14:37:00Z Luke Plant L.Plant.98@cantab.net 2010-11-16T14:37:00Z urn:sha1:b84838aef4de49c9567c98bd8a8d492e177e5e4f Thanks to cyberdelia for report and test, and steph for the initial patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14574 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed bug and test failure introducted in [14290] 2010-10-20T07:59:17Z Luke Plant L.Plant.98@cantab.net 2010-10-20T07:59:17Z urn:sha1:7d0d3b68d67810cd3b41c4ae5ccfd52de2e93913 Thanks Russell for alerting me. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14294 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #14498 - Forms passed to FormWizard.process_step are not guaranteed to have cleaned_data 2010-10-19T20:45:40Z Luke Plant L.Plant.98@cantab.net 2010-10-19T20:45:40Z urn:sha1:46c17654ed60ee43920406d61eae06a90d15af4d Thanks to stas for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14290 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #14445 - Use HMAC and constant-time comparison functions where needed. 2010-10-14T20:54:30Z Luke Plant L.Plant.98@cantab.net 2010-10-14T20:54:30Z urn:sha1:45c7f427ce830dd1b2f636fb9c244fda9201cadb All adhoc MAC applications have been updated to use HMAC, using SHA1 to generate unique keys for each application based on the SECRET_KEY, which is common practice for this situation. In all cases, backwards compatibility with existing hashes has been maintained, aiming to phase this out as per the normal deprecation process. In this way, under most normal circumstances the old hashes will have expired (e.g. by session expiration etc.) before they become invalid. In the case of the messages framework and the cookie backend, which was already using HMAC, there is the possibility of a backwards incompatibility if the SECRET_KEY is shorter than the default 50 bytes, but the low likelihood and low impact meant compatibility code was not worth it. All known instances where tokens/hashes were compared using simple string equality, which could potentially open timing based attacks, have also been fixed using a constant-time comparison function. There are no known practical attacks against the existing implementations, so these security improvements will not be backported. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14218 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #13951 -- Corrected docstring in formtools wizard. Thanks to suzaku for the report, and lrekucki for the patch. 2010-08-23T08:11:24Z Russell Keith-Magee russell@keith-magee.com 2010-08-23T08:11:24Z urn:sha1:3c99d0622957366867beaccb7d5806a8b23e2a36 git-svn-id: http://code.djangoproject.com/svn/django/trunk@13630 bcc190cf-cafb-0310-a4f2-bffc1f526a37