django.git/django/db/models/sql/query.py, branch 4.1rc1 django http://cgit.adnoto.dev/django.git/atom?h=4.1rc1 2022-05-13T04:56:20Z Fixed typo in Query.clone()'s docstring. 2022-05-13T04:56:20Z 非法操作 hjlarry@163.com 2022-05-13T03:16:15Z urn:sha1:19dc3f0f96908898fd62c62517e935331ea29628 Fixed #33655 -- Removed unnecessary constant from GROUP BY clause for QuerySet.exists(). 2022-04-26T04:19:18Z marcperrinoptel marc.perrin@optelgroup.com 2022-04-25T19:17:33Z urn:sha1:4282fd468fd11a7db79307ba1c33a4960c299e4a Fixed #24296 -- Made QuerySet.exists() clear selected columns for not sliced distinct querysets. 2022-04-12T06:18:22Z mgaligniana marcelogaligniana@gmail.com 2022-04-11T12:25:26Z urn:sha1:0ad5316f22eabe8fa8b22dc92e61170cfacc3c78 Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL. 2022-04-11T06:59:58Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T11:48:47Z urn:sha1:6723a26e59b0b5429a0c5873941e01a2e1bdbb81 Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases. 2022-04-11T06:59:33Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T06:10:22Z urn:sha1:93cae5cb2f9a4ef1514cf1a41f714fef08005200 Thanks Splunk team: Preston Elder, Jacob Davis, Jacob Moore, Matt Hanson, David Briggs, and a security researcher: Danylo Dmytriiev (DDV_UA) for the report. Removed unnecessary Query.get_loaded_field_names_cb() and Query.deferred_to_data()'s callback argument. 2022-03-31T08:54:59Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-31T05:40:32Z urn:sha1:d7eb500338e11999962e618f0701e62af511d8e9 Refs #24020 -- Removed redundant Query.get_loaded_field_names(). 2022-03-31T08:54:59Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-31T04:35:01Z urn:sha1:0a3c6fe6b2c43b0bb90cb9df3840dcb70edc22a1 get_loaded_field_names() is no longer called in multiple places (see 0c7633178fa9410f102e4708cef979b873bccb76) and it's redundant with SQLCompiler.deferred_to_columns(). Fixed #33598 -- Reverted "Removed unnecessary reuse_with_filtered_relation argument from Query methods." 2022-03-30T05:31:56Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-03-30T05:31:56Z urn:sha1:fac662f4798f7e4e0ed9be6b4fb4a87a80810a68 Thanks lind-marcus for the report. This reverts commit 0c71e0f9cfa714a22297ad31dd5613ee548db379. Regression in 0c71e0f9cfa714a22297ad31dd5613ee548db379. Refs #30581 -- Allowed sql.Query to be used without model. 2022-03-16T08:33:16Z Gagaro gagaro42@gmail.com 2022-01-31T14:51:38Z urn:sha1:bf524d229f3c1008f41450e2750b85395aa75fe6 Refs #27624 -- Optimized Query.clone() a bit. 2022-03-03T07:38:03Z Keryn Knight keryn@kerynknight.com 2021-11-24T11:58:13Z urn:sha1:24cc51f8fb62102a67d16cef1e0748d45afe25f4