django.git/docs/releases/2.1.5.txt, branch main

Fixed #30070, CVE-2019-3498 -- Fixed content spoofing possiblity in the default 404 page.

2019-01-04T02:21:55Z

Co-Authored-By: Tim Graham

Fixed #30050 -- Fixed InlineModelAdmin.has_change_permission() called with non-None obj during add.

2019-01-01T14:42:14Z

Thanks andreage for the report and suggested fix.

Refs #30015 -- Added 2.1.5 release note and removed 'we' in comments.

2018-12-21T02:30:13Z

Fixed #30023 -- Prevented SQLite schema alterations while foreign key checks are enabled.

2018-12-15T23:51:59Z

Prior to this change foreign key constraint references could be left pointing at tables dropped during operations simulating unsupported table alterations because of an unexpected failure to disable foreign key constraint checks. SQLite3 does not allow disabling such checks while in a transaction so they must be disabled beforehand. Thanks ezaquarii for the report and Carlton and Tim for the review.

Fixed #29182 -- Fixed schema table alteration on SQLite 3.26+.

2018-12-07T18:32:37Z

SQLite 3.26 repoints foreign key constraints on table renames even when foreign_keys pragma is off which breaks every operation that requires a table rebuild to simulate unsupported ALTER TABLE statements. The newly introduced legacy_alter_table pragma disables this behavior and restores the previous schema editor assumptions. Thanks Florian Apolloner, Christoph Trassl, Chris Lamb for the report and troubleshooting assistance.

Fixed #30013 -- Fixed DatabaseOperations.last_executed_query() with mysqlclient 1.3.14+.

2018-12-05T19:46:23Z

Added stub release notes for 2.1.5 release.

2018-12-04T15:21:38Z