django.git/docs/topics/serialization.txt, branch 4.2.29

[4.2.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation in XML serializer.

2025-12-02T12:44:40Z

Previously, `getInnerText()` recursively used `list.extend()` on strings, which added each character from child nodes as a separate list element. On deeply nested XML content, this caused the overall deserialization work to grow quadratically with input size, potentially allowing disproportionate CPU consumption for crafted XML. The fix separates collection of inner texts from joining them, so that each subtree is joined only once, reducing the complexity to linear in the size of the input. These changes also include a mitigation for a xml.dom.minidom performance issue. Thanks Seokchan Yoon (https://ch4n3.kr/) for report. Co-authored-by: Jacob Walls Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 50efb718b31333051bc2dcb06911b8fa1358c98c from main.

[4.2.x] Fixed #34140 -- Reformatted code blocks in docs with blacken-docs.

2023-03-01T12:39:03Z

[4.2.x] Refs #34140 -- Corrected rst code-block and various formatting issues in docs.

2023-02-28T11:54:33Z

Backport of ba755ca13123d2691a0926ddb64e5d0a2906a880 from main

[4.2.x] Refs #34140 -- Applied rst code-block to non-Python examples.

2023-02-10T20:12:06Z

Thanks to J.V. Zammit, Paolo Melchiorre, and Mariusz Felisiak for reviews. Backport of 534ac4829764f317cf2fbc4a18354fcc998c1425 from main.

[4.2.x] Fixed #34311 -- Updated serialization docs from unique_together to UniqueConstraint.

2023-02-09T04:56:31Z

Backport of 292aacaf6c3d6956ca2c51c41e36dbf425389346 from main

Refs #30947 -- Changed tuples to lists where appropriate.

2022-08-30T07:57:17Z

Updated example of YAML serialization format in docs.

2021-12-28T11:44:41Z

Removed versionadded/changed annotations for 3.2.

2021-09-20T19:23:01Z

Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS.

2021-05-17T07:46:09Z

Removed versionadded/changed annotations for 3.1.

2021-01-14T16:50:04Z