django.git/tests/admin_widgets/tests.py, branch stable/5.2.x django http://cgit.adnoto.dev/django.git/atom?h=stable%2F5.2.x 2025-06-03T01:26:36Z [5.2.x] Fixed #36423 -- Prevented filter_horizontal buttons from intercepting form submission. 2025-06-03T01:26:36Z Blayze blayze@carstickers.com 2025-05-28T18:22:29Z urn:sha1:37e5cc6d89b4653f05a1a00af2eb2187c907c935 In the admin's filter_horizontal widget, optional action buttons like "Choose all", "Remove all", etc. were changed from `<a>` to `<button>` elements in #34619, but without specifying `type="button"`. As a result, when pressing Enter while focused on a form input, these buttons could be triggered and intercept form submission. Explicitly set `type="button"` on these control buttons to prevent them from acting as submit buttons. Thanks Antoliny Lee for the quick triage and review. Regression in 857b1048d53ebf5fc5581c110e85c212b81ca83a. Backport of 90429625a85f1f77dfea200c91bd2dabab57974f from main. [5.2.x] Fixed #36013 -- Removed use of IDNA-2003 in django.utils.html. 2025-01-23T09:40:58Z Mike Edmunds medmunds@gmail.com 2024-12-15T00:54:42Z urn:sha1:698d05c11c27d4ed5fd75194ac0edcf133bd7600 Removed obsolete and potentially problematic IDNA 2003 ("punycode") encoding of international domain names in smart_urlquote() and Urlizer, which are used (only) by AdminURLFieldWidget and the urlize/urlizetrunc template filters. Changed to use percent-encoded UTF-8, which defers IDNA details to the browser (like other URLs rendered by Django). Backport of 29ba75e6e57414f0e6f9528d08a520b8b931fb28 from main. Fixed #35940 -- Disabled SelectFilter add/remove buttons when appropriate. 2025-01-09T07:18:29Z Brock bsmick97@gmail.com 2024-12-02T14:51:03Z urn:sha1:8c118c0e00846091c261b97dbed9a5b89ceb79bf Fixed #35791 -- Updated icon button dimensions to 24x24 pixels. 2024-11-29T07:31:06Z Tainara Palmeira tainarapalmeirag@gmail.com 2024-11-15T15:19:23Z urn:sha1:86661f2449fb0903f72b3522c68e146934013377 This is to meet the WCAG 2.5.8 minimum size requirement. Co-authored-by: Eva Nanyonga <evewish@gmail.com> Fixed #34619 -- Associated FilteredSelectMultiple elements to their label and help text. 2024-11-20T12:23:18Z GappleBee irrationalmathematicspro7@gmail.com 2024-10-24T18:44:31Z urn:sha1:857b1048d53ebf5fc5581c110e85c212b81ca83a Fixed CVE-2024-41991 -- Prevented potential ReDoS in django.utils.html.urlize() and AdminURLFieldWidget. 2024-08-06T06:50:08Z Mariusz Felisiak felisiak.mariusz@gmail.com 2024-07-10T18:30:12Z urn:sha1:5f1757142febd95994caa1c0f64c1a0c161982c3 Thanks Seokchan Yoon for the report. Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> Fixed #35489 -- Fixed vertical alignment of raw_id_fields widget. 2024-08-02T06:56:54Z Vaarun Sinha 85062344+VaarunSinha@users.noreply.github.com 2024-07-05T15:20:10Z urn:sha1:54e8b4e5825eadf94ad715459f3aa60df389c8d4 Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> Fixed #34789 -- Prevented updateRelatedSelectsOptions from 2024-06-12T11:09:04Z Devin Cox dcox@surefyre.co 2024-06-12T09:35:12Z urn:sha1:719a42b589d7551fc84708044b9e984ce723c8a2 adding entries to filter_horizontal chosen box. Co-authored-by: yokeshwaran1 <yokesh440@yahoo.com> Fixed #35330 -- Fixed the update of related widgets when the referenced model is camel case named. 2024-04-03T01:00:25Z devin13cox 36718613+devin13cox@users.noreply.github.com 2024-04-03T01:00:25Z urn:sha1:8665cf03d79c4b6222514c5943ccf3863a19cf08 Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Fixed #35273 -- Fixed rendering AdminFileWidget's attributes. 2024-03-14T13:03:09Z Johannes Maron johannes@maron.family 2024-03-06T20:18:36Z urn:sha1:e69019555d683fd6a831f87cb09e3deb86e4e7c7 Regression in 8a6c0203c4e92908c2b26ba54feba4ce7e76d081.