django.git/tests/auth_tests/test_forms.py, branch 5.0.10

[5.0.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03T12:33:01Z

On successful submission of a password reset request, an email is sent to the accounts known to the system. If sending this email fails (due to email backend misconfiguration, service provider outage, network issues, etc.), an attacker might exploit this by detecting which password reset requests succeed and which ones generate a 500 error response. Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam Johnson, and Sarah Boyce for the reviews.

[5.0.x] Applied Black's 2024 stable style.

2024-01-26T11:55:56Z

https://github.com/psf/black/releases/tag/24.1.0 Backport of 305757aec19c9d5111e4d76095ae0acd66163e4b from main

[5.0.x] Fixed CVE-2023-46695 -- Fixed potential DoS in UsernameField on Windows.

2023-11-01T05:18:00Z

Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.

Fixed #34438 -- Reallowed extending UserCreationForm.

2023-03-28T09:33:20Z

Regression in 298d02a77a69321af8c0023df3250663e9d1362d.

Fixed #25617 -- Added case-insensitive unique username validation in UserCreationForm.

2022-12-29T08:42:22Z

Co-Authored-By: Neven Mundar

Fixed #34187 -- Made UserCreationForm save many-to-many fields.

2022-11-29T04:56:53Z

Fixed #34066 -- Fixed link to password reset view in UserChangeForm.password's help text when using to_field.

2022-10-27T07:23:34Z

Co-Authored-By: David Sanders Co-Authored-By: Mariusz Felisiak

Completed test coverage for contrib.auth.forms.

2022-10-26T10:52:18Z

Fixed ReadOnlyPasswordHashWidget's template for RTL languages.

2022-09-01T19:20:15Z

Refs #33476 -- Refactored code to strictly match 88 characters line length.

2022-02-07T19:37:05Z