django.git/tests/regressiontests/urlpatterns_reverse/tests.py, branch 1.4.15 django http://cgit.adnoto.dev/django.git/atom?h=1.4.15 2014-08-11T13:04:23Z [1.4.x] Prevented reverse() from generating URLs pointing to other hosts. 2014-08-11T13:04:23Z Florian Apolloner florian@apolloner.eu 2014-07-17T19:59:28Z urn:sha1:c2fe73133b62a1d9e8f7a6b43966570b14618d7e This is a security fix. Disclosure following shortly. [1.4.x] Fixed a remote code execution vulnerabilty in URL reversing. 2014-04-21T22:31:44Z Tim Graham timograham@gmail.com 2014-04-20T17:35:24Z urn:sha1:c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535 Thanks Benjamin Bach for the report and initial patch. This is a security fix; disclosure to follow shortly. Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master Fixed #17492 -- Allow reversal of named backreferences. Thanks nate_b 2012-01-03T22:49:13Z Chris Beaven smileychris@gmail.com 2012-01-03T22:49:13Z urn:sha1:e52c52ea13be6002ebfa14b7e17ff3004faaf737 git-svn-id: http://code.djangoproject.com/svn/django/trunk@17336 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #15900 -- Calls to reverse with nested namespaced urls are escaped properly and capture parameters as expected. 2011-12-22T23:03:48Z Gabriel Hurley gabehr@gmail.com 2011-12-22T23:03:48Z urn:sha1:a0721a30178d621501756db543258bc2d527af21 Thanks to teolicy for the report, and dmclain for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@17251 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixes #17173 -- Added some extra regression tests for reversing namespaced urls with special characters 2011-11-07T01:09:13Z Chris Beaven smileychris@gmail.com 2011-11-07T01:09:13Z urn:sha1:b745fc0f4b43280e5c5e10a52b3f3feaf3b58c2b The actual code was already fixed between 1.3.1 and trunk, but more thorough tests are always a good thing. Thanks for the patch, Yann Kaiser. git-svn-id: http://code.djangoproject.com/svn/django/trunk@17075 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Convert the remainder of the relative imports in the tests to be absolute imports. 2011-10-13T21:34:56Z Alex Gaynor alex.gaynor@gmail.com 2011-10-13T21:34:56Z urn:sha1:8c0eefd066aa0e5bfe8c1006d055be8e2ad69a2b git-svn-id: http://code.djangoproject.com/svn/django/trunk@16981 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #14503 -- Unified multiple implementations of test cases assert* methods that verify a given exception is raised by a callable throughout the Django test suite. 2011-08-13T00:42:08Z Ramiro Morales cramm0@gmail.com 2011-08-13T00:42:08Z urn:sha1:326949e444bcdde966d2421e2fb8bd8c87c65941 Replaced them with a new assertRaisesMessage method of a new SimpleTestCase, a lightweight subclass of unittest.TestCase. Both are also available for usage in user tests. git-svn-id: http://code.djangoproject.com/svn/django/trunk@16610 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #11559 -- Fixed the URL resolver to be able to handle captured parameters in parent URLconfs when also using namespaces. Thanks, cwb, ungenio and hvdklauw. 2011-08-12T14:15:50Z Jannis Leidel jannis@leidel.info 2011-08-12T14:15:50Z urn:sha1:02dcbe33171851bb8b658965a96460a458bc09a8 git-svn-id: http://code.djangoproject.com/svn/django/trunk@16608 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #16225 -- Removed unused imports. Many thanks to Aymeric Augustin for the work on the patch and Alex for reviewing. 2011-07-13T09:35:51Z Jannis Leidel jannis@leidel.info 2011-07-13T09:35:51Z urn:sha1:24f4764a48e4141923a78c8820e4cd7b411ec0fc git-svn-id: http://code.djangoproject.com/svn/django/trunk@16539 bcc190cf-cafb-0310-a4f2-bffc1f526a37 Fixed #10802 -- Handle ImportErrors and AttributeErrors gracefully when raised by the URL resolver system during startup. Many thanks, IonelMaries and Bas Peschier. 2011-06-16T16:41:14Z Jannis Leidel jannis@leidel.info 2011-06-16T16:41:14Z urn:sha1:b4cdf4d111e2a536abddeb38d029e71bb0d41ddb git-svn-id: http://code.djangoproject.com/svn/django/trunk@16420 bcc190cf-cafb-0310-a4f2-bffc1f526a37