| Age | Commit message (Collapse) | Author |
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11607 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Certain email addresses/URLs could trigger a catastrophic backtracking
situation, causing 100% CPU and server overload. If deliberately triggered, this
could be the basis of a denial-of-service attack.
This security vulnerability was disclosed in public, so we're skipping our
normal security release process to get the fix out as soon as possible.
This is a security related update. A full announcement will follow.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11605 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
r11478 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11479 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
correctly.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11476 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11453 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11452 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
thepointer and timo.
r11444 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11445 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
r11442 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11443 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
r11352 from trunk.
Also updated blocked and integrated svnmerge metadata.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11441 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
do this before.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11382 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Backported from trunk [11379]
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11380 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
specific revision we packaged as 1.0.3.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11372 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11367 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
release.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11360 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
messes up some pypi stuff. Backport of [11358] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11359 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
that could lead to the exposure of system files. Thanks to Gary Wilson for the patch.
This is a security-related backport of r11351. A full announcement, as well as a backport 0.96.X will be forthcoming.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11353 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11350 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11348 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
get_object_or_404. Thanks to rbonvall for the report.
Merge of r11344 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11347 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11342 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Merge of r11338 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11339 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
correct suffixes to some gender-varying words
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11336 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
significant commit diffs afterwards
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11335 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11332 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
hung up on 32/64 bit differences. Thanks to Richard Davies for the report.
Merge of r11328 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11329 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11323 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11317 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
prevent an encoding bug that occurs in some installations. Backport of [11285] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11286 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Backport of r11281 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11283 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Backport of r11265 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11282 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
have been formally deprecated. Thanks to Alex Gaynor for the draft text.
Merge of r11277 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11280 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to Ramiro Morales for the patch (an apologies for ommitting the credit from r11275)
Merge of r11275 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11279 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to rlaager for the report.
Merge of r11276 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11278 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
for the URLs documentation. Thanks to Ramiro Morales for the patch.
Merge of r11258 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11259 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11256 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
avoid references to mod_python and techniques that are not recommended or required for mod_wsgi. Thanks to Graham Dumpleton for the suggestion and guidance.
Merge of r11249 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11255 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
the testing docs. Thanks to gruszczy and timo.
Merge of r11248 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11254 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11246 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
queryset docs.
Merge of r11239 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11245 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
rather than a placeholder. Thanks to jcassee for the suggestion.
Merge of r11237 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11244 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
allow for the fact that it can be rendered using widgets other than a checkbox. Thanks to lygaret for the patch.
Merge of r11236 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11243 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
trouble counting to four. Thanks to msgre for the report.
Merge of r11235 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11242 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
validation. Thanks to Andrew Badr for the text.
Merge of r11234 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11241 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11230 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11226 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
docs. Thanks to thepointer for the report.
Merge of r11220 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11225 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
reporting. Thanks to seveas for the suggestion and draft text.
Merge of r11219 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11224 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to seveas for the report.
Merge of r11218 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11223 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks to seveas for the report.
Merge of r11217 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11222 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
m2m fields with an intermediate model. Thanks to J Clifford Dyer for the report and fix.
Merge of r11215 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11216 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|