| Age | Commit message (Collapse) | Author |
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11606 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Certain email addresses/URLs could trigger a catastrophic backtracking
situation, causing 100% CPU and server overload. If deliberately triggered, this
could be the basis of a denial-of-service attack.
This security vulnerability was disclosed in public, so we're skipping our
normal security release process to get the fix out as soon as possible.
This is a security related update. A full announcement will follow.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11604 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
that users are shown as a raw id list. Thanks to James Bennett for the report and patch.
Backport of r11601 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11602 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks to andymckay for the report and jpaulett for the patch.
Backport for [11596] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11597 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
arguments to limit_choices_to. Since the correct reference involves undocumented ORM internals, this simply removes the reference entirely in favor of publicly-documented use of Q objects. Backport of [11591] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11592 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Backport of [11588] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11589 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11585 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Merge of r11580 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11584 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Merge of r11579 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11583 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
parentheses. Thanks to Brent Hagany for the report.
Merge of r11581 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11582 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
point.
Backport of r11577 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11578 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11576 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Backport of r11527 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11575 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
localflavor. Thanks to iapain for the report and patch.
Merge of r11552 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11574 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
test. Thanks to shields@msrl.com for the report, and apologies to Admiral Hopper for the error.
Merge of r11551 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11573 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to Adam Rimon for the fix.
Merge of r11550 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11572 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
usage. Thanks to ffualo for the suggestion.
Merge of r11549 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11571 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks to severian for the suggestion.
Merge of r11548 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11570 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
decorators. Thanks to timo for the patch.
Merge of r11547 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11569 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Brett Cannon for the report.
Merge of r11546 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11568 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to liling for the report, and gsong for the patch.
Merge of r11545 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11567 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
the login_required auth decorator. Thanks to trigeek38 for the suggestion, and SmileyChris for the draft.
Merge of r11544 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11566 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Merge of r11543 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11565 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Merge of r11542 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11564 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
field lookups. Thanks to Richard D. Worth for the suggestion, and Steve Holden for the text.
Merge of r11541 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11563 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
signals reference. Thanks to tyson for the suggestion.
Merge of r11540 and r11554 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11562 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to Shannon Bradshaw for the report.
Merge of r11539 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11561 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
update the year where that isn't required. Thanks to tommstein for the report.
Merge of r11538 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11560 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks to agabel for the report.
Merge of r11537 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11559 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
request/response docs. Thanks to Tommstein for the report.
Merge of r11536 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11558 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Merge of r11535 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11557 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
for the patch.
Merge of r11534 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11556 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
the patch.
Merge of r11533 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11555 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
documentation. Thanks to tsaylor for the report.
Merge of r11531 and r11532 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11553 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
headers provided by the mod_python handler. Thanks to Nowell Strite and Tareque Hossain for the report and fix.
Merge of r11528 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11530 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11529 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Backport of r11523 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11524 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11501 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.1.X@11500 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks Ramiro.
Refs #11477 - that ticket should have been marked a duplicate of #11554
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11499 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks for report and initial patch, matehat.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11498 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks Tomasz Elendt.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11497 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11496 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
dozen or so seconds off the test suite run time.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11495 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
shaves 30 seconds (5%) off the run time of the test suite.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11494 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks vvd
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11493 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks steveire
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11492 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks Rupe
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11491 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks timo.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11490 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks rlaager(at)wiktel.com
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11489 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|