summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-11-06[1.4.x] Bump version info and add release notes for 1.4.10.1.4.10James Bennett
2013-11-02Fixed #21362 -- Restored Python 2.5 compatibility.Florian Apolloner
2013-11-01Merge pull request #1837 from loic/django14Aymeric Augustin
Fixed SyntaxError on Python 2.5 caused by a @unittest.skipIf class decoration.
2013-11-01Fixed SyntaxError on Python 2.5 caused by a @unittest.skipIf class decoration.Loic Bistuer
2013-10-25[1.4.x] Fixed typo in docs/releases/1.4.9.txt.Paolo Melchiorre
Backport of 3b0293370a from master
2013-10-25[1.4.x] Bump version post-release.Tim Graham
2013-10-24[1.4.x] Bump everything for 1.4.9 bugfix release.1.4.9James Bennett
2013-10-23[1.4.x] Bumped release date for 1.5.5 & 1.4.9.Tim Graham
Backport of 4ce5c119b5 from master
2013-10-23Fixed #13245: Explained Oracle's behavior w.r.t db_tableShai Berger
and how to prevent table-name truncation Thanks russellm & timo for discussion, and timo for review. Backported from master 317040a73b77be8f8210801793b2ce6d1a69301e
2013-10-22[1.4.x] Added 1.4.9 release notesTim Graham
Backport of 2eb8f15516 from master
2013-10-21[1.4.x] Fixed #21253 -- PBKDF2 with cached HMAC keyFlorian Apolloner
This gives a 2x speed increase compared to the existing implementation. Thanks to Steve Thomas for the initial patch and Tim Graham for finishing it. Backport of 1e4f53a6eb8d1816e51eb8bd8f95e704f6b89ead from master.
2013-10-13[1.4.x] Fixed #21256 -- Error in datetime_safe.datetime.combine.Aymeric Augustin
Backport of d9b6fb8 from master
2013-10-09[1.4.x] Fixed #21248 -- Skipped test_bcrypt if no py-bcrypt foundAnssi Kääriäinen
Pre 1.6 Django worked only with py-bcrypt, not with bcrypt. Skipped test_bcrypt when using bcrypt to avoid false positives. Backpatch of 9f8a36eb20895d9e542820d5190bfa77ad1b85d9 from stable/1.5.x.
2013-09-24[1.4.x] Fixed #21138 -- Increased the performance of our PBKDF2 implementation.Florian Apolloner
Thanks go to Michael Gebetsroither for pointing out this issue and help on the patch. Backport of 68540fe4df44492571bc610a0a043d3d02b3d320 from master.
2013-09-24Revert "[1.4.x] Ensure that passwords are never long enough for a DoS."Florian Apolloner
This reverts commit 3f3d887a6844ec2db743fee64c9e53e04d39a368. This fix is no longer necessary, our pbkdf2 (see next commit) implementation no longer rehashes the password every iteration.
2013-09-15[1.4.x] Cleaned up 1.4.8 release notesTim Graham
Backport of 8d29005524 from master
2013-09-15[1.4.x] Bump version post-release.Tim Graham
2013-09-15[1.4.x] Fixed geos test to prevent random failureClaude Paroz
Points in the test fixtures have 20 as max coordinate. Backport of 87854b0bdf354059f949350a4d63a0ed071d564c from master.
2013-09-15[1.4.x] Removed usage of b"" string syntax for Python 2.5 compatibility.1.4.8Russell Keith-Magee
Refs commit 3f3d887a6844ec2db743fee64c9e53e04d39a368.
2013-09-14[1.4.x] Add release notes and bump version numbers for 1.4.8 security release.James Bennett
2013-09-15[1.4.x] Ensure that passwords are never long enough for a DoS.Russell Keith-Magee
* Limit the password length to 4096 bytes * Password hashers will raise a ValueError * django.contrib.auth forms will fail validation * Document in release notes that this is a backwards incompatible change Thanks to Josh Wright for the report, and Donald Stufft for the patch. This is a security fix; disclosure to follow shortly. Backport of aae5a96d5754ad34e48b7f673ef2411a3bbc1015 from master.
2013-09-13Fixed #18923 -- Corrected usage of sensitive_post_parameters in contrib.authTim Graham
Thanks Collin Anderson for the report. Backport of 425d076d0c from master
2013-09-11[1.4.x] Fixed #20887 -- Added a warning to GzipMiddleware in light of BREACH.Tim Graham
Thanks EvilDMP for the report and Russell Keith-Magee for the draft text. Backport of da843e7dba from master
2013-09-11Merge pull request #1616 from loic/fix1.4Florian Apolloner
Fixed failing test introduced by 87d2750b39.
2013-09-11[1.4.x] Bump version post-release.Tim Graham
2013-09-11Fixed failing test introduced by 87d2750b39.Loic Bistuer
The {% ssi %} tag in Django 1.4 doesn't support spaces in its argument. Skip the test if run from a location that contains a space.
2013-09-10[1.4.x] Bump version numbers for 1.4.7 security release.1.4.7James Bennett
2013-09-10Added 1.4.7 release notesTim Graham
Backport of baec6a26dd from master
2013-09-10[1.4.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative ↵Tim Graham
paths. Thanks Rainer Koirikivi for the report and draft patch. This is a security fix; disclosure to follow shortly. Backport of 7fe5b656c9 from master
2013-09-09[1.4.x] Fixed #20707 -- Added explicit quota assignment to Oracle test userСадовский Николай
To enable testing on Oracle 12c
2013-08-18[1.4.x] Fixed #20907 - Test failure on OracleShai Berger
Backport of the Oracle-specific part of commit a18e43c5bb8cb7c82 from master. This commit made get_indexes more consistent across backends. Thanks Tim Graham for pointer to the commit, akaariai and ikelly for the original commit.
2013-08-17[1.4.x] Fixed #20904: Test failure on OracleShai Berger
Just skip the failing test, the failure isn't really relevant; also, both the test and the reason for its failure were removed in 1.5. Thanks Tim Graham for advice on 1.5.
2013-08-16[1.4.x] Fixed #20906 -- Fixed a dependence on set-ordering in testsLuke Plant
Backport of 1ae64e96c1 from master
2013-08-16[1.4.x] Fixed #20905 -- Fixed an Oracle-specific test case failureAnssi Kääriäinen
Made a test checking ORM-generated query string case-insensitive. Backport of ee0a7c741e from master
2013-08-13Fixed regression in validation tests since example.com is available via ↵Florian Apolloner
https now.
2013-08-13Bump version post-release.Jacob Kaplan-Moss
2013-08-13[1.4.x] Removed 1.5.2 release notesTim Graham
2013-08-13Stole the Makefile for building packages from master.Jacob Kaplan-Moss
2013-08-13Added 1.4.6/1.5.2 release notes.1.4.6Tim Graham
2013-08-13Bumped version numbers for 1.4.6.Jacob Kaplan-Moss
2013-08-13Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S.Jacob Kaplan-Moss
This is a security fix; disclosure to follow shortly.
2013-08-12[1.4.x] Added missing release notes for older versions of DjangoTim Graham
Backport of 3f6cc33cff from master
2013-07-31[1.4.x] Added a bugfix in docutils 0.11 -- docs will now build properly.Tim Graham
Backport of a3a59a3197 from master
2013-07-31[1.4.x] Fixed #20779 -- Documented AdminSite.app_index_template; refs #8498.SusanTan
Thanks CollinAnderson for the report. Backport of 7de35a9ef3 from master
2013-07-25[1.4.x] Fixed #18315 -- Documented QueryDict.popitem and QueryDict.popmark hellewell
Thanks gcbirzan for the report. Backport of 8c9240222f from master
2013-07-25[1.4.x] Fixed #20792 -- Corrected DISALLOWED_USER_AGENTS docs.Brenton Cleeland
Thanks simonb for the report. Backport of dab52d99fc from master
2013-07-18[1.4.x] Atom specification URL updatedMatt Deacalion Stevens
Changed to the URL of the official RFC for Atom, since Atomenabled.org is just a holding page. Backport of beefc97171 from master
2013-07-17[1.4.x] Fixed #20756 -- Typo in uWSGI docs.Tim Graham
Backport of a3242dc9fe from master
2013-07-11[1.4.x] Fixed #20730 -- Fixed "Programmatically creating permissions" error.Tim Graham
Thanks glarrain for the report. Backport of 684a606a4e from master
2013-07-10[1.4.x] Fixed #19196 -- Added test/requirementsTim Graham
Backport of 4d92a0bd86 from master
generated by cgit v1.3 (git 2.53.0) at 2026-06-30 20:52:20 +0000