summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-09-15[1.4.x] Removed usage of b"" string syntax for Python 2.5 compatibility.1.4.8Russell Keith-Magee
Refs commit 3f3d887a6844ec2db743fee64c9e53e04d39a368.
2013-09-14[1.4.x] Add release notes and bump version numbers for 1.4.8 security release.James Bennett
2013-09-15[1.4.x] Ensure that passwords are never long enough for a DoS.Russell Keith-Magee
* Limit the password length to 4096 bytes * Password hashers will raise a ValueError * django.contrib.auth forms will fail validation * Document in release notes that this is a backwards incompatible change Thanks to Josh Wright for the report, and Donald Stufft for the patch. This is a security fix; disclosure to follow shortly. Backport of aae5a96d5754ad34e48b7f673ef2411a3bbc1015 from master.
2013-09-13Fixed #18923 -- Corrected usage of sensitive_post_parameters in contrib.authTim Graham
Thanks Collin Anderson for the report. Backport of 425d076d0c from master
2013-09-11[1.4.x] Fixed #20887 -- Added a warning to GzipMiddleware in light of BREACH.Tim Graham
Thanks EvilDMP for the report and Russell Keith-Magee for the draft text. Backport of da843e7dba from master
2013-09-11Merge pull request #1616 from loic/fix1.4Florian Apolloner
Fixed failing test introduced by 87d2750b39.
2013-09-11[1.4.x] Bump version post-release.Tim Graham
2013-09-11Fixed failing test introduced by 87d2750b39.Loic Bistuer
The {% ssi %} tag in Django 1.4 doesn't support spaces in its argument. Skip the test if run from a location that contains a space.
2013-09-10[1.4.x] Bump version numbers for 1.4.7 security release.1.4.7James Bennett
2013-09-10Added 1.4.7 release notesTim Graham
Backport of baec6a26dd from master
2013-09-10[1.4.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative ↵Tim Graham
paths. Thanks Rainer Koirikivi for the report and draft patch. This is a security fix; disclosure to follow shortly. Backport of 7fe5b656c9 from master
2013-09-09[1.4.x] Fixed #20707 -- Added explicit quota assignment to Oracle test userСадовский Николай
To enable testing on Oracle 12c
2013-08-18[1.4.x] Fixed #20907 - Test failure on OracleShai Berger
Backport of the Oracle-specific part of commit a18e43c5bb8cb7c82 from master. This commit made get_indexes more consistent across backends. Thanks Tim Graham for pointer to the commit, akaariai and ikelly for the original commit.
2013-08-17[1.4.x] Fixed #20904: Test failure on OracleShai Berger
Just skip the failing test, the failure isn't really relevant; also, both the test and the reason for its failure were removed in 1.5. Thanks Tim Graham for advice on 1.5.
2013-08-16[1.4.x] Fixed #20906 -- Fixed a dependence on set-ordering in testsLuke Plant
Backport of 1ae64e96c1 from master
2013-08-16[1.4.x] Fixed #20905 -- Fixed an Oracle-specific test case failureAnssi Kääriäinen
Made a test checking ORM-generated query string case-insensitive. Backport of ee0a7c741e from master
2013-08-13Fixed regression in validation tests since example.com is available via ↵Florian Apolloner
https now.
2013-08-13Bump version post-release.Jacob Kaplan-Moss
2013-08-13[1.4.x] Removed 1.5.2 release notesTim Graham
2013-08-13Stole the Makefile for building packages from master.Jacob Kaplan-Moss
2013-08-13Added 1.4.6/1.5.2 release notes.1.4.6Tim Graham
2013-08-13Bumped version numbers for 1.4.6.Jacob Kaplan-Moss
2013-08-13Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S.Jacob Kaplan-Moss
This is a security fix; disclosure to follow shortly.
2013-08-12[1.4.x] Added missing release notes for older versions of DjangoTim Graham
Backport of 3f6cc33cff from master
2013-07-31[1.4.x] Added a bugfix in docutils 0.11 -- docs will now build properly.Tim Graham
Backport of a3a59a3197 from master
2013-07-31[1.4.x] Fixed #20779 -- Documented AdminSite.app_index_template; refs #8498.SusanTan
Thanks CollinAnderson for the report. Backport of 7de35a9ef3 from master
2013-07-25[1.4.x] Fixed #18315 -- Documented QueryDict.popitem and QueryDict.popmark hellewell
Thanks gcbirzan for the report. Backport of 8c9240222f from master
2013-07-25[1.4.x] Fixed #20792 -- Corrected DISALLOWED_USER_AGENTS docs.Brenton Cleeland
Thanks simonb for the report. Backport of dab52d99fc from master
2013-07-18[1.4.x] Atom specification URL updatedMatt Deacalion Stevens
Changed to the URL of the official RFC for Atom, since Atomenabled.org is just a holding page. Backport of beefc97171 from master
2013-07-17[1.4.x] Fixed #20756 -- Typo in uWSGI docs.Tim Graham
Backport of a3242dc9fe from master
2013-07-11[1.4.x] Fixed #20730 -- Fixed "Programmatically creating permissions" error.Tim Graham
Thanks glarrain for the report. Backport of 684a606a4e from master
2013-07-10[1.4.x] Fixed #19196 -- Added test/requirementsTim Graham
Backport of 4d92a0bd86 from master
2013-07-08[1.4.x] Fixed #18944 -- Documented PasswordResetForm's from_email argument ↵Tim Graham
as a backwards incompatible change for 1.3 Thanks DrMeers for the report. Backport of dab921751d from master
2013-06-27[1.4.x] Fixed #20665 -- Missing backslash in sitemaps documentationBaptiste Mispelon
Backport of 5005303ae7919eef26dab9f8ba279696966ebf1d from master.
2013-06-24[1.4.x] Fixed oversight in e3b6fed3. Refs #20636.Aymeric Augustin
2013-06-24[1.4.x] Fixed #20636 -- Stopped stuffing values in the settings.Aymeric Augustin
In Django < 1.6, override_settings restores the settings module that was active when the override_settings call was executed, not when it was run. This can make a difference when override_settings is applied to a class, since it's executed when the module is imported, not when the test case is run. In addition, if the settings module for tests is stored alongside the tests themselves, importing the settings module can trigger an import of the tests. Since the settings module isn't fully imported yet, class-level override_settings statements may store a reference to an incorrect settings module. Eventually this will result in a crash during test teardown because the settings module restored by override_settings won't the one that was active during test setup. While Django should prevent this situation in the future by failing loudly in such dubious import sequences, that change won't be backported to 1.5 and 1.4. However, these versions received the "allowed hosts" patch and they're prone to "AttributeError: 'Settings' object has no attribute '_original_allowed_hosts'". To mitigate this regression, this commits stuffs _original_allowed_hosts on a random module instead of the settings module. This problem shouldn't occur in Django 1.6, see #20290, but this patch will be forward-ported for extra safety. Also tweaked backup variable names for consistency. Backport of 0261922 from stable/1.5.x. Conflicts: django/test/utils.py
2013-05-31[1.4.x] Fixed #20326 - Corrected form wizard get_form() example.Tim Graham
Thanks tris@ for the report. Backport of 646a2216e9 from master
2013-05-29[1.4.x] Fixed regroup example.Gavin Wahl
Chicago was missing. Backport of e6ff238 from master.
2013-05-28[1.4.x] Fixed #20523 - Incorrect form field for FilePathField.Tim Graham
Thanks sane4ka.sh@ for the report. Backport of 1fdc3d256d from master
2013-05-24[1.5.x] Fixed #20492 - Removed a broken link in GIS docs.Tim Graham
Backport of fbab3209fc from master
2013-05-24[1.4.x] Updated link to jQuery Cookie plugin siteAlasdair Nicol
Backport of 81f454a322 from master
2013-05-14[1.4.x] Fixed a minor spelling mistake in the queryset documentationWilfred Hughes
Backport of d258cce482 from master
2013-05-13[1.5.X] Fixed #18883 -- added a missing self parameter in the docsAlex Gaynor
Backport of 17d57275f9 from master
2013-03-30[1.4.X] Fixed #18277 - Clarified startproject documentation.Tim Graham
Backport of 33503600b5 from master
2013-03-29[1.4.x] Fixed #20150 -- Fixed an error in manager doc exampleNimesh Ghelani
Backport of 485c024567 from master
2013-03-28[1.4.x] Bump version to no longer claim to be 1.4.5 final.Carl Meyer
2013-03-26Merge pull request #962 from dstufft/document-bcrypt-truncation-1.4.xDonald Stufft
Document password truncation with BCryptPasswordHasher
2013-03-26Document password truncation with BCryptPasswordHasherDonald Stufft
2013-03-02[1.4.x] Fixed #19926 -- Fixed a link to code example in queries docsClaude Paroz
Thanks Randy Salvo for the report.
2013-02-25[1.4.x] Fixed #18144 -- Restored compatibility with SHA1 hashes with empty salt.Aymeric Augustin
Thanks dahool for the report and initial version of the patch. Backport of 633d8de from master.
generated by cgit v1.3 (git 2.53.0) at 2026-07-07 15:25:34 +0000