summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-09-15[1.6.x] Add release notes and bump version number for security release.1.6b4James Bennett
2013-09-15[1.6.x] Ensure that passwords are never long enough for a DoS.Russell Keith-Magee
* Limit the password length to 4096 bytes * Password hashers will raise a ValueError * django.contrib.auth forms will fail validation * Document in release notes that this is a backwards incompatible change Thanks to Josh Wright for the report, and Donald Stufft for the patch. This is a security fix; disclosure to follow shortly. Backport of aae5a96d5754ad34e48b7f673ef2411a3bbc1015 from master.
2013-09-14[1.6.x] Added tests for double-pickling a QuerySetAnssi Kääriäinen
Refs #21102. Backpatch of 74b91b3888383fca28dea00e0e1ffb5aecec7c0f
2013-09-13[1.6.x] Fixed #21101 -- Updated urlize documentation to mention email addressesGoetz
Backport of 39b49fd339 from master
2013-09-13[1.6.x] Fixed #21100 -- Noted that Create/UpdateViews.fields is new in 1.6Tim Graham
Thanks AndrewIngram for the suggestion. Backport of ec89e1725a from master
2013-09-13[1.6.x] Fixed #21094 -- Updated reuseable apps tutorial to use pip for ↵Tim Graham
installation. Thanks ylb415 at gmail.com for the suggestion. Backport of e4aab1bb8d from master
2013-09-13[1.6.x] Documentation -- added instructions on working with pull requestsKevin Christopher Henry
Since non-core contributors are asked to review patches, instructions on working with pull requests were added to the Working with Git and GitHub page (based on the existing instructions in the core committers page). Backport of 990ce9aab9 from master
2013-09-13[1.6.x] Fixed #21095 -- Documented new requirement for dates lookups.Matt Austin
Day, month, and week_day lookups now require time zone definitions in the database. Backport of 9451d8d from master.
2013-09-12[1.6.x] Fixed a couple of typos in GeoDjango docs.Ramiro Morales
8b366a50f4 from master.
2013-09-11[1.6.x] Minor typo fix in django.contrib.auth.models.User docsPhaneendra Chiruvella
Backport of bd72c2acb6 from master
2013-09-11[1.6.x] Fixed #20887 -- Added a warning to GzipMiddleware in light of BREACH.Tim Graham
Thanks EvilDMP for the report and Russell Keith-Magee for the draft text. Backport of da843e7dba from master
2013-09-11[1.6.x] Documentation -- Improved description of cache argumentsKevin Christopher Henry
- Fixed some grammar and formatting mistakes - Added the type and default for CULL_FREQUENCY - Made the note on culling the entire cache more precise. (It's actually slower on the filesystem backend.) Backport of 5eca021d48 from master
2013-09-10[1.6.x] Bump version number for 1.6 beta 3 security release.1.6b3James Bennett
2013-09-10[1.6.x] Added 1.4.7/1.5.3 release notesTim Graham
Backport of baec6a26dd from master
2013-09-10[1.6.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative ↵Tim Graham
paths. Thanks Rainer Koirikivi for the report and draft patch. This is a security fix; disclosure to follow shortly. Backport of 7fe5b656c9 from master
2013-09-10[1.6.x] Fixed broken sphinx reference to staticfiles.Tarjei Husøy
Backport of 751dc0a36b from master
2013-09-10[1.6.x] Took advantage of django.utils.six.moves.urllib.*.Aymeric Augustin
Backport of 6a6428a36 from master.
2013-09-10[1.6.x] Fixed #21075 - Improved doc for calling call_command with arguments.oz123
Backport of fca4c4826e from master
2013-09-09[1.6.x] Fixed spelling; refs #16895.Tim Graham
Thanks Panagiotis Issaris for the report. Backport of fb51c9a0f2 from master
2013-09-09[1.6.x] Fixed #16895 -- Warned about cost of QuerySet orderinge0ne
Thanks outofculture at gmail.com for the suggestion. Backport of cbf08c6b0c from master
2013-09-09[1.6.x] Fixed #20707 -- Added explicit quota assignment to Oracle test userСадовский Николай
To enable testing on Oracle 12c
2013-09-08[1.6.x] Further hardening. Refs #18766.Aymeric Augustin
Backport of c687bf0 from master.
2013-09-08[1.6.x] Hardened the test introduced in ded11aa6. Refs #18766.Aymeric Augustin
Inputs acceptable to time.mktime are platform-dependent. Backport of 1a1e1478 from master.
2013-09-08[1.6.x] Fixed #18766 -- Pointed to pytz when LocalTimezone fails.Aymeric Augustin
Thanks void for the report. Backport of ded11aa6 from master.
2013-09-07[1.6.x] Fixed #21068 -- Added some docs for DiscoverRunnerTim Graham
Thanks jcd. Backport of e4b012feeb from master
2013-09-07Fixed #20409 -- Clarified how unique_for_date works when USE_TZ is set.Aymeric Augustin
2013-09-07[1.6.x] Fixed deprecation warning on Python 3Tim Graham
Backport of b7451b72 from master.
2013-09-07[1.6.x] Fixed 9244447c -- incomplete backport.Aymeric Augustin
The test client had been refactored in the mean time. This commit de-factors the fix. Refs #20530.
2013-09-07[1.6.x] Fixed #20005 -- Documented that Oracle databases need execute ↵Tim Graham
permission on SYS.DBMS_LOB. Thanks jafula for the suggestion. Backport of a86ecc80a2 from master
2013-09-07[1.6.x] Fixed #20938 -- Added cached sessions note to deployment checklist.Tim Graham
Thanks mjtamlyn for the suggestion. Backport of 4e784f337c from master
2013-09-07[1.6.x] Fixed #20530 -- Properly decoded non-ASCII query strings on Python 3.Aymeric Augustin
Thanks mitsuhiko for the report. Backport of 65b6eff3 and adaptation of 8aaca65 from master.
2013-09-07[1.6.x] Fixed an encoding issue in the test client.Aymeric Augustin
Refs #20530. Backport of 7bb62793 and 476b0764 from master. Conflicts: django/test/client.py
2013-09-07[1.6.x] Fixed #16992 -- Added InnoDB warning regarding reuse of ↵Keith Edmiston
AUTO_INCREMENT values. Thanks kent at nsc.liu.se for the report. Backport of c54fa1a7bc from master
2013-09-07[1.6.x] Fixed #20557 -- Properly decoded non-ASCII cookies on Python 3.Aymeric Augustin
Thanks mitsuhiko for the report. Non-ASCII values are supported. Non-ASCII keys still aren't, because the current parser mangles them. That's another bug. Simplified backport of 8aaca651 and f5add47 from master.
2013-09-06[1.6.x] Fixed #11811 -- Data-loss bug in queryset.update.Aymeric Augustin
It's now forbidden to call queryset.update(field=instance) when instance hasn't been saved to the database ie. instance.pk is None. Conflicts: tests/queries/tests.py Backport of b4cd8169 from master.
2013-09-06Merge pull request #1566 from adamsc64/ticket_11857Russell Keith-Magee
Fixed #11857 -- Added missing 'closed' property on TemporaryFile class. Backport of 926bc42 from trunk.
2013-09-06[1.6.x] Fixed Python 3 syntax error introduced in [c72392da]Tim Graham
Backport of 498014ccd5 from master
2013-09-06[1.6.x] Merge pull request #1582 from ↵Russell Keith-Magee
rca/12756-missing-yaml-module-serializer-error-message Fixed #12756: Improved error message when yaml module is missing. Backport of 4f5faa1916e7c8cb72cc9ebf1a1fd964ba6e707b from master.
2013-09-06[1.6.x] Merge pull request #1580 from ianawilson/ticket_16502Russell Keith-Magee
Fixed #16502 -- Fixed a TemplateDoesNotExist error that should be an ImproperlyConfigured. Assistance on the patch from #jambronrose. Backport of 9b2dc12b8332389d1bfb9e83123a088a084a6a47 from master.
2013-09-06Merge pull request #1579 from ianawilson/ticket_21058Russell Keith-Magee
[1.6.x] Fixed #21058 -- Fixed debug view blowing up when no template is provided to the template rendering functions. Assistance on this commit from @jambonrose. Backport of 122020fdb93980df850ae02f61d97da27e2cb515 from master.
2013-09-06[1.6.x] Fixed a link in topics/testing/overview.txtTim Graham
Backport of 0c295a7718 from master
2013-09-06[1.6.x] Fixed #21049 -- Fixed autoreload for Python 3Max Burstein
Changed th system module values check to return a list. In Python 3 it returns a dict_view which could occassionally produce a runtime error of "dictionary changed size during iteration". Backport of 559cb826b8 from master
2013-09-06[1.6.x] Fixed #19295 -- Documented that CachedStaticFilesStorage isn't ↵Keith Edmiston
compatible with runserver --insecure. Backport of 028db97503 from master
2013-09-06[1.6.x] Fixed #20646 -- Clarified the use of AbstractBaseUser.REQUIRED_FIELDSTim Graham
Thanks craigbruce. Backport of db3de52807 from master
2013-09-06[1.6.x] Fixed instructions for running a subset of tests.Tim Graham
Backport of cd4068f359 from master
2013-09-05[1.6.x] Fixed #21035 -- Changed docs to treat the acronym SQL phonetically.Eric Boersma
The documentation and comments now all use 'an' to refer to the word SQL and not 'a'. Backport of 4d13cc56de from master
2013-09-05[1.6.x] Fixed #21047 -- Added CLA mesage on the new contributor advice docmicahhausler
Backport of 93dd31cadf from master
2013-09-05[1.6.x] Fixed #21044 -- Documented django.core.urlresolvers.Resolver404Tim Graham
Thanks Keryn Knight for the suggestion. Backport of eacf060e01 from master
2013-09-05[1.6.x] Fixed #20900 -- Documented RemoteUserBackend.authenticateTim Graham
Backport of 7b62b80693 from master
2013-09-05[1.6.x] Fixed #21041 -- Removed a duplicate form in tests.Tim Graham
Thanks tuxcanfly. Backport of bab039d74c from master