summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-08-13Fixed #30704 -- Fixed crash of JSONField nested key and index transforms on ↵Mariusz Felisiak
expressions with params. Thanks Florian Apolloner for the report and helping with tests.
2019-08-13Refs #25367 -- Moved Oracle Exists() handling to contextual methods.Simon Charette
Oracle requires the EXISTS expression to be wrapped in a CASE WHEN in the following cases. 1. When part of a SELECT clause. 2. When part of a ORDER BY clause. 3. When compared against another expression in the WHERE clause. This commit moves the systematic CASE WHEN wrapping of Exists.as_oracle to contextual .select_format, Lookup.as_oracle, and OrderBy.as_oracle methods in order to avoid unnecessary wrapping.
2019-08-13Refs #25367 -- Moved select_format hook to BaseExpression.Simon Charette
This will expose an intermediary hook for expressions that need special formatting when used in a SELECT clause.
2019-08-12Corrected multiple typos.Min ho Kim
2019-08-12Switched to use `HTTP_X_FORWARDED_PROTO` custom header in tests. Min ho Kim
This is the conventional name: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto
2019-08-12Refs #25367 -- Added test for Exists() lookup rhs.Simon Charette
2019-08-12Refs #24793 -- Removed bogus connection argument from SQLCompiler.compile() ↵Simon Charette
calls. The method doesn't expect a connection object to be passed as its second argument.
2019-08-12Refs #11964 -- Made constraint support check respect required_db_features.Simon Charette
This will notably silence the warnings issued when running the test suite on MySQL.
2019-08-12Refs #23879 -- Made introspection respect required_db_features.Simon Charette
2019-08-11Fixed #30677 -- Improved error message for urlencode() and Client when None ↵swatantra
is passed as data.
2019-08-11Fixed #30696 -- Removed obsolete mention of CheckConstraint in the ↵Akash Agrawal
AddConstraint docs. Follow up to 8eae094638acf802c8047b341d126d94bc9b45a3.
2019-08-11Fixed #30670 -- Doc'd SchemaEditor.add/remove_constraint().Akash Agrawal
2019-08-09Fixed #29008 -- Fixed crash of 404 debug page when URL path converter raises ↵Ngalim Siregar
Http404.
2019-08-09Fixed #30688 -- Clarified base_manager_name docs.Carlton Gibson
2019-08-08Removed unnecessary StatAggregate.resolve_expression().Jon Dufresne
This method only calls the parent method, but without the for_save argument. The parent class, Aggregate, already ignores the for_save argument so there is no need for special handling. Unnecessary since its introduction in e4cf8c8420634d6f2dc8ce873246256ce635972d.
2019-08-08Fixed #30673 -- Relaxed system check for db_table collision when database ↵Adnan Umer
routers are installed by turning the error into a warning.
2019-08-07Corrected several typos in string literals and test names.Min ho Kim
2019-08-07Fixed #30676 -- Added --pdb option to test runner.Andrew Godwin
2019-08-05Fixed #30680 -- Removed obsolete system check for SECURE_BROWSER_XSS_FILTER ↵Adnan Umer
setting.
2019-08-05Moved indexes in ArrayField's Index and Slice transforms to SQL params.Mariusz Felisiak
Follow up to 7deeabc7c7526786df6894429ce89a9c4b614086. These lookups aren't vulnerable to SQL injection because both accept only integer indexes. It is a part of good practices.
2019-08-05Added tests for using ArrayField's IndexTransform/SliceTransform on ↵Mariusz Felisiak
expressions with params.
2019-08-05Fixed #28393 -- Added helpful error messages for invalid ↵Diederik van der Boor
AutoField/FloatField/IntegerField values. Co-authored-by: Diederik van der Boor <vdboor@edoburu.nl> Co-authored-by: Nick Pope <nick.pope@flightdataservices.com>
2019-08-02Added stub release notes for 2.2.5.Mariusz Felisiak
2019-08-02Simplified AlterModelTable by making it subclass ModelOptionOperation.Nick Pope
2019-08-02Corrected StreamingHttpResponse.streaming_content description in docs.niauah
2019-08-02Fixed #30668 -- Made QuerySet.filter() raise NotSupportedError if any of ↵aaktsipetrov
source expressions is not filterable.
2019-08-02Fixed #30661 -- Added models.SmallAutoField.Nick Pope
2019-08-02Fixed #30599 -- Prevented ManifestFilesMixin.read_manifest() from silencing ↵zeyneloz
errors other than FileNotFoundError.
2019-08-02Added test for handling of non-existent manifest in ↵zeyneloz
ManifestFilesMixin.read_manifest().
2019-08-02Removed obsolete mentions of a check constraint in ↵Mariusz Felisiak
BaseDatabaseSchemaEditor.add_constraint()/remove_constraint() docstrings.
2019-08-01Removed unneeded ValueError catching in django.utils.text._replace_entity().Jon Dufresne
The html.entities.name2codepoint dict contains only valid Unicode codepoints. Either the key exists and chr() will succeed or the key does not exist.
2019-08-01Refs #30664 -- Fixed migrations crash when altering AutoField/BigAutoField ↵Mariusz Felisiak
with quoted db_column on PostgreSQL.
2019-08-01Fixed #30664 -- Fixed migrations crash when altering table on SQLite or ↵Ngalim Siregar
altering AutoField/BigAutoField on PostgreSQL for models with quoted db_table.
2019-08-01Added CVE-2019-14235 to security release archive.Carlton Gibson
2019-08-01Added CVE-2019-14234 to security release archive.Carlton Gibson
2019-08-01Added CVE-2019-14233 to security release archive.Carlton Gibson
2019-08-01Added CVE-2019-14232 to the security release archive.Carlton Gibson
2019-08-01Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵Florian Apolloner
django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report.
2019-08-01Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index ↵Mariusz Felisiak
lookups against SQL injection. Thanks to Sage M. Abdullah for the report and initial patch. Thanks Florian Apolloner for reviews.
2019-08-01Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵Florian Apolloner
strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report.
2019-08-01Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when ↵Florian Apolloner
truncating HTML. Thanks to Guido Vranken for initial report.
2019-07-31Refs #30669 -- Removed incorrect branch in ASGIHander.read_body().Carlton Gibson
None is not valid for settings.FILE_UPLOAD_MAX_MEMORY_SIZE. Always use SpooledTemporaryFile.
2019-07-31Fixed #30665 -- Added support for distinct argument to Avg() and Sum().Étienne Beaulé
2019-07-31Moved test for distinct Count() to a separate test case.Étienne Beaulé
2019-07-31Fixed #30160 -- Added support for LZMA and XZ templates to ↵Nick Pope
startapp/startproject management commands.
2019-07-31Refs #30160 -- Simplified and improved tests for django.utils.archive.Nick Pope
The file executable should have 0o775 permission not only u=x. The file no_permissions should have 0o644 u=r.
2019-07-31Refs #30160 -- Doc'd startapp/startproject support for tarfile templates.Nick Pope
2019-07-31Refs #30160 -- Simplified archive extension map and added other aliases.Nick Pope
2019-07-30Refs #30593 -- Fixed introspection of check constraints columns on MariaDB.Hasan Ramezani
2019-07-30Refs #30593 -- Added _parse_constraint_columns() hook to introspection on ↵Hasan Ramezani
MariaDB.
generated by cgit v1.3 (git 2.53.0) at 2026-07-25 15:37:40 +0000