summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-09-20Clarified why one must not catch database errors inside atomic.Aymeric Augustin
2013-09-20Fixed #20702 -- Deprecated get_formsets in favor of get_formsets_with_inlines.tschilling
Thanks stanislas.guerra at gmail.com for the report.
2013-09-19Merge pull request #1644 from PaulMcMillan/bump_hash_iterationsPaul McMillan
Increase default PBKDF2 iterations
2013-09-19Added missing "in" in sentence.Markus Amalthea Magnuson
2013-09-19Fixed #9532 -- Added min_num and validate_min on formsets.yokomizor
Thanks gsf for the suggestion.
2013-09-19Increase default PBKDF2 iterationsPaul McMillan
Increases the default PBKDF2 iterations, since computers have gotten faster since 2011. In the future, we plan to increment by 10% per major version.
2013-09-19Fixed #18744 -- Updated docstring to highlight limitations of NamedTemporaryFileKevin Christopher Henry
- Noted that this does not allow for reading and writing the same open file in different processes under Windows. - Noted that the keyword arguments to NamedTemporaryFile no longer match the Python version.
2013-09-19Fixed #21125 -- Removed support for cache URI syntaxCurtis Maloney
2013-09-19Fixed #7557 -- Added type checking to Variable initialization.Tim Graham
Thanks tobias for the suggestion and boblefrag and saz for work on the patch.
2013-09-19Added __pycache__ to gitignoreTim Graham
2013-09-19Fixed typo in exception message; refs #19414Tim Graham
Thanks Alexey Boriskin for the report.
2013-09-19Reworked security issue list to be per-issue, not per-release.Russell Keith-Magee
2013-09-19Corrected markup problems in new security summary page.Russell Keith-Magee
2013-09-18Fixed two typos in the docsAlex Gaynor
2013-09-18Fixed a typo in the docsAlex Gaynor
2013-09-18Merge pull request #1641 from ubernostrum/security-issues-docs-21121Russell Keith-Magee
Fix #21121: Add archive of security issues.
2013-09-18Fix #21121: Add archive of security issues.James Bennett
2013-09-18Fixed #19414 -- Added admin registration decoratorBrian Holdefehr
Thanks stavros for the suggestion.
2013-09-18Fixed #21116 -- Made usage of manage.py in docs more consistent.Tim Graham
Thanks daniel.quattro at gmail.com for the report.
2013-09-18Fixed #21098 -- Applied sensitive_post_parameters to MultiValueDictTim Graham
Thanks simonpercivall for the report and bmispelon for the review.
2013-09-18Fixed #21118 -- Isolated a test that uses the database.Tim Graham
Thanks rmboggs for the report.
2013-09-18Fixed #4278 -- Added a dirs parameter to a few functions to override ↵Berker Peksag
TEMPLATE_DIRS. * django.template.loader.get_template() * django.template.loader.select_template() * django.shortcuts.render() * django.shortcuts.render_to_response() Thanks amcnabb for the suggestion.
2013-09-18Fixed #15625 -- Made message in MultiValueDictKeyError less verbose.Tim Graham
Thanks margieroginski for the suggestion.
2013-09-18Fixed #12568 -- no error when accessing custom field's descriptorAnssi Kääriäinen
The SubfieldBase's descriptor caused an AttributeError when accessed from the class. Introspection didn't like that. Patch by Trac alias supervacuo.
2013-09-17Fixed #21024 -- Documented how to deprecate a feature.Tim Graham
2013-09-17Fixed #21115 -- Fixed NameError in migrate --list commandMarkus Holtermann
2013-09-17Destroy selenium before live server threads.Florian Apolloner
Ensure that selenium quits before the live server thread to prevent occasional hangs when killing the live server.
2013-09-17Fixed #21114 -- Migrations must not have a dependency to themselves.Markus Holtermann
2013-09-17Final attempt to solve sporadic test failures.Florian Apolloner
tearDownClass is not called if setUpClass throws an exception, in our case this means that LiveServerTestCase leaks LiveServerThread sockets if the test happens to be skipped later on, and AdminSeleniumWebDriverTestCase doesn't close it's already open browser window. To prevent this leakage we catch errors where needed and manually call _tearDownClassInternal. _tearDownClassInternal should be written as defensively as possible since it is not allowed to make any assumptions on how far setUpClass got. This patch should fix the sporadic "Address already in use"-errors on jenkins and also the "This code isn't under transaction management"-error for sqlite (also just on jenkins). After discussion with koniiiik, jezdez, kmtracey, tos9, lifeless, nedbat and voidspace it was decided that this is the safest approach (thanks to everyone for their comments and help). Manually calling tearDownClass was shut down cause we don't know how our users override our classes. This is a private and very specialized API on purpose and should not be used without a strong reason! This patch partially reverts the earlier attempts to fix those issues, namely: 2fa0dd73b18f55d0fdd1c1d54b1d18031bfcf1ed and 3c5775d36f7e431d9691829a78580873111cb714 Final note: If this patch breaks in a later version of Django, please be very careful on how you fix it, you might not see test failures locally. That said, this patch hopefully doesn't produce even more failures.
2013-09-17Added Arabic mapping to contrib/admin/static/admin/js/urlify.jsBeshr Kayali
2013-09-17Fixed #21112 -- Make sure sitemaps with no lastmod date work correctly.Simon Charette
Thanks to Matthias Kestenholz for the report and patch.
2013-09-17Fixed #21109 -- made db cursor error wrapping fasterAnssi Kääriäinen
2013-09-17Updated examples in the docs after eade315d.Aymeric Augustin
2013-09-16Reworded a paragraph in the logging docs.Ramiro Morales
2013-09-16Fixed test failures introduced in previous commit.Tim Graham
2013-09-16Added backwards compatability shims for util modules.Tim Graham
refs #17627
2013-09-16Fixed #17627 -- Renamed util.py files to utils.pyTim Graham
Thanks PaulM for the suggestion and Luke Granger-Brown and Wiktor Kołodziej for the initial patch.
2013-09-15Cleaned up 1.5.4/1.4.8 release notesTim Graham
2013-09-15Ensure that passwords are never long enough for a DoS.Russell Keith-Magee
* Limit the password length to 4096 bytes * Password hashers will raise a ValueError * django.contrib.auth forms will fail validation * Document in release notes that this is a backwards incompatible change Thanks to Josh Wright for the report, and Donald Stufft for the patch. This is a security fix; disclosure to follow shortly.
2013-09-15Fixed a timing edge case in the RelatedFieldWidgetSeleniumFirefoxTests.Florian Apolloner
By settings an implicit wait timeout for the find_* methods we can wait till the javascript code add the new option to the DOM. See http://ci.djangoproject.com/job/Django/database=mysql_gis,python=python3.3/3174/testReport/junit/admin_widgets.tests/RelatedFieldWidgetSeleniumFirefoxTests/test_foreign_key_using_to_field/ Stacktrace: Traceback (most recent call last): File "/var/lib/jenkins/jobs/Django/workspace/database/mysql_gis/python/python3.3/tests/admin_widgets/tests.py", line 1060, in test_foreign_key_using_to_field self.assertEqual(username_value, new_option.get_attribute('value')) AssertionError: 'newuser' != 'testser' - newuser + testser
2013-09-14Fixed error handling in 3c5775d36f7e431d9691829a78580873111cb714 for ↵Florian Apolloner
non-operational webdrivers.
2013-09-14Delayed initialization of Selenium webdrivers.Florian Apolloner
If setUpClass throws an exception (in this case "Address already in use" if the super call can't find any open port to bind too) tearDownClass is not called. This results in open browser windows from the webdriver, hence we only construct it once we are sure there is no code afterwards which could error out.
2013-09-14REmoved some unused importsAlex Gaynor
2013-09-14Merge branch 'master' of https://github.com/django/djangoAlex Gaynor
2013-09-14Removed an import * that was masking importing stuff from the wrong locationAlex Gaynor
2013-09-14Fixed #20950 -- Instantiate OrderedDict() only when neededAnssi Kääriäinen
The use of OrderedDict (even an empty one) was surprisingly slow. By initializing OrderedDict only when needed it is possible to save non-trivial amount of computing time (Model.save() is around 30% faster for example). This commit targetted sql.Query only, there are likely other places which could use similar optimizations.
2013-09-14Revert "Fixed #12288 -- Validated that app names in INSTALLED_APPS are unique"Tim Graham
This reverts commit c1ec08998d1b690855d5e69a1f4d9d2f01d44ae6. There are backwards compatability concerns with this.
2013-09-14Added tests for double-pickling a QuerySetAnssi Kääriäinen
Refs #21102.
2013-09-14Fixed #21097 - Added DatabaseFeature.can_introspect_autofieldMichael Manfre
2013-09-13Fixed #21060 -- Refactored admin's autodiscover method to make it reusable.Juan Catalano
We want to be able to use it for instance for discovering `tasks.py` modules inside the INSTALLED_APPS. This commit therefore moves the logic to `autodiscover_modules` method in django.utils.module_loading.