summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2019-08-01Removed unneeded ValueError catching in django.utils.text._replace_entity().Jon Dufresne
The html.entities.name2codepoint dict contains only valid Unicode codepoints. Either the key exists and chr() will succeed or the key does not exist.
2019-08-01Refs #30664 -- Fixed migrations crash when altering AutoField/BigAutoField ↵Mariusz Felisiak
with quoted db_column on PostgreSQL.
2019-08-01Fixed #30664 -- Fixed migrations crash when altering table on SQLite or ↵Ngalim Siregar
altering AutoField/BigAutoField on PostgreSQL for models with quoted db_table.
2019-08-01Added CVE-2019-14235 to security release archive.Carlton Gibson
2019-08-01Added CVE-2019-14234 to security release archive.Carlton Gibson
2019-08-01Added CVE-2019-14233 to security release archive.Carlton Gibson
2019-08-01Added CVE-2019-14232 to the security release archive.Carlton Gibson
2019-08-01Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵Florian Apolloner
django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report.
2019-08-01Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index ↵Mariusz Felisiak
lookups against SQL injection. Thanks to Sage M. Abdullah for the report and initial patch. Thanks Florian Apolloner for reviews.
2019-08-01Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵Florian Apolloner
strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report.
2019-08-01Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when ↵Florian Apolloner
truncating HTML. Thanks to Guido Vranken for initial report.
2019-07-31Refs #30669 -- Removed incorrect branch in ASGIHander.read_body().Carlton Gibson
None is not valid for settings.FILE_UPLOAD_MAX_MEMORY_SIZE. Always use SpooledTemporaryFile.
2019-07-31Fixed #30665 -- Added support for distinct argument to Avg() and Sum().Étienne Beaulé
2019-07-31Moved test for distinct Count() to a separate test case.Étienne Beaulé
2019-07-31Fixed #30160 -- Added support for LZMA and XZ templates to ↵Nick Pope
startapp/startproject management commands.
2019-07-31Refs #30160 -- Simplified and improved tests for django.utils.archive.Nick Pope
The file executable should have 0o775 permission not only u=x. The file no_permissions should have 0o644 u=r.
2019-07-31Refs #30160 -- Doc'd startapp/startproject support for tarfile templates.Nick Pope
2019-07-31Refs #30160 -- Simplified archive extension map and added other aliases.Nick Pope
2019-07-30Refs #30593 -- Fixed introspection of check constraints columns on MariaDB.Hasan Ramezani
2019-07-30Refs #30593 -- Added _parse_constraint_columns() hook to introspection on ↵Hasan Ramezani
MariaDB.
2019-07-30Removed redundant ArchiveTest.test_extract_method() test.Nick Pope
The extract() function has the same code as used in the test method for Archive.extract().
2019-07-30Refs #30160 -- Made destination path a required argument of extract().Nick Pope
2019-07-29Fixed #30411 -- Improved formatting of text tracebacks in technical 500 ↵Jerrod Martin
templates. Co-Authored-By: Daniel Hahler <git@thequod.de>
2019-07-29Fixed #30656 -- Added QuerySet.bulk_update() to the database optimization docs.daniel a rios
2019-07-29Refs #30656 -- Reorganized bulk methods in the database optimization docs.daniel a rios
2019-07-27Fixed #30552 -- Fixed loss of SRID when calling reverse() on LineString/Point.Claude Paroz
Thanks Mariusz Felisiak for contributing the Point part.
2019-07-27Refs #28147 -- Fixed setting of OneToOne and Foreign Key fields to None when ↵Jon Dufresne
using attnames. Regression in 519016e5f25d7c0a040015724f9920581551cab0.
2019-07-27Added tests for using attnames to assign OneToOne and Foreign Key fields.Jon Dufresne
2019-07-26Fixed #30567 -- Made WSGIHandler pass FileResponse.block_size to ↵Piotr Domanski
wsgi.file_wrapper.
2019-07-25Added Query.is_sliced property.Mariusz Felisiak
Previously, we used Query.can_filter() mainly to check if a query is sliced what was confusing.
2019-07-25Fixed #27995 -- Added error messages on unsupported operations following ↵Hasan Ramezani
union(), intersection(), and difference().
2019-07-25Added stub release notes for security releases.Carlton Gibson
2019-07-25Fixed #30657 -- Allowed customizing Field's descriptors with a ↵Jon Dufresne
descriptor_class attribute. Allows model fields to override the descriptor class used on the model instance attribute.
2019-07-25Refs #30657 -- Made DeferredAttribute.__init__() to take a field instance ↵Jon Dufresne
instead of a field name.
2019-07-24Fixed #30647 -- Fixed crash of autoreloader when extra directory cannot be ↵Tom Forbes
resolved.
2019-07-24Removed unused BaseReloader.watch_file().Mariusz Felisiak
Unused since its introduction in c8720e7696ca41f3262d5369365cc1bd72a216ca.
2019-07-23Improved error message when index in __getitem__() is invalid.Jon Dufresne
2019-07-23Fixed typo in docs/topics/http/sessions.txt.terminator14
2019-07-23Refs #29548 -- Fixed DatabaseWrapper.display_name on MariaDB.Mariusz Felisiak
2019-07-23Fixed #30506 -- Fixed crash of autoreloader when path contains null characters.Tom Forbes
2019-07-23Removed unnecessary code in Model.__init__().Jon Dufresne
As is_related_object is True, the val variable is unused for the remainder of the method. Unnecessary since 53da1e47942f22a56e761d786ba89d05ca55a224.
2019-07-22Fixed #30644 -- Made introspection use pg_table_is_visible() instead of ↵Georgi Yanchev
filtering by public schema on PostgreSQL.
2019-07-20Simplified get_key_columns()/get_relations() introspection methods for ↵Mariusz Felisiak
PostgreSQL.
2019-07-19Fixed typos in comments and a test name.Min ho Kim
2019-07-19Refs #30083 -- Added a warning about performing queries in pre/post_init ↵Mariusz Felisiak
receivers. Thanks Carlton Gibson the review.
2019-07-19Refs #30083 -- Clarified database state of instances in signals.pre_init docs.Mariusz Felisiak
2019-07-19Fixed #30593 -- Added support for check constraints on MariaDB 10.2+.Hasan Ramezani
2019-07-18Fixed #30648 -- Removed unnecessary overriding get_context_data() from ↵Davit Gachechiladze
mixins with CBVs docs.
2019-07-18Refs #30547 -- Clarified that partial UniqueConstraints don't affect model ↵Mariusz Felisiak
validation.
2019-07-16Fixed #29824 -- Added support for database exclusion constraints on PostgreSQL.Mads Jensen
Thanks to Nick Pope and Mariusz Felisiak for review. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>