summaryrefslogtreecommitdiff
path: root/django/core
AgeCommit message (Collapse)Author
2012-07-30[1.3.x] Fixed a security issue in image uploading. Disclosure and release ↵Florian Apolloner
forthcoming. Backport of dd16b17099b7d86f27773df048c5014cf439b282 from master.
2012-03-24[1.3.x] Fixed #16481 -- Adapted one raw SQL query in cull implementation of ↵Aymeric Augustin
the database-based cache backend so it works with Oracle. Backport of r16635 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@17805 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-24[1.3.X] Fixed #16812 -- Percent-encode URLs in verify_exists, to fix test ↵Aymeric Augustin
failures on Python 2.5 and 2.6. Backport of r16838 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@17803 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-01-19[1.3.X] Fixed #17078: properly invoke IPython 0.12.Jacob Kaplan-Moss
Backport of r17379. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@17380 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-01-07[1.3.X] Fixed #17100 -- Typo in the regex for EmailValidator. Backport of ↵Aymeric Augustin
r17349 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@17350 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-09-10[1.3.X] Altered the behavior of URLField to avoid a potential DOS vector, ↵Russell Keith-Magee
and to avoid potential leakage of local filesystem data. A security announcement will be made shortly. Backport of r16760 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@16763 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-07-14[1.3.X] Reverted [14563] because it introduced a dependency from core on a ↵Ramiro Morales
contrib app (contenttypes). Fixes #16283, Refs #3055. Thanks TheRoSS for the report and Aymeric Augustin for finding the problem. This caused models shipped with some contrib apps to pollute the namespace when user's apps had the same name (e.g. auth, sites), even when these contrib apps weren't installed. This undesired loading of contrib apps happened when model validation was executed, for example when running management commands that set or inherit `requires_model_validation=True`: cleanup, dumpdata, flush, loaddata, reset, runfcgi, sql, sqlall, sqlclear, sqlcustom, sqlflush, sqlindexes, sqlinitialdata, sqlreset, sqlsequencereset, syncdb, createsuperusers, ping_google, collectstatic, findstatic. This could also cause hard to diagnose problems e.g. when performing reverse URL resolving. Backport of [16493] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@16541 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-05-25[1.3.X] Fixed #16004 - csrf_protect does not send cookie if view returns ↵Luke Plant
TemplateResponse The root bug was in decorator_from_middleware, and the fix also corrects bugs with gzip_page and other decorators. Backport of [16276] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@16279 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-04-22[1.3.X] Fixed #15672 -- Refined changes made in r15918. Thanks, vung.Jannis Leidel
Backport from trunk (r16082). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@16083 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-04-03[1.3.X] Fixed #15672 -- Fixed bug in core/handlers/wsgi.py where we were ↵Russell Keith-Magee
referring to the 'request' variable before assigning to it. Thanks for the report, vkryachko Backport of r15918 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.3.X@16009 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-19Fixed #13686 -- Ensure that memcache handling of unicode values in add() and ↵Russell Keith-Magee
set_many() is consistent with the handling provided by get() and set(). Thanks to nedbatchelder for the report, and to jbalogh, accuser and Jacob Burch for their work ont the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15880 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-16Fixed #15229 -- Improved URLValidator to accept ftp:// links. Thanks, ↵Adrian Holovaty
codefisher and crayz_train git-svn-id: http://code.djangoproject.com/svn/django/trunk@15847 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-02Fixed #15531 -- Partially reverted [15701] due to compatibility issues with ↵Jannis Leidel
middlewares that modify content of responses. Thanks for the report, schinckel. Refs #15281. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15703 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-01Fixed #15281 -- Made the static view use an iterator when serving a file, ↵Jannis Leidel
effectively making this less of a memory hog. Also use the appropriate attributes of the stat object instead of indexes. Thanks for the initial patch, FunkyBob and aaugustin. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15701 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-28Fixed #15520 -- Fixed incompatibility with email module shipped with Python ↵Ramiro Morales
2.4 introduced in r15669. Thanks dobcey for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15675 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-28Fixed #13433 -- Changed default behavior of Django email message wrappers to ↵Ramiro Morales
not mangle lines starting with 'From '. Thanks Leo for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15669 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-23Fixed #15299 -- Started the process of migrating the auth context processor ↵Russell Keith-Magee
support classes into the auth context processor module. Thanks to shailesh for the report, and v1v3kn for the draft patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15635 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Fixed #15359 -- Ensure that the -h option is always honored by ↵Russell Keith-Magee
django-admin.py. Thanks to teubank for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15605 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19Fixed #15324 -- Modified the connection creation code for the memcache cache ↵Russell Keith-Magee
backend. Thanks to dlowe for the report and initial patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15567 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-14Fixes #15270 -- Moved back the serve view to django.views.static due to ↵Jannis Leidel
dependency conflicts with the contrib app staticfiles (reverts parts of r14293). Added a helper function that generates URL patterns for serving static and media files during development. Thanks to Carl for reviewing the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15530 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Fixed #8536 -- Made sure the makemessages management command cleans up after ↵Jannis Leidel
throwing an error. Thanks to Ramiro for the initial patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15506 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Fixed #14941 -- Stop raising ValidationError in form fields that use the ↵Jannis Leidel
URLValidator and get a IDN domain passed. Thanks, Claude Paroz. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15504 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Fixed #12988 -- Extended regular expression of the URLValidator to fully ↵Jannis Leidel
support IDN-URLs, especially the long TLDs. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15502 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-12Fixed #14955 -- Made the URLValidator use a HEAD request when verifying a ↵Jannis Leidel
URL. Thanks, Claude Paroz. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15500 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-10Fixed #15264 -- Ensured that legacy cache backends specified using the ↵Russell Keith-Magee
legacy cache format continue to work. Thanks to Stephane for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15488 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-04Fixed #15181 -- Ensure that special characters are escaped when querying for ↵Russell Keith-Magee
the URL of an uploaded file. Thanks to e.generalov for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15409 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-04Fixed #15217 -- Made the CACHE_BACKEND deprecation warning more selective, ↵Russell Keith-Magee
so it doesn't catch the default case. Thanks to adamv for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15406 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-27Fixed #15112 -- Ensure that IPv6 addresses are correctly displayed in the ↵Russell Keith-Magee
admin. Thanks to oxy for the report, and Łukasz Rekucki for the test case. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15343 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-27Fixed #14823 -- Corrected bootstrapping problems with register_serializers. ↵Russell Keith-Magee
Thanks to miker985@uw.edu for the report and draft patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15336 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-25Fixed #14419 -- Enhanced the help text of the makemessages management ↵Ramiro Morales
command. Thanks lsaffre for the report and suggestions and gruszczy for the patch. Also, removed the sterile make-messages.py, compile-messages.py scripts and dead compatibility code in makemessages. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15302 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24Fixed 14796 -- Modified order of operations performed on field names by the ↵Ramiro Morales
inspectdb command so it doesn't generates model fields with names equal to Python keywords. Thanks pappjm at gmail dot com for the report and mmcnickle for the fix. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15296 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24Fixed #15144 -- Corrected some problems with the Cache middleware when used ↵Russell Keith-Magee
with multiple cache settings. Thanks to Jim Dalton for the report, and to Jim and Joshua Ginsberg for the work on the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15285 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-21Converted makemessages management command to a NoArgsCommand.Ramiro Morales
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15279 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-21Added contrib apps to ignore list when running makemessages in the Djagno ↵Jannis Leidel
source tree and added a --no-obsolete option in preparation of moving app translations out of core. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15258 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-18Refs #14661 -- Clarified the handling of initial data injected via custom SQL.Russell Keith-Magee
This is BACKWARDS INCOMPATIBLE CHANGE for anyone relying on SQL-injected initial data in a test case. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15239 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-17Refactor all uses of thread locals to be more consistant and sane.Alex Gaynor
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15232 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-16Fixed #15083 -- Corrected the order of TemplateResponse middleware handling, ↵Russell Keith-Magee
ensuring that custom URLConfs are valid, and that ResponseMiddleware is invoked if the TemplateResponseMiddleware causes errors. Thanks to Sayane for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15226 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-16Fixed #15018 -- Corrected the handling of LimitedStream under one edge case ↵Russell Keith-Magee
involving size restricted buffers and newlines. Thanks to xjdrew for the report, and aaugustin for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15222 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-15Fixed #14928 -- Ensure that a fully qualified domain name can be used for ↵Russell Keith-Magee
runserver. Thanks to Karmel Allison for the report, Łukasz Rekucki for the patch, and claudep for the tests. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15215 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-15Fixed #15079 -- Added a missing import in the cache infrastructure. Thanks ↵Russell Keith-Magee
to jaylett for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15214 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-15Fixed #15042 -- Ensured that email addresses without a domain can still be ↵Russell Keith-Magee
mail recipients. Patch also improves the IDN handling introduced by r15006, and refactors the test suite to ensure even feature coverage. Thanks to net147 for the report, and to Łukasz Rekucki for the awesome patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15211 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-15Corrected r15205 syntax to be Python2.4 compatible.Russell Keith-Magee
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15210 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-14Fixed #11193 -- WSGI handler not properly handling lock on error in ↵Andrew Godwin
load_middleware. Thanks to Phillip Sitbon. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15205 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-08Fixed #14888 -- Removing duplicated code in serialisers. Thanks to eric.fortin.Andrew Godwin
git-svn-id: http://code.djangoproject.com/svn/django/trunk@15163 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-29Fixed #7726 -- Added validation of max_digits and decimal_places options to ↵Ramiro Morales
DecimalField model field. Thanks theevilgeek for the report and elbarto for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15094 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-21Fixed #14301 -- Further refine changes made in r14216 to support non-ASCII ↵Jannis Leidel
characters in email addresses. Thanks, Claude Peroz and Andi Albrecht. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15006 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-21Fixed #11675 -- Added support for the PyLibMC cache library. In order to ↵Russell Keith-Magee
support this, and clean up some other 1.3 caching additions, this patch also includes some changes to the way caches are defined. This means you can now have multiple caches, in the same way you have multiple databases. A huge thanks to Jacob Burch for the work on the PyLibMC backend, and to Jannis for his work on the cache definition changes. git-svn-id: http://code.djangoproject.com/svn/django/trunk@15005 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-21Reverting r14994 (at request of SmileyChris) because of some backwards ↵Russell Keith-Magee
compatibility issues that need to be resolved. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14995 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-21Fixes #13252 -- Use the natural key instead of the primary key when serializingChris Beaven
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14994 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-12-12Fixed #14187 -- Added support for bpython to shell management command. ↵Jannis Leidel
Thanks, Jeremy Dunck. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14896 bcc190cf-cafb-0310-a4f2-bffc1f526a37
generated by cgit v1.3 (git 2.53.0) at 2026-10-17 04:17:12 +0000