summaryrefslogtreecommitdiff
path: root/django/http
AgeCommit message (Collapse)Author
2013-02-19[1.5.x] Added a new required ALLOWED_HOSTS setting for HTTP host header ↵Carl Meyer
validation. This is a security fix; disclosure and advisory coming shortly.
2013-01-11[1.5.x] Fixed #19585 -- Fixed loading cookie value as a dictClaude Paroz
This regression was introduced by the 'unicode_literals' patch. Backport of f08e739bc2 from master.
2012-12-31[1.5.x] Fixed #19519 -- Fired request_finished in the WSGI iterable's close().Aymeric Augustin
Backport of acc5396.
2012-12-10[1.5.X] Fixed a security issue in get_host.Florian Apolloner
Full disclosure and new release forthcoming.
2012-11-17[1.5.x] Fixed #19036 -- Fixed base64 uploads decodingClaude Paroz
Thanks anthony at adsorbtion.org for the report, and johannesl for bringing the patch up-to-date. Backport of 2a67374b5 from master.
2012-11-03[1.5.x] Fixed #18963 -- Used a subclass-friendly patternAymeric Augustin
for Python 2 object model compatibility methods. Backport of fc10418 from master.
2012-11-03[1.5.x] Fixed #19101 -- Decoding of non-ASCII POST data on Python 3.Aymeric Augustin
Thanks Claude Paroz. Backport of 095eca8 from master.
2012-10-25Fixed #18796 -- Refactored conversion to bytes in HttpResponseAymeric Augustin
Thanks mrmachine for the review.
2012-10-24Fixed #13222 -- Made HttpResponse iterable onceAymeric Augustin
response.content can be accessed many times as desired, and always returns the same result. iter(response) works only once and consumes the iterator.
2012-10-24Fixed #6527 -- Provided repeatable content accessAymeric Augustin
in HttpResponses instantiated with iterators.
2012-10-23Reverted 6a64822bf4632707212314a25a843c862bdb3874.Aymeric Augustin
This commit caused every test that does two or more assertContains to fail, because of #6527. It also made HttpResponse non-pickleable. Refs #13222.
2012-10-22Fixed #13222 -- Repeated iteration of HttpResponseAymeric Augustin
Thanks teepark for the report and grahamd for his insights.
2012-10-21Cleaned up the the http module. Moved all of the code from __init__.py to ↵Alex Gaynor
request.py, response.py and utils.py
2012-10-20Fixed #7581 -- Added streaming responses.Aymeric Augustin
Thanks mrmachine and everyone else involved on this long-standing ticket.
2012-10-20Fixed #5611 -- Restricted accepted content types in parsing POST dataClaude Paroz
Thanks paulegan for the report and Preston Holmes for the review.
2012-10-17Fixed a security issue related to password resetsPreston Holmes
Full disclosure and new release are forthcoming
2012-09-07Fixed #18916 -- Allowed non-ASCII headers.Aymeric Augustin
Thanks Malcolm Tredinnick for the review.
2012-09-07Removed many uses of bare "except:", which were either going to a) silence ↵Alex Gaynor
real issues, or b) were impossible to hit.
2012-08-30Replaced some smart_xxx by force_xxx equivalentClaude Paroz
smart_str/smart_text should only be used when a potential lazy string should be preserved in the result of the function call.
2012-08-29Replaced many smart_bytes by force_bytesClaude Paroz
In all those occurrences, we didn't care about preserving the lazy status of the strings, but we really wanted to obtain a real bytestring.
2012-08-23Fixed #18678 -- HttpResponse init arguments allowed for subclassesClaude Paroz
Thanks hp1337@gmail.com for the report.
2012-08-22Fixed #11340 -- Prevented HttpResponseNotModified to have content/content-typeClaude Paroz
The HTTP 1.1 spec tells that the 304 response MUST NOT contain a message body. Thanks aparajita for the report.
2012-08-22Used the decorator syntax for properties in django.httpClaude Paroz
2012-08-19[py3] Fixed another regression from 2892cb0ec4.Aymeric Augustin
2012-08-19[py3] Fixed regression introduced in 536b030363.Aymeric Augustin
Refs #18764. Reverted 536b030363 and switched to a more explicit way of avoiding calling bytes(<int>). This definitely deserves a refactoring. Specifically, _get_content should just return b''.join(self). Unfortunately that's impossible with the current tests.
2012-08-19[py3] Supported integers in HttpResponseAymeric Augustin
Fixed #18764.
2012-08-15[py3] Fixed HTTP header serializationClaude Paroz
2012-08-14[py3] Fixed file_uploads testsClaude Paroz
2012-08-14[py3] Fixed HttpResponse when initialized with bytesClaude Paroz
2012-08-14[py3] Ported django.http according to PEP 3333.Aymeric Augustin
Perfomed some style cleanup while I was in the area.
2012-08-13[py3] Fixed contrib.formtools testsClaude Paroz
2012-08-13[py3] Fixed iterlists usage in QueryDictClaude Paroz
2012-08-11[py3] Used smart_str to prevent regressions in http handlingClaude Paroz
2012-08-11[py3] Fixed Python 3 compatibility of http handlingClaude Paroz
* Using str() when Python 2 expects bytes and Python 3 Unicode * Fixed reraise-ing syntax * Fixed slicing of byte strings
2012-08-09[py3] Renamed `next` to `__next__` in iterators.Aymeric Augustin
See PEP 3114. `next` is retained as an alias for Python 2.
2012-08-08[py3] Fixed 'iterable but non string' detectionClaude Paroz
In Python 3, the str type has an __iter__ attribute. Therefore, the presence of an __iter__ attribute is not sufficient to distinguish 'standard' iterables (list, tuple) from strings.
2012-08-07[py3] Made a small fix in django.http.Aymeric Augustin
This is necessary for the 'utils' tests to pass.
2012-08-07[py3] Ported django.utils.encoding.Aymeric Augustin
* Renamed smart_unicode to smart_text (but kept the old name under Python 2 for backwards compatibility). * Renamed smart_str to smart_bytes. * Re-introduced smart_str as an alias for smart_text under Python 3 and smart_bytes under Python 2 (which is backwards compatible). Thus smart_str always returns a str objects. * Used the new smart_str in a few places where both Python 2 and 3 want a str.
2012-08-03Replaced some byte strings by str() callsClaude Paroz
This is a useful trick when Python 2 awaits byte strings and Python 3 Unicode (regular) strings.
2012-07-30Fixed a security issue in http redirects. Disclosure and new release ↵Florian Apolloner
forthcoming.
2012-07-22[py3] Switched to Python 3-compatible imports.Aymeric Augustin
xrange/range will be dealt with in a separate commit due to the huge number of changes.
2012-07-22[py3] Updated urllib/urllib2/urlparse imports.Aymeric Augustin
Lots of functions were moved. Use explicit imports in all cases to keey it easy to identify where the functions come from.
2012-07-22[py3] Replaced unicode/str by six.text_type/bytes.Aymeric Augustin
2012-07-22[py3] Used six.reraise wherever necessary.Aymeric Augustin
2012-07-17Fixed #18561 -- Made HttpResponse.tell() support non-ascii charsClaude Paroz
2012-07-14Cleaned up the QueryDict implementation.Alex Gaynor
- Use super(). - Don't poke at internals. - Don't override methods for no reason.
2012-06-30Fixed #16519 -- Deprecated mimetype kwarg of HttpResponse __init__Claude Paroz
This keyword was already deprecated in the code (supported for backwards compatibility only), but never formally deprecated. Thanks Paul McMillan for the report and yasar11732 for the initial patch.
2012-06-07Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.Claude Paroz
Thanks Vinay Sajip for the support of his django3 branch and Jannis Leidel for the review.
2012-05-19Marked bytestrings with b prefix. Refs #18269Claude Paroz
This is a preparation for unicode literals general usage in Django (Python 3 compatibility).
2012-05-10Replaced foo.next() by next(foo).Claude Paroz
This new syntax for next() has been introduced in Python 2.6 and is compatible with Python 3.
generated by cgit v1.3 (git 2.53.0) at 2026-07-07 03:19:11 +0000