| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2024-11-14 | Fixed #35784 -- Added support for preserving the HTTP request method in ↵ | Lorenzo Peña | |
| HttpResponseRedirectBase. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> | |||
| 2024-10-16 | Fixed #35727 -- Added HttpResponse.text property. | SaJH | |
| Signed-off-by: SaJH <wogur981208@gmail.com> | |||
| 2024-09-09 | Fixed #35631 -- Added HttpRequest.get_preferred_type(). | Jake Howard | |
| 2024-08-28 | Refs #33735 -- Adjusted warning stacklevel in ↵ | Simon Charette | |
| StreamingHttpResponse.__iter__()/__aiter__(). | |||
| 2024-05-29 | Fixed 35467 -- Replaced urlparse with urlsplit where appropriate. | Jake Howard | |
| This work should not generate any change of functionality, and `urlsplit` is approximately 6x faster. Most use cases of `urlparse` didn't touch the path, so they can be converted to `urlsplit` without any issue. Most of those which do use `.path`, simply parse the URL, mutate the querystring, then put them back together, which is also fine (so long as urlunsplit is used). | |||
| 2024-01-26 | Applied Black's 2024 stable style. | Mariusz Felisiak | |
| https://github.com/psf/black/releases/tag/24.1.0 | |||
| 2023-11-24 | Fixed #34968 -- Made multipart parsing of headers raise an error on too long ↵ | Standa Opichal | |
| headers. This also allow customizing the maximum size of headers via MAX_TOTAL_HEADER_SIZE. | |||
| 2023-08-25 | Fixed #34709 -- Raised BadRequest for non-UTF-8 requests with the ↵ | Mariusz Felisiak | |
| application/x-www-form-urlencoded content type. Thanks Eki Xu for the report. | |||
| 2023-08-02 | Simplified django.http.request.split_domain_port(). | Nick Pope | |
| Use the capture groups from the regular expression that has already been matched to avoid resplitting and the need to special case for IPv6. | |||
| 2023-04-12 | Refs #34482 -- Reverted "Fixed #32969 -- Fixed pickling HttpResponse and ↵ | Mariusz Felisiak | |
| subclasses." This reverts commit d7f5bfd241666c0a76e90208da1e9ef81aec44db. Thanks Márton Salomváry for the report. | |||
| 2023-04-12 | Fixed #34484, Refs #34482 -- Reverted "Fixed #29186 -- Fixed pickling ↵ | Mariusz Felisiak | |
| HttpRequest and subclasses." This reverts commit 6220c445c40a6a7f4d442de8bde2628346153963. Thanks Adam Johnson and Márton Salomváry for reports. | |||
| 2023-03-14 | Fixed #34405 -- Fixed setting Content-Type header in FileResponse for ↵ | Mariusz Felisiak | |
| compress and brotli. Thanks Chamal De Silva for the report. | |||
| 2023-02-14 | Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files. | Markus Holtermann | |
| Thanks to Jakob Ackermann for the report. | |||
| 2023-01-18 | Refs #34233 -- Used str.removeprefix()/removesuffix(). | Mariusz Felisiak | |
| 2023-01-18 | Refs #34233 -- Used aiter() and anext(). | Nick Pope | |
| Available since Python 3.10. | |||
| 2022-12-22 | Fixed #33735 -- Added async support to StreamingHttpResponse. | Carlton Gibson | |
| Thanks to Florian Vazelle for initial exploratory work, and to Nick Pope and Mariusz Felisiak for review. | |||
| 2022-12-05 | Fixed #34194 -- Added django.utils.http.content_disposition_header(). | Alex Vandiver | |
| 2022-11-14 | Fixed #34074 -- Added headers argument to RequestFactory and Client classes. | David Wobrock | |
| 2022-11-10 | Updated documentation and comments for RFC updates. | Nick Pope | |
| - Updated references to RFC 1123 to RFC 5322 - Only partial as RFC 5322 sort of sub-references RFC 1123. - Updated references to RFC 2388 to RFC 7578 - Except RFC 2388 Section 5.3 which has no equivalent. - Updated references to RFC 2396 to RFC 3986 - Updated references to RFC 2616 to RFC 9110 - Updated references to RFC 3066 to RFC 5646 - Updated references to RFC 7230 to RFC 9112 - Updated references to RFC 7231 to RFC 9110 - Updated references to RFC 7232 to RFC 9110 - Updated references to RFC 7234 to RFC 9111 - Tidied up style of text when referring to RFC documents | |||
| 2022-10-31 | Used more augmented assignment statements. | Nick Pope | |
| Identified using the following command: $ git grep -I '\(\<[_a-zA-Z0-9]\+\>\) *= *\1 *[-+/*^%&|<>@]' | |||
| 2022-09-14 | Fixed #29186 -- Fixed pickling HttpRequest and subclasses. | Anvesh Mishra | |
| 2022-08-03 | Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header. | Carlton Gibson | |
| Thanks to Motoyasu Saburi for the report. | |||
| 2022-06-28 | Refs #33697 -- Used django.utils.http.parse_header_parameters() for parsing ↵ | Mehrdad | |
| boundary streams. This also removes unused parse_header() and _parse_header_params() helpers in django.http.multipartparser. | |||
| 2022-06-28 | Removed unnecessary _parse_header() from MultiPartParser. | Mariusz Felisiak | |
| Reraising ValueError was unused since its introduction in d725cc9734272f867d41f7236235c28b3931a1b2. | |||
| 2022-06-28 | Refs #33697 -- Made MediaType use django.utils.http.parse_header_parameters(). | Mehrdad | |
| 2022-06-20 | Fixed #32969 -- Fixed pickling HttpResponse and subclasses. | Anv3sh | |
| 2022-06-09 | Fixed #33755 -- Moved ASGI body-file cleanup into request class. | Jonas Lundberg | |
| 2022-06-03 | Refs #33697 -- Made MultiPartParser use ↵ | Mehrdad | |
| django.utils.http.parse_header_parameters() for parsing Content-Type header. | |||
| 2022-06-01 | Refs #33697 -- Fixed multipart parsing of headers with double quotes and ↵ | Mehrdad | |
| semicolons. See https://github.com/python/cpython/commit/1ef0c0349e8fdb5415e21231cb42edbf232b742a | |||
| 2022-05-17 | Fixed #33683 -- Document HttpResponseBase and allow import from django.http | Collin Anderson | |
| 2022-05-11 | Refs #33173 -- Removed use of deprecated cgi module. | Carlton Gibson | |
| https://peps.python.org/pep-0594/#cgi | |||
| 2022-03-24 | Refs #32365 -- Removed internal uses of utils.timezone.utc alias. | Carlton Gibson | |
| Remaining test case ensures that uses of the alias are mapped canonically by the migration writer. | |||
| 2022-03-23 | Fixed #33569 -- Added SECURE_PROXY_SSL_HEADER support for list of protocols ↵ | Thomas Schmidt | |
| in the header value. | |||
| 2022-03-07 | Refs #33562 -- Made HttpResponse.set_cookie() raise ValueError when both ↵ | Luke Plant | |
| "expires" and "max_age" are passed. This fixes the case where you might pass set_cookie(expires=val, max_age=val) and max_age is silently ignored. | |||
| 2022-03-07 | Fixed #33562 -- Made HttpResponse.set_cookie() support timedelta for the ↵ | Luke Plant | |
| max_age argument. | |||
| 2022-03-02 | Refs #33546 -- Optimized handling content types in HttpResponseBase.__init__(). | Keryn Knight | |
| This removes an extraneous conditional causing "Content-Type" to be checked within the ResponseHeaders twice, if a content_type parameter is provided. | |||
| 2022-03-02 | Refs #33546 -- Optimized HttpResponseBase.charset a bit. | Keryn Knight | |
| This avoids scanning the Content-Type if it's empty, allowing the Content-Type header itself to have a charset assigned without using the re module. | |||
| 2022-03-02 | Refs #33546 -- Optimized ResponseHeaders._convert_to_charset() by reducing ↵ | Keryn Knight | |
| the type-checking duplication. In the common case, where keys and values are be encoded into ascii/latin-1, defer the checking for newlines until it's been successfully coerced to a string. Co-authored-by: Nick Pope <nick@nickpope.me.uk> | |||
| 2022-03-02 | Refs #33546 -- Avoided unpacking data in ResponseHeaders when not necessary. | Keryn Knight | |
| 2022-02-07 | Refs #33476 -- Refactored code to strictly match 88 characters line length. | Mariusz Felisiak | |
| 2022-02-07 | Refs #33476 -- Reformatted code with Black. | django-bot | |
| 2022-02-01 | Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads. | Mariusz Felisiak | |
| Thanks Alan Ryan for the report and initial patch. | |||
| 2022-01-20 | Fixed #33062 -- Made MultiPartParser remove non-printable chars from file names. | Hrushikesh Vaidya | |
| 2022-01-07 | Fixed #28628 -- Changed \d to [0-9] in regexes where appropriate. | Ad Timmering | |
| 2021-12-02 | Updated various links to HTTPS and new locations. | Mariusz Felisiak | |
| Co-Authored-By: Nick Pope <nick@nickpope.me.uk> | |||
| 2021-10-15 | Refs #30509 -- Adjusted internal FileResponse variable name. | Carlton Gibson | |
| Follow up to dc724c5bf9d3b8d59c9571aa751c3cd001cdeced. | |||
| 2021-10-14 | Fixed #30509 -- Made FileResponse better handle buffers and non-zero file ↵ | Piotr Kunicki | |
| offsets. | |||
| 2021-09-22 | Optimized handling case-insensitive mappings. | Illia Volochii | |
| Elements yielded by _destruct_iterable_mapping_values are always unpacked. Since unpacking can be done with any iterable, there is no need to convert elements to tuples. Also, such elements can be used directly in for loops, creating a dictionary of them is excessive. Co-authored-by: Nick Pope <nick@nickpope.me.uk> | |||
| 2021-08-02 | Simplified serializing HTTP response headers. | Illia Volochii | |
| Since ResponseHeaders was introduced, header names and values are stored as strings. There is no need to check whether they are bytes. Co-authored-by: Nick Pope <nick@nickpope.me.uk> | |||
| 2021-06-22 | Refs #24121 -- Added __repr__() to StreamingHttpResponse and subclasses. | Nicolas Restrepo | |
