summaryrefslogtreecommitdiff
path: root/django/http
AgeCommit message (Expand)Author
2026-06-10Fixed #37142 -- Moved django_file_prefixes() to django.utils.warnings.zhengkangyang
2026-06-03Refs #36905 -- Moved JSONResponse safe param discussion to versionchanged box.Jacob Walls
2026-06-03Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisions.Paul McMillan
2026-06-02Fixed #37103 -- Made HttpRequest.body handle malformed CONTENT_LENGTH.Lier0102
2026-05-27Fixed #36905 -- Deprecated the safe parameter of JSONResponse.Tim Harris
2026-05-22Fixed #37100 -- Prevented control characters in HttpResponse reason_phrase.Varun Kasyap
2026-05-12Fixed #37095 -- Checked maximum redirect lengths against percent-encoded URLs.Jacob Walls
2026-05-05Fixed #37053 -- Added validate=True to base64.b64decode() calls.Sarah Boyce
2026-05-04Fixed #36767 -- Allowed max redirect URL length to be set on HttpResponseRedi...varunkasyap
2026-04-22Fixed #36991 -- Raised BadRequest for invalid encodings in Content-Type headers.Dinesh
2026-04-07Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body size in ...Natalia
2026-04-07Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.Natalia
2026-02-24Fixed #36931 -- Handled LookupError in multipart parser for invalid RFC 2231 ...sammiee5311
2026-02-10Fixed #36841 -- Made multipart parser class pluggable on HttpRequest.farhan
2025-11-26Fixed #36743 -- Increased URL max length enforced in HttpResponseRedirectBase.varunkasyap
2025-11-05Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedirect/HttpR...Jacob Walls
2025-08-28Refs #36520 -- Ensured only the header value is passed to parse_header_parame...Jake Howard
2025-07-23Refs #36500 -- Rewrapped long docstrings and block comments via a script.django-bot
2025-07-23Refs #36500 -- Shortened some long docstrings and comments.Mike Edmunds
2025-07-23Removed double spaces after periods and within phrases.Sarah Boyce
2025-06-16Fixed #36447 -- Selected preferred media type based on quality.Jake Howard
2025-06-09Fixed #36446 -- Restored "q" in internal MediaType.params property.Natalia
2025-06-03Fixed #36411 -- Made HttpRequest.get_preferred_type() consider media type par...Jake Howard
2025-03-31Refs #28909 -- Simplified code using unpacking generalizations.Aarni Koskela
2025-02-18Refs #36005 -- Used datetime.UTC alias instead of datetime.timezone.utc.Mariusz Felisiak
2024-11-14Fixed #35784 -- Added support for preserving the HTTP request method in HttpR...Lorenzo Peña
2024-10-16Fixed #35727 -- Added HttpResponse.text property.SaJH
2024-09-09Fixed #35631 -- Added HttpRequest.get_preferred_type().Jake Howard
2024-08-28Refs #33735 -- Adjusted warning stacklevel in StreamingHttpResponse.__iter__(...Simon Charette
2024-05-29Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.Jake Howard
2024-01-26Applied Black's 2024 stable style.Mariusz Felisiak
2023-11-24Fixed #34968 -- Made multipart parsing of headers raise an error on too long ...Standa Opichal
2023-08-25Fixed #34709 -- Raised BadRequest for non-UTF-8 requests with the application...Mariusz Felisiak
2023-08-02Simplified django.http.request.split_domain_port().Nick Pope
2023-04-12Refs #34482 -- Reverted "Fixed #32969 -- Fixed pickling HttpResponse and subc...Mariusz Felisiak
2023-04-12Fixed #34484, Refs #34482 -- Reverted "Fixed #29186 -- Fixed pickling HttpReq...Mariusz Felisiak
2023-03-14Fixed #34405 -- Fixed setting Content-Type header in FileResponse for compres...Mariusz Felisiak
2023-02-14Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.Markus Holtermann
2023-01-18Refs #34233 -- Used str.removeprefix()/removesuffix().Mariusz Felisiak
2023-01-18Refs #34233 -- Used aiter() and anext().Nick Pope
2022-12-22Fixed #33735 -- Added async support to StreamingHttpResponse.Carlton Gibson
2022-12-05Fixed #34194 -- Added django.utils.http.content_disposition_header().Alex Vandiver
2022-11-14Fixed #34074 -- Added headers argument to RequestFactory and Client classes.David Wobrock
2022-11-10Updated documentation and comments for RFC updates.Nick Pope
2022-10-31Used more augmented assignment statements.Nick Pope
2022-09-14Fixed #29186 -- Fixed pickling HttpRequest and subclasses.Anvesh Mishra
2022-08-03Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.Carlton Gibson
2022-06-28Refs #33697 -- Used django.utils.http.parse_header_parameters() for parsing b...Mehrdad
2022-06-28Removed unnecessary _parse_header() from MultiPartParser.Mariusz Felisiak
2022-06-28Refs #33697 -- Made MediaType use django.utils.http.parse_header_parameters().Mehrdad