summaryrefslogtreecommitdiff
path: root/django/utils
AgeCommit message (Collapse)Author
2014-05-12[1.5.x] Added additional checks in is_safe_url to account for flexible parsing.Erik Romijn
This is a security fix. Disclosure following shortly.
2014-03-24[1.5.x] Updated six to 1.6.1.Tim Graham
Backport of 2ec82c7387db071278201796208808de84c90dbf from master
2014-01-26[1.5.x] Fixed #21823 -- Upgraded six to 1.5.2Tim Graham
Backport of 780ae7e9f8 from master.
2013-11-01[1.5.x] Fixed spelling ("dependant" -> "dependent")Tim Graham
Dependent means reliant on. A dependant is a person like a child or spouse. Thanks Andrew Wilcox for the report. Backport of 090315f5df from master
2013-10-26Revert "[1.5.x] Fixed #21335 -- Use importlib from python3 when using python3"Claude Paroz
This reverts commit 1ef737416ab56a6becee36876769909a37541465. This would require changing some import_module calls (relative syntax, see ec0a3f50852), too much for a stable release.
2013-10-26[1.5.x] Fixed #21335 -- Use importlib from python3 when using python3Andrey Antukh
Backport of 3351e94ffa from master.
2013-10-21[1.5.x] Fixed #21253 -- PBKDF2 with cached HMAC keyFlorian Apolloner
This gives a 2x speed increase compared to the existing implementation. Thanks to Steve Thomas for the initial patch and Tim Graham for finishing it. Backport of 1e4f53a6eb8d1816e51eb8bd8f95e704f6b89ead from master.
2013-10-13[1.5.x] Fixed #21256 -- Error in datetime_safe.datetime.combine.Aymeric Augustin
Backport of d9b6fb8 from master
2013-09-27[1.5.x] Fix #21185: Added tests for unescape_entities.Baptiste Mispelon
Also fixed a py3 incompatibility. Thanks to brutasse for the report. Backport of 3754f4ad410640382f9fe25073da03009cdc2ea3 from master.
2013-09-27[1.5.x] Updated the bundled version of six to 1.4.0.Aymeric Augustin
Backport of 4292097078279226cb725c2921011fb14634b9af from master.
2013-09-24[1.5.x] Fixed #21138 -- Increased the performance of our PBKDF2 implementation.Florian Apolloner
Thanks go to Michael Gebetsroither for pointing out this issue and help on the patch. Backport of 68540fe4df44492571bc610a0a043d3d02b3d320 from master.
2013-08-22[1.5.x] Fixed #20922 -- Allowed customizing the serializer used by ↵Tim Graham
contrib.sessions Added settings.SESSION_SERIALIZER which is the import path of a serializer to use for sessions. Thanks apollo13, carljm, shaib, akaariai, charettes, and dstufft for reviews. Backport of b0ce6fe656 from master
2013-08-13Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S.Jacob Kaplan-Moss
This is a security fix; disclosure to follow shortly.
2013-07-28[1.5.x] Simplified smart_urlquote and added some basic tests.Florian Apolloner
Backport of b70c371fc1f18ea0c43b503122df3f311afc7105 from master.
2013-07-07[1.5.x] Fixed #20711 -- Fixed broken link in timesince.py docstringSusanTan
Backport of d63327d843 from master.
2013-05-21[1.5.x] Imported copyreg from six.movesClaude Paroz
2013-05-21[1.5.x] Fixed #20212 - __reduce__ should only be defined for Py3+.Daniel Lindsley
2013-03-29[1.5.x] Fixed spelling errorsGavin Wahl
Backport of ec04fd1344 from master
2013-03-22[1.5.x] Fixed #20108 -- Fixed filepath_to_uri decoding errorClaude Paroz
This was a regression due to unicode_literals usage. Thanks Ivan Virabyan for the report and the initial patch. Backport of 164528acc8 from master.
2013-03-22[1.5.x] Fixed #20094 - Be more careful when checking for IteratorMarc Tamlyn
Python 2.6 has some different behaviour when checking isinstance(foo, collections.Iterator). Backport of 829dc3c5 from master.
2013-03-17[1.5.x] Updated bundled version of six.Aymeric Augustin
Backport of e11ccc76d325b6bbbf101f510a91299f507f0745.
2013-03-17[1.5.x] Updated our six module to follow upstream changes.Florian Apolloner
This includes fixes for the java/jython detection and a new license header. Thanks to Thomas Bartelmess for the report. Backport of c5ce0e8a687ecf7fbc38fa85c5311a6320a246c6 from master.
2013-02-27[py3] Always fed hashlib with bytes.Łukasz Langa
2013-02-25[1.5.x] Fixed #19634 -- Added proper __hash__ methods.Aymeric Augustin
Classes overriding __eq__ need a __hash__ such that equal objects have the same hash. Thanks akaariai for the report and regebro for the patch. Backport of e76147a from master.
2013-02-06Partially revert 9efe1a721, strip_tags improvementsClaude Paroz
The new regex seems not stable enough for being released. Stripping with regex might need reevaluation for the next release. Refs #19237.
2013-01-31[1.5.x] Fixed #19708 -- Exception in timezone.override(None).Aymeric Augustin
Thanks rafales. Backport of 9a4a1ce.
2013-01-25[1.5.x] Fixed #19577 - Added HTML escaping to admin examples.Tim Graham
Thanks foo@ for the report and Florian Apolloner for the review. Backport of eafc036476 from master
2012-12-24[1.5.X] Fixed #19204 -- Replaced python2-style exception syntax.Florian Apolloner
Thanks to garrison for the report and patch. Backport of 4a71b842662162e0892a9269179421ff2191adba from master
2012-12-16[1.5.X] Fixed #18718 - Documented django.utils.encoding.filepath_to_uriTim Graham
Backport of 507c081484 from master
2012-12-10[1.5.X] Fixed #18856 -- Ensured that redirects can't be poisoned by ↵Florian Apolloner
malicious users.
2012-12-08[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem pathsClaude Paroz
Thanks kujiu for the report and Aymeric Augustin for the review. Backport of c91667338 from master.
2012-12-01[1.5.x] Fixed #19015 -- Add ISO input formats to all formatsClaude Paroz
Backport of 349c4c37f8 from master.
2012-11-24[1.5.x] Fixed #19237 -- Improved strip_tags utilityChris Khoo
The previous pattern didn't properly addressed cases where '>' was present inside quoted tag content. Backport of bf1871d87 from master.
2012-11-16[1.5.x] Fixed #18985 -- made DeprecationWarnings loudPreston Holmes
Capture warnings in Python >= 2.7 and route through console handler, which is subject to DEBUG==True Thanks to dstufft for the idea, and claudep for initial patch
2012-11-14[1.5.x] Fixed #19272 -- Fixed gettext_lazy returned type on Python 2Claude Paroz
Thanks tyrion for the report. Backport of 550ddc66b from master.
2012-11-13Some changes to SortedDict to make it faster under py2Anssi Kääriäinen
Refs #19276
2012-11-03[1.5.x] Fixed #18963 -- Used a subclass-friendly patternAymeric Augustin
for Python 2 object model compatibility methods. Backport of fc10418 from master.
2012-10-31Fixed #19070 -- urlize filter no longer raises exceptions on 2.7Andrew Godwin
Thanks to claudep for the patch.
2012-10-26[1.5.x] Properly support pickling of LazyObjects in Python 3.3Ian Clelland
Backport of 836cd26d7f3394452f1f5196eb26c99fef128a1a from master
2012-10-25[1.5.x] Ensured get_version returns a native string.Aymeric Augustin
Returning unicode triggers a bug in Python 2.7: http://bugs.python.org/issue11638 This problem was introduced in 4a103086 (unicode_literals). Backport of 45c8818 from master.
2012-10-24Remove a case that is no longer reachable in encodings.py.Alex Gaynor
This case was originally designed to handle Exception's which didn't gracefully support coercing themselves to unicode. However, because it lives in the `else` case of `if hasattr(s, '__unicode__'):` we can be sure it's no longer reachable in djanog anymore, because since Python 2.5 exception has subclassed object, which means Exception objects always have an __unicode__ method.
2012-10-21Merge pull request #457 from JanBednarik/ticket_19142Claude Paroz
Fixed #19142 -- Language codes can include numbers (RFC 3066)
2012-10-20Merge pull request #444 from mitar/patch-2Alex Gaynor
Allow reversed iteration over SortedDict.
2012-10-21Fixed #19142 -- Language codes can include numbers (RFC 3066).Jan Bednařík
2012-10-20Fixed #7581 -- Added streaming responses.Aymeric Augustin
Thanks mrmachine and everyone else involved on this long-standing ticket.
2012-10-15Allow reversed iteration over SortedDict.Mitar
Iterators cannot be reversed easily without this method.
2012-10-15Build context strings out of [u|n]gettextClaude Paroz
The context strings in [n]pgettext functions should not be marked themselves for translation.
2012-10-10Revert "Fixed #16211 -- Added comparison and negation ops to F() expressions"Anssi Kääriäinen
This reverts commit 28abf5f0ebc9d380f25dd278d7ef4642c4504545. Conflicts: docs/releases/1.5.txt
2012-09-30Fixed #16211 -- Added comparison and negation ops to F() expressionsAnssi Kääriäinen
Work done by Walter Doekes and Trac alias knoeb. Reviewed by Simon Charette.
2012-09-29Moved filter at handler levelClaude Paroz
Filters at logger level are only processed for messages directly logged to the specific logger, not for loggers in the parent chain. As the 'django' logger is almost always processed as an inherited logger, it makes more sense to filter messages at the 'console' handler level.