summaryrefslogtreecommitdiff
path: root/django/utils
AgeCommit message (Collapse)Author
2019-02-11[2.0.x] Fixed CVE-2019-6975 -- Fixed memory exhaustion in ↵Carlton Gibson
utils.numberformat.format(). Thanks Sjoerd Job Postmus for the report and initial patch. Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review.
2018-07-31[2.0.x] Fixed CVE-2018-14574 -- Fixed open redirect possibility in ↵Andreas Hug
CommonMiddleware.
2018-04-17[2.0.x] Fixed #29334 -- Updated pypi.python.org URLs to pypi.org.Brett Cannon
Backport of 64b74804c537b12d4cca64f7cb529c0478b4c4d9 from master
2018-03-06[2.0.x] Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in ↵Tim Graham
django.utils.text.Truncator. Thanks James Davis for suggesting the fix.
2018-03-06[2.0.x] Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and ↵Tim Graham
urlizetrunc template filters. Thanks Florian Apolloner for assisting with the patch.
2017-12-23[2.0.x] Fixed #28594 -- Removed Jython docs and specific codeClaude Paroz
Thanks Andrey Martyanov for the report, and Tim Graham for the review. Backport of 23b21db31bfcf2a065d485617412cca43a311a4c from master.
2017-11-28[2.0.x] Fixed #28837 -- Fixed test client crash if an exception with more ↵Nicolas Delaby
than one arg is raised. Also removed usage of the problematic pattern elsewhere. Regression in 6e55e1d88a5c4453e25f0caf7ffb68973de5c0ba. Backport of 746caf3ef821dbf7588797cb2600fa81b9df9d1d from master
2017-10-31[2.0.x] Refs #23919 -- Updated references to urllib.quote() to Python 3 ↵Ville Skyttä
location. Backport of 23e551ce6c7956e4c143357643dab2e89d30bfe0 from master
2017-10-22[2.0.x] Refs #14807 -- Removed unneeded mark_safe callClaude Paroz
Backport of 68407e3545f4b3e051c87cd530c97765bf2cdd80 from master.
2017-10-13[2.0.x] Updated email.Util (Python 2) references to email.utils (Python 3).Tim Graham
Backport of f2868f97399955650c47c948dc57c376bebb67b1 from master
2017-10-12[2.0.x] Fixed #28679 -- Fixed urlencode()'s handling of bytes.François Freitag
Regression in fee42fd99ee470528858c2ccb3621135c30ec262. Thanks Claude Paroz, Jon Dufresne, and Tim Graham for the guidance. Backport of 41be85862d9067a809ccf3707d2a22dfef23d99a from master
2017-09-28[2.0.x] Fixed #28629 -- Made tree.Node instances hashable.Mariusz Felisiak
Regression in 508b5debfb16843a8443ebac82c1fb91f15da687 which added Node.__eq__(). Backport of fc6528b25ab1834be1a478b405bf8f7ec5cf860c from master
2017-09-13Removed unnecessary parens in various code.Mariusz Felisiak
2017-09-08Fixed #28546 -- Fixed translation's to_locale() with langauge subtags.Tim Graham
Thanks Brent Hand for the initial patch.
2017-09-08Removed to_lower parameter for translation's to_locale().Tim Graham
Unused since 2bab9d6d9ea095c4bcaeede2df576708afd46291.
2017-09-07Reverted "Fixed #27818 -- Replaced try/except/pass with contextlib.suppress()."Tim Graham
This reverts commit 550cb3a365dee4edfdd1563224d5304de2a57fda because try/except performs better.
2017-08-23Used OrderedDict.fromkeys() to initialize OrderedDict with None values.Sergey Fedoseev
2017-07-12Refs #23919 -- Removed LazyObject.__getstate__() needed only on Python 2.Sergey Fedoseev
2017-07-03Fixed #28076 -- Added support for PostgreSQL's interval format to ↵Matthew Schinckel
parse_duration().
2017-06-28Fixed #27818 -- Replaced try/except/pass with contextlib.suppress().Mads Jensen
2017-06-20Fixed #28323 -- Removed unneeded normalize() in timezone.localtime() and ↵Tim Graham
make_naive().
2017-06-20Fixed #28324 -- Made feedgenerators write feeds with deterministically ↵Georg Sauthoff
ordered attributes.
2017-06-15Fixed #28304 -- Kept SafeData type for pgettext-translated stringsClaude Paroz
2017-06-13Fixed #27830 -- Used distutils.version.LooseVersion for version parsing.chillaranand
2017-06-08Fixed #28241 -- Allowed module_has_submodule()'s module_name arg to be a ↵Thomas Khyn
dotted path.
2017-06-01Refs #23968 -- Removed unnecessary lists, generators, and tuple calls.Jon Dufresne
2017-05-27Fixed #28249 -- Removed unnecessary dict.keys() calls.Jon Dufresne
iter(dict) is equivalent to iter(dict.keys()).
2017-05-15Corrected cached_property.__get__() docstring.Simon Charette
2017-05-15Added a docstring to cached_property.__get__().Adam Alton
2017-05-10Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.UmanShahzad
2017-04-27Replaced django.utils.inspect.getargspec() with inspect.getfullargspec().Alexander Allakhverdiyev
2017-04-27Refs #27795 -- Replaced force_text() with str() in feed generatorsClaude Paroz
2017-04-27Refs #27795 -- Replaced many force_text() with str()Claude Paroz
Thanks Tim Graham for the review.
2017-04-11Fixed #28064 -- Removed double-quoting of key names in MultiValueDictKeyError.petedmarsh
2017-04-10Removed duplicate lines in slugify().Jon Dufresne
2017-04-07Made MultiValueDict.__deepcopy__()'s memo kwarg an arg.Daniel F Moisset
It's always provided.
2017-04-07Fixed #22654 -- Broken decimal validationRaphael Michel
2017-04-04Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.Tim Graham
This is a security fix.
2017-03-04Refs #27795 -- Removed unneeded force_text callsClaude Paroz
Thanks Tim Graham for the review.
2017-03-04Fixed #27900 -- Made escapejs escape backticks for use in ES6 template literals.Tim Graham
2017-02-24Fixed #27879 -- Fixed crash if enclosures aren't provided to ↵Pavlo Kapyshin
Atom1Feed.add_item(). Regression in 75cf9b5ac031feb8f94271c9906157c921a14520
2017-02-23Refs #11964 -- Made Q objects deconstructible.Ian Foote
2017-02-11Refs #27656 -- Updated django.utils docstring verbs according to PEP 257.Anton Samarchyan
2017-02-09Fixed #26005 -- Fixed some percent decoding cases in uri_to_iri().Chronial
2017-02-09Refs #23919 -- Removed default 'utf-8' argument for str.encode()/decode().Tim Graham
2017-02-07Refs #27795 -- Removed force_text from the template layerClaude Paroz
Thanks Tim Graham for the review.
2017-02-07Converted usage of ugettext* functions to their gettext* aliasesClaude Paroz
Thanks Tim Graham for the review.
2017-02-06Refs #27795 -- Removed force_text from templatize functionClaude Paroz
2017-02-03Refs #23919 -- Removed a Python 2 code path in force_text().Tim Graham
Reverted the obsolete fix and tests for refs #12302.
2017-02-03Removed an untested and broken branch in force_bytes() (refs #6353).Tim Graham
The new test crashed in the removed branch. It's unclear if the branch has value since c6a2bd9b962af1cdf46f964589e6023046cfa8ec didn't include tests.
generated by cgit v1.3 (git 2.53.0) at 2026-07-12 03:04:58 +0000