summaryrefslogtreecommitdiff
path: root/django/utils
AgeCommit message (Collapse)Author
2021-03-22[3.2.x] Refs #31732 -- Fixed django.utils.inspect caching for bound methods.Adam Johnson
Thanks Alexandr Artemyev for the report, and Simon Charette for the original patch. Backport of 562898034f65e17bcdd2d951ac5236a1ec8ea690 from main
2021-02-19[3.2.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via ↵Nick Pope
django.utils.http.parse_qsl().
2021-02-01[3.2.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via ↵Mariusz Felisiak
archive.extract(). Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews. Thanks Wang Baohua for the report. Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master.
2021-01-19[3.2.x] Refs #32365 -- Allowed use of non-pytz timezone implementations.Paul Ganssle
Backport of 10d126198434810529e0220b0c6896ed64ca0e88 from master
2021-01-13Refs #31358 -- Added constant for get_random_string()'s default alphabet.Florian Apolloner
2021-01-05Fixed #32314 -- Fixed detection when started non-django modules with "python ↵William Schwartz
-m" in autoreloader. django.utils.autoreload.get_child_arguments() detected when Python was started with the `-m` option only for `django` module. This commit changes the logic to check __spec__, see https://docs.python.org/3/reference/import.html#main-spec Now packages can implement their own __main__ with the runserver command.
2020-12-21Fixed #32269 -- Fixed parse_duration() for negative days in ISO 8601 format.starryrbs
2020-12-21Fixed #32208 -- Allowed adding lazy() objects.Hasan Ramezani
Co-authored-by: Claude Paroz <claude@2xlibre.net>
2020-12-14Added docstring to django.utils.inspect.func_accepts_kwargs().Adam Johnson
2020-12-08Fixed #32233 -- Cleaned-up duplicate connection functionality.Florian Apolloner
2020-11-25Fixed #32223 -- Removed strict=True in Path.resolve() in autoreloader.Mariusz Felisiak
This reverts commit e28671187903e6aca2428374fdd504fca3032aee which caused permission errors when users didn't have permissions to all intermediate directories in a Django installation path. Thanks Jakub Szafrański for the report.
2020-11-19Fixed #32202 -- Fixed autoreloader argument generation for Windows with ↵Carlton Gibson
Python 3.7-.
2020-11-12Simplified TimeFormat.g().Nick Pope
2020-11-12Fixed #32149 -- Added support for years < 1000 to DateFormat.y().Sam
2020-11-05Fixed #25791 -- Implement autoreload behaviour for cached template loader.Tom Forbes
2020-11-02Protected Watchman autoreloader against busy loops.Daniel Hahler
With an error in the loop above (e.g. using query without args), this would trigger a busy loop. While this was caused due to changes to the loop itself, it seems to be just good practice to protect against this.
2020-10-30Updated MultiValueDict.update() to mirror dict.update() behavior.Nick Pope
Changes in behavior include: - Accepting iteration over empty sequences, updating nothing. - Accepting iterable of 2-tuples providing key-value pairs. - Failing with the same or comparable exceptions for invalid input. Notably this replaces the previous attempt to catch TypeError which was unreachable as the call to .items() resulted in AttributeError on non-dict objects.
2020-10-30Removed unused custom exception support for ImmutableList.Nick Pope
If the warning provided was an instance of Exception, then it would be used as-is. In practice this is untested, unused and ImmutableList is an undocumented internal datastructure.
2020-10-28Made small readability improvements.Martin Thoma
2020-10-06Removed unneeded calls to iri_to_uri() in cache key generation.Florian Apolloner
request.build_absolute_uri() already applies iri_to_uri()
2020-10-05Refs #29838, Refs #28507 -- Made make_hashable() ignore key order.Simon Charette
2020-09-14Fixed #31789 -- Added a new headers interface to HttpResponse.Tom Carrick
2020-09-07Fixed #31985 -- Corrected salted_hmac()'s docstring about supported algorithms.Francisco Couzo
salted_hmac() validates supported algorithms by checking hashlib methods.
2020-09-03Refs #21231 -- Backport urllib.parse.parse_qsl() from Python 3.8.Nick Pope
2020-08-26Fixed #31905 -- Made MiddlewareMixin call ↵Michael Galler
process_request()/process_response() with thread sensitive. Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2020-07-30Bumped minimum isort version to 5.1.0.David Smith
Fixed inner imports per isort 5. isort 5.0.0 to 5.1.0 was unstable.
2020-07-16Fixed #31623 -- Allowed specifying number of adjacent time units in ↵Tim Park
timesince()/timeuntil().
2020-07-06Fixed #31732 -- Cached callables signatures in django.utils.inspect methods.Tim Park
2020-06-22Refs #5691 -- Made cache keys independent of USE_L10N.Claude Paroz
This mostly reverts af1893c4ff8fdbf227a43a559d90bb1c1238b01a.
2020-06-18Fixed #31716 -- Fixed detection of console scripts in autoreloader on Windows.Tom Forbes
2020-06-04Fixed #30134 -- Ensured unlocalized numbers are string representation in ↵Claude Paroz
templates.
2020-06-01Fixed #31570 -- Corrected translation loading for apps providing territorial ↵Carlton Gibson
language variants with different plural equations. Regression in e3e48b00127c09eafe6439d980a82fc5c591b673. Thanks to Shai Berger for report, reproduce and suggested fix.
2020-05-29Fixed #28694 -- Made django.utils.text.slugify() strip dashes and underscores.David Smith
2020-05-29Corrected slugify()'s docstring.David Smith
2020-05-13Updated logging calls to use arguments instead of string interpolation.François Freitag
2020-05-13Advanced deprecation warnings for Django 3.2.Mariusz Felisiak
2020-05-12Fixed E128, E741 flake8 warnings.Mariusz Felisiak
2020-05-11Refs #30116 -- Simplified regex match group access with Match.__getitem__().Jon Dufresne
The method has been available since Python 3.6. The shorter syntax is also marginally faster.
2020-05-04Refs #30372 -- Stopped watching built-in Django translation files by ↵Tom Forbes
auto-reloader.
2020-04-27Removed unnecessary tuple wrapping of single format string argument.François Freitag
2020-04-20Capitalized Unicode in docs, strings, and comments.Jon Dufresne
2020-04-16Fixed #29329 -- Made datetime logging from runserver more consistent.Hasan Ramezani
Setting default_msec_format=None will make it the same, unfortunately it's not supported by Python, see https://bugs.python.org/issue40300.
2020-03-31Fixed #30864 -- Doc'd classproperty decorator.Deep Sukhwani
2020-03-18Fixed #31224 -- Added support for asynchronous views and middleware.Andrew Godwin
This implements support for asynchronous views, asynchronous tests, asynchronous middleware, and an asynchronous test client.
2020-03-11Fixed typo in django/utils/crypto.py.Mariusz Felisiak
2020-03-11Fixed #31359 -- Deprecated get_random_string() calls without an explicit length.Claude Paroz
2020-03-10Fixed #30439 -- Added support for different plural forms for a language.Claude Paroz
Thanks to Michal Čihař for review.
2020-03-05Fixed #31327 -- Deprecated providing_args argument for Signal.Jon Dufresne
2020-02-26Fixed #28280 -- Prevented numberformat.format() from formatting large/tiny ↵Hasan Ramezani
floats in scientific notation.
2020-02-18Refs #26601 -- Deprecated passing None as get_response arg to middleware ↵Claude Paroz
classes. This is the new contract since middleware refactoring in Django 1.10. Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
generated by cgit v1.3 (git 2.53.0) at 2026-07-06 11:22:41 +0000