summaryrefslogtreecommitdiff
path: root/django/utils
AgeCommit message (Collapse)Author
2023-02-01[4.0.x] Fixed CVE-2023-23969 -- Prevented DoS with pathological values for ↵Nick Pope
Accept-Language. The parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large. Accept-Language headers are now limited to a maximum length in order to avoid this issue.
2022-02-08[4.0.x] Refs #33476 -- Refactored code to strictly match 88 characters line ↵Mariusz Felisiak
length. Backport of 7119f40c9881666b6f9b5cf7df09ee1d21cc8344 from main.
2022-02-08[4.0.x] Refs #33476 -- Reformatted code with Black.django-bot
Backport of 9c19aff7c7561e3a82978a272ecdaad40dda5c00 from main.
2021-10-20[4.0.x] Fixed #33043 -- Made method_decorator() preserve wrapper assignments.Vinay Karanam
Regression in f434f5b84f7fcea9a76a551621ecce70786e2899. Backport of 8806e8809e023017e6958b9fa0bbd960938e0a91 from main
2021-09-29[4.0.x] Fixed #33027 -- Made autoreloader pass -X options.Chenyang Yan
Backport of 36d54b7a142689e0f882338159bca879d8b6d783 from main
2021-09-16Fixed #32365 -- Made zoneinfo the default timezone implementation.Carlton Gibson
Thanks to Adam Johnson, Aymeric Augustin, David Smith, Mariusz Felisiak, Nick Pope, and Paul Ganssle for reviews.
2021-09-16Fixed #33107 -- Fixed import_string() crash on not fully initialized modules.Mariusz Felisiak
Regression in ecf87ad513fd8af6e4a6093ed918723a7d88d5ca. Thanks Collin Anderson for the report.
2021-09-14Fixed #32873 -- Deprecated settings.USE_L10N.Claude Paroz
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-09-10Fixed #33099 -- Improved performance of import_string().yujin
This improves performance of import_string() by avoiding multiple imports for the same path. Thanks Andrew Godwin and Keryn Knight for the implementation idea.
2021-08-30Fixed #32992 -- Restored offset extraction for fixed offset timezones.Carlton Gibson
Regression in 10d126198434810529e0220b0c6896ed64ca0e88.
2021-08-06Refs #32956 -- Corrected spelling of daylight saving time.David Smith
AP Stylebook: Saving not savings, no hyphen, and lowercase.
2021-08-05Refs #32986 -- Moved TRANSLATOR_COMMENT_MARK to ↵Chris Jerdonek
django.utils.translation.template.
2021-07-30Refs #32956 -- Updated words ending in -wards.David Smith
AP styleguide: Virtually none of the words ending with -wards end with an s.
2021-07-29Fixed 32956 -- Lowercased spelling of "web" and "web framework" where ↵David Smith
appropriate.
2021-07-20Refs #32940 -- Removed unnecessary branch in Node.add().Keryn Knight
The "data in self.children" branch was causing data.__eq__ to be called for each entries in "self.children" which resulted in a huge slowdown during queryset construction. It's purpose was to prevent queries of the form Model.objects.filter(foo='bar').filter(foo='bar') from resulting in WHERE foo='bar' AND foo='bar' but it's not covered by the suite and has arguable performance benefits since it's not very common and SQL engines are usually very good at folding/optimizing these. See also #32632 for prior discussion around comparing data to the Node's children. Co-authored-by: Nick Pope <nick@nickpope.me.uk>
2021-07-20Refs #32940 -- Removed Node.add()'s unused squash parameter.Keryn Knight
Unused since its introduction in d3f00bd5706b35961390d3814dd7e322ead3a9a3. Co-authored-by: Nick Pope <nick@nickpope.me.uk>
2021-07-19Fixed #32941 -- Removed get_format_modules()'s unused reverse argument.Keryn Knight
Unused since 0d8b523422fda71baa10807d5aebefd34bad7962.
2021-07-19Removed unnecessary tuple construction in Node.__eq__().Nick Pope
2021-07-13Simplified django.utils.dateformat methods.Nick Pope
This removes unnecessary format('O') call, remove unnecessary method calls for simple cases in TimeFormat, and simplifies time zone handling in TimeFormat.
2021-07-07Fixed #32904 -- Made parse_time() more strict.abhiabhi94
Thanks Keryn Knight for the report.
2021-07-07Fixed #32866 -- Fixed trimming trailing punctuation from escaped string in ↵Shipeng Feng
urlize().
2021-07-06Fixed #32892 -- Optimized django.utils.dateparse functions by using ↵Keryn Knight
fromisoformat().
2021-06-30Refs #32880 -- Moved logging reference to new document.Daniele Procida
Completed a first step in moving reference and how-to material out of the topic document.
2021-06-24Fixed #32727 -- Allowed spaces before time zone offset in parse_datetime().Ben Wilber
2021-06-21Fixed #32859 -- Simplified compress_string() by using gzip.compress().Illia Volochii
2021-06-05Fixed #32810 -- Optimized django.utils.formats.number_format() a bit.Mateo Radman
Pre-calculate use_l10n for get_format() calls.
2021-05-29Fixed typos in comments and docs.David Sanders
2021-05-27Fixed #32789 -- Made feeds emit elements with no content as self-closing tags.Mohammadreza Varasteh
2021-05-26Fixed #32669 -- Fixed detection when started non-django modules which aren't ↵Moriyoshi Koizumi
packages with "python -m" in autoreloader.
2021-05-26Fixed #32783 -- Fixed crash of autoreloader when __main__ module doesn't ↵Mariusz Felisiak
have __spec__ attribute. Regression in ec6d2531c59466924b645f314ac33f54470d7ac3. Thanks JonathanNickelson for the report.
2021-05-13Fixed #32717 -- Fixed filtering of querysets combined with the | operator.Simon Charette
Address a long standing bug in a Where.add optimization to discard equal nodes that was surfaced by implementing equality for Lookup instances in bbf141bcdc31f1324048af9233583a523ac54c94. Thanks Shaheed Haque for the report.
2021-05-12Fixed #32738 -- Deprecated django.utils.datetime_safe module.Nick Pope
2021-05-12Refs #32738 -- Added sanitize_strftime_format() to replace datetime_safe.Nick Pope
2021-05-12Refs #32738, Refs #29600, Refs #29595 -- Removed unused ↵Nick Pope
django.utils.datetime_safe.time(). Unused since c72dde41e603093ab0bb12fa24fa69cfda0d35f9.
2021-05-12Fixed #32366 -- Updated datetime module usage to recommended approach.Nick Pope
- Replaced datetime.utcnow() with datetime.now(). - Replaced datetime.utcfromtimestamp() with datetime.fromtimestamp(). - Replaced datetime.utctimetuple() with datetime.timetuple(). - Replaced calendar.timegm() and datetime.utctimetuple() with datetime.timestamp().
2021-05-12Fixed #32735 -- Made DateFormat.Y() return a zero-padded year.Nick Pope
2021-05-07Fixed #32712 -- Deprecated django.utils.baseconv module.Hasan Ramezani
2021-05-05Fixed #32479 -- Added fallbacks to subsequent language codes in translations.Maxim Beder
Thanks Claude Paroz and Nick Pope for reviews.
2021-05-04Refs #32074 -- Removed usage of deprecated Thread.setDaemon().Karthikeyan Singaravelan
Thread.setDaemon() was deprecated in Python 3.10 and will be removed in Python 3.12.
2021-05-04Refs #32074 -- Used asyncio.get_running_loop() instead of get_event_loop().Mariusz Felisiak
Using asyncio.get_event_loop() when there is no running event loop was deprecated in Python 3.10, see https://bugs.python.org/issue39529.
2021-05-04Fixed CVE-2021-31542 -- Tightened path & file name sanitation in file uploads.Florian Apolloner
2021-05-04Fixed #32709 -- Corrected examples in django/utils/baseconv.py docstring.pythonwood
2021-04-29Fixed capitalization of "ECMAScript" and "JavaScript".Nick Pope
2021-04-10Fixed #31937 -- Eased translation of time strings in some languages.Claude Paroz
2021-04-09Refs #32074 -- Removed usage of Python's deprecated distutils.version package.Mariusz Felisiak
The distutils package was formally deprecated in Python 3.10 and will be removed in Python 3.12.
2021-04-01Fixed #32316 -- Deferred accessing __file__.William Schwartz
Deferred accessing the module-global variable __file__ because the Python import API does not guarantee it always exists—in particular, it does not exist in certain "frozen" environments. The following changes advanced this goal. Thanks to Carlton Gibson, Tom Forbes, Mariusz Felisiak, and Shreyas Ravi for review and feedback.
2021-04-01Fixed #32610 -- Fixed get_git_changeset() on Linux.Mariusz Felisiak
shell=True is required on Windows. Unfortunately passing a sequence to subprocess.run() behaves differently on Linux, i.e. the first item specifies the command string, and any additional items are treated as additional arguments to the shell itself. https://docs.python.org/3.9/library/subprocess.html#subprocess.Popen https://docs.python.org/3.9/library/subprocess.html#converting-an-argument-sequence-to-a-string-on-windows Regression in a44d80f88e22eda24dacef48e368895ebea96635.
2021-03-26Refs #32355 -- Corrected comments about Python's _NamespacePath.William Schwartz
_NamespacePath supports indexing in Python 3.8+.
2021-03-23Optimized django.utils.text.capfirst().Nick Pope
Unconditionally coercing to str type twice is expensive.
2021-03-22Refs #31732 -- Fixed django.utils.inspect caching for bound methods.Adam Johnson
Thanks Alexandr Artemyev for the report, and Simon Charette for the original patch.
generated by cgit v1.3 (git 2.53.0) at 2026-07-13 17:18:37 +0000