| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-09-07 | Refs #26956 -- Allowed is_safe_url() to validate against multiple hosts | Jon Dufresne | |
| 2016-08-31 | Fixed #25181 -- Added localdate() function to get date in a different time zone. | Jon Dufresne | |
| Thanks Konrad Świat for the original patch. | |||
| 2016-08-31 | Fixed #27154 -- Allowed comparing CallableBool with bitwise or. | Olexander Yermakov | |
| Thanks Tim for the review. | |||
| 2016-08-25 | Fixed #27067 -- Deprecated string_concat() in favor of format_lazy(). | Mattias Loverot | |
| 2016-08-24 | Fixed #26866 -- Added format_lazy function | Mattias Loverot | |
| Added format_lazy function to django.utils.text module. Useful when dealing with relative complex lazy string concatenations (e.g. in urls.py when translating urls in regular expressions). | |||
| 2016-08-19 | Fixed #26902 -- Allowed is_safe_url() to require an https URL. | Przemysław Suliga | |
| Thanks Andrew Nester, Berker Peksag, and Tim Graham for reviews. | |||
| 2016-08-11 | Fixed #27034 -- Made makemessages independent of USE_I18N | Claude Paroz | |
| Thanks Tim Graham for the review. | |||
| 2016-08-04 | Fixed #27020 -- Used a context manager to close files. | Ville Skyttä | |
| 2016-08-02 | Fixed #26988 -- Improved/clarified User.is_authenticated/anonymous ↵ | Tim Graham | |
| compatibility. Thanks marktranchant for the report and review. | |||
| 2016-07-14 | Fixed #26656 -- Added duration (timedelta) support to DjangoJSONEncoder. | Will Hardy | |
| 2016-06-22 | Fixed #25920 -- Added support for non-uniform NUMBER_GROUPING. | jasisz | |
| 2016-06-17 | Refs #26601 -- Improved backwards-compatibility of DEP 5 middleware ↵ | Carl Meyer | |
| exception handling. | |||
| 2016-06-13 | Fixed #26746 -- Fixed handling of zero priority in Accept-Language header ↵ | Vytis Banaitis | |
| parsing. | |||
| 2016-06-11 | Fixed #26744 -- Fixed a typo in regex for Accept-Language header parsing. | Vytis Banaitis | |
| 2016-06-08 | Fixed #26705 -- Fixed plural versions of languages not supported by Django. | Thejaswi Puthraya | |
| 2016-06-07 | Fixed #10107 -- Allowed using mark_safe() as a decorator. | Scott Vitale | |
| Thanks ArcTanSusan for the initial patch. | |||
| 2016-06-04 | Fixed #24781 -- Fixed repr() for lazy objects. | Chesco Igual | |
| 2016-05-30 | Fixed #26653 -- Made SyndicationFeed.latest_post_date() return time in UTC. | Ketan Bhatt | |
| 2016-05-28 | Added RemovedInDjango21Warning | Tim Graham | |
| 2016-05-17 | Fixed #26601 -- Improved middleware per DEP 0005. | Florian Apolloner | |
| Thanks Tim Graham for polishing the patch, updating the tests, and writing documentation. Thanks Carl Meyer for shepherding the DEP. | |||
| 2016-05-12 | Fixed #21231 -- Enforced a max size for GET/POST values read into memory. | Andre Cruz | |
| Thanks Tom Christie for review. | |||
| 2016-05-10 | Fixed #24046 -- Deprecated the "escape" half of utils.safestring. | Tim Graham | |
| 2016-05-10 | Stopped truncating AdminEmailHandler message subjects | Claude Paroz | |
| Refs #26572, #17281. The RFC doesn't limit total length, just the line length which is already taken care of by Python itself. Thanks Tim Graham for the review. | |||
| 2016-05-10 | Fixed #26580 -- Updated references to obsolete RFC 2822. | Vasiliy Faronov | |
| Didn't rename django.utils.feedgenerator.rfc2822_date() as some external code may rely on it. | |||
| 2016-05-03 | Fixed #26567 -- Updated references to obsolete RFC2616. | Vasiliy Faronov | |
| Didn't touch comments where it wasn't obvious that the code adhered to the newer standard. | |||
| 2016-04-20 | Fixed #26281 -- Added a helpful error message for an invalid format ↵ | Marko Benko | |
| specifier to dateformat.format(). | |||
| 2016-04-09 | Fixed #25847 -- Made User.is_(anonymous|authenticated) properties. | Jeremy Lainé | |
| 2016-04-08 | Fixed E128 flake8 warnings in django/. | Tim Graham | |
| 2016-04-06 | Removed unused django.utils.http.PROTOCOL_TO_PORT. | Tim Graham | |
| Unused since b0c56b895fd2694d7f5d4595bdbbc41916607f45. | |||
| 2016-04-04 | Fixed W503 flake8 warnings. | Tim Graham | |
| 2016-03-26 | Refs #18239 -- Removed an obsolete workaround for bugs in HTMLParser. | Tim Graham | |
| 2016-03-23 | Fixed #26378 -- Allowed a left byte of zero in mixed IPv4/IPv6 validation. | Amine Yaiche | |
| 2016-03-08 | Reused the DjangoTranslation class for the javascript_catalog view | Claude Paroz | |
| Thanks Tim Graham and Cristiano Coelho for the reviews. Refs #26328, #26319. | |||
| 2016-03-04 | Added safety to URL decoding in is_safe_url() on Python 2 | Claude Paroz | |
| The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef. | |||
| 2016-03-04 | Fixed #26308 -- Prevented crash with binary URLs in is_safe_url() | Claude Paroz | |
| This fixes a regression introduced by c5544d28923. Thanks John Eskew for the reporti and Tim Graham for the review. | |||
| 2016-03-01 | Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth. | Mark Striemer | |
| This is a security fix. | |||
| 2016-02-25 | Fixed #26269 -- Prohibited spaces in is_valid_ipv6_address(). | Nick Malakhov | |
| 2016-02-15 | Fixed #26212 -- Made forms.FileField and translation.lazy_number() picklable. | Alexey Kotlyarov | |
| 2016-02-15 | Fixed #26193 -- Made urlize() trim multiple trailing punctuation. | Jon Dufresne | |
| 2016-02-09 | Fixed #26173 -- Prevented localize_input() from formatting booleans as numbers. | Marcin Markiewicz | |
| 2016-01-26 | Fixed #26122 -- Fixed copying a LazyObject | Ben Kraft | |
| Shallow copying of `django.utils.functional.LazyObject` or its subclasses has been broken in a couple of different ways in the past, most recently due to 35355a4. | |||
| 2016-01-25 | Fixed #26125 -- Fixed E731 flake warnings. | userimack | |
| 2016-01-23 | Fixed #26093 -- Allowed escape sequences extraction by gettext on Python 3 | Claude Paroz | |
| Thanks Sylvain Fankhauser for the report and Tim Graham for the review. | |||
| 2016-01-14 | Fixed #25999 -- Removed promotion of RemovedInNextVersionWarning to loud by ↵ | Tim Graham | |
| default. | |||
| 2016-01-13 | Refs #25769 -- Updated docs to reflect get_version() uses PEP 0440. | Tim Graham | |
| 2016-01-11 | Fixed #25684 -- Made runserver use logging for request/response output. | Flavio Curella | |
| Thanks andreif for the contributing to the patch. | |||
| 2016-01-06 | Fixed #26046 -- Fixed a crash with translations and Django-unknown language code | Claude Paroz | |
| Thanks Jens Lundstrom for the report and Tim Graham for the review. | |||
| 2016-01-05 | Replaced dict.setdefault() usage to avoid unnecessary object instantiations. | Benjamin Bach | |
| 2016-01-05 | Fixed #26024 -- Fixed regression in ConditionalGetMiddleware ETag support. | Denis Cornehl | |
| Thanks Denis Cornehl for help with the patch. | |||
| 2015-12-18 | Fixed #25915 -- Allowed language not in Django's default LANGUAGES | Claude Paroz | |
| This fixes a regression introduced by a5f6cbce07. Thanks Gavin Wahl for the report and Tim Graham for the review. | |||
