summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2011-02-09[1.2.X] Bump version number for impendign security release.1.2.5James Bennett
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15473 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-09[1.2.X] Fixed security issue in AdminFileWidget. Disclosure and release ↵Carl Meyer
forthcoming. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15471 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-09[1.2.X] Fixed a security issue in the file session backend. Disclosure and ↵Alex Gaynor
new release forthcoming. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15468 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-09[1.2.X] Fixed a security issue in the CSRF componenent. Disclosure and new ↵Alex Gaynor
release forthcoming. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15465 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-08[1.2.X] Fixed #13815 -- Ensure that reverse exclude lookups on nullable ↵Russell Keith-Magee
foreign keys exclude null values. Thanks to bpeschier for the report and patch. Backport of r15458 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15460 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-08[1.2.X] Fixed #15116 -- Strip ordering clause from in_bulk() queries, since ↵Russell Keith-Magee
ordering information will be lost. Thanks to lamby for the report and patch. Backport of r15457 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15459 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-08[1.2.X] Fixed #10573 -- Corrected autofocus problem in admin when the first ↵Russell Keith-Magee
widget displayed is a multiwidget. Thanks to rduffield for the report, and to Ramiro and Julien Phalip for the patch. Backport of r15452 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15456 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-08[1.2.X] Fixed #15234 -- Ensure that years in a date heirarchy don't use ↵Russell Keith-Magee
commas for thousand separators, regardless of the value of USE_THOUSAND_SEPARATOR. Thanks to Julien Phalip for the report and patch. Backport of r15451 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15455 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-08[1.2.X] Fixed #15175 -- Ensured that Chliean RUT checksum letters aren't ↵Russell Keith-Magee
case sensitive. Thanks to rvimer for the report, and to ersame for the patch. H: Enter commit message. Lines beginning with 'HG:' are removed. Backport of r15450 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15454 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-06[1.2.X] Fixed #13674 -- Ensure that labels on added inlines fields have the ↵Russell Keith-Magee
right 'for' attribute. Thanks to Jonas for the report, and Julien Phalip for the patch. Backport of r15436 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15437 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed small problem in backport of [15418] tests changes to 1.2.X ↵Ramiro Morales
([15419]). Refs #15111. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15429 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed #15226 - Made SelectDateWidget render the label tag associated ↵Ramiro Morales
with the correct dropdown sub-widget when USE_L10N is active and non-English locale is in use. Backport of [15427] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15428 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed #15167 -- Ensure that non-form errors are always part of an ↵Russell Keith-Magee
ErrorList. Thanks to Harm Geerts for the report and patch. Backport of r15424 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15425 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed #14303 -- Ensure that the ids created for new inlines are ↵Russell Keith-Magee
unique after interstitial deletions have occurred. Thanks to m0nonoke for the report, and Julien Phalip for the patch. Backport of r15422 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15423 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed #14830 -- Ensure that radio buttons on inlines preserve their ↵Russell Keith-Magee
default value. Thanks to Julien Phalip for the report and patch, and to antoinemartin for the diagnosis. Backport of r15420 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15421 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed #15111 -- Ensured that the auth, contenttypes and sitemaps ↵Russell Keith-Magee
tests will run when the sites app isn't installed. Thanks to Waldemar Kornewald for the report and draft patch. Backport of r15418 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15419 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-05[1.2.X] Fixed #13968 -- Fixed SelectDateWidget processing of an invalid date ↵Ramiro Morales
input value when USE_L10N is on, for consistency with its behavior when USE_L10N=False (now the form field reports the validation error in both cases). Thanks mitar for the report. Backport of [15416] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15417 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-04[1.2.X] Fixed #14046 -- Made {% include %} behave the same, regardless of ↵Russell Keith-Magee
whether the template included is named by variable or constant string. Thanks to defcube for the report, and George Karpenkov for the draft patch. Backport of r15413 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15414 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-04[1.2.X] Fixed #15181 -- Ensure that special characters are escaped when ↵Russell Keith-Magee
querying for the URL of an uploaded file. Thanks to e.generalov for the report and patch. Backport of r15409 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15410 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-04[1.2.X] Fixed #15016 -- Ensured that the messages tests are isolated from ↵Russell Keith-Magee
local template directories. Thanks to Gabriel Hurley for the report and patch. Backport of r15407 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15408 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-04[1.2.X] Fixed #14824 -- Corrected the handling of formats when USE_L10N is ↵Russell Keith-Magee
disabled. Thanks to nullie for the report and initial patch, and to idle for the separate report with helpful debug info. Backport of r15404 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15405 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-03[1.2.X] Fixed #15129 -- Fixed stability of data input/output L10N format ↵Ramiro Morales
modules priority order. Thanks tonnzor for the report and fix. Backport of [15402] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15403 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-02[1.2.X] Fixed #15029 -- Moved to database backends the ability to decide if ↵Ramiro Morales
two DATABASES items are different when creating temporary databases for tests. Backport of [15392] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15395 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-02[1.2.X] Fixed #15212 -- ensure that ModelAdmin.get_actions still returns a ↵Alex Gaynor
SortedDict if there are no actions. Backport of [15393]. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15394 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-02[1.2.X] Reordered the shutdown process for tests so that all tests force a ↵Russell Keith-Magee
connection close. This is required to prevent some cross-test failures. Thanks to Florian Apolloner for the report and help tracking down the problem. Backport of r14399 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15391 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-01[1.2.X] Fixed #13283 -- Corrected CACHE_MIDDLEWARE_ANONYMOUS_ONLY's bad ↵Carl Meyer
habit of setting Vary: Cookie on all responses and destroying cache efficiency. Thanks to natrius for the fix. Backport of r15381 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15382 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-31[1.2.X] Fixed #13488 -- No longer generate unhandled exceptions that may ↵Justin Bronn
occur when destructors of global GEOS I/O objects are called on process termination. Backport of r15378 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15379 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-30[1.2.X] Fixed #15187 -- Ensure that missing page emails aren't sent when ↵Russell Keith-Magee
running under debug. Thanks to Dan Carroll for the report and patch. Backport of r15363 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15365 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-30[1.2.X] Fixed #14698 -- Ensure that module_has_sumodule doesn't mistake a ↵Russell Keith-Magee
cache miss for an existent package. Thanks to Łukasz Rekucki for the report and patch, and to shields for the test case. Backport of r15362 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15364 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-29[1.2.X] Fixed #15158 -- Fixed error introduced in r15252 in rendering of the ↵Ramiro Morales
template post morten section of the 500 error debug page with loaders other than the file system or application dir loaders. Refs #15122. Thanks gsf for the report. Backport of [15360] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15361 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-28[1.2.X] Fixed #14880 - raw_id_fields in admin does not work when ↵Luke Plant
limit_choices_to dictionary has value=False Thanks to smallming for the report. Backport of [15348] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15351 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-28[1.2.X] Fixed #15103 - SuspiciousOperation with limit_choices_to and ↵Luke Plant
raw_id_fields Thanks to natrius for the report. This patch also fixes some unicode bugs in affected code. Backport of [15347] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15349 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-27[1.2.X] Fixed #15046 -- Added "CHROMEFRAME" as a user agent alias for ↵Russell Keith-Magee
various MSIE fixes. Thanks to chrj for the report and patch. Backport of r15340 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15344 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-27[1.2.X] Fixed #14823 -- Corrected bootstrapping problems with ↵Russell Keith-Magee
register_serializers. Thanks to miker985@uw.edu for the report and draft patch. Backport of r15336 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15339 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-26[1.2.X] Fixed #15161 - Corrected handling of ManyToManyField with through ↵Carl Meyer
table using to_field on its ForeignKeys. Thanks to adehnert for the report. Backport of r15330 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15331 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-26[1.2.X] Fixed #15157 -- Modified evaluation of literals surrounded by '_(' ↵Ramiro Morales
and ')' in templates to be done at render time instead of at compile time by using ugettext_lazy. Thanks Jonathan S for the report. Backport of [15327] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15328 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-26[1.2.X] Fixed #6456 - Excised FileField file deletion to avoid data loss. ↵Carl Meyer
Thanks to durdinator for the report. Backport of r15321 from trunk. Backported despite slight backwards-incompatibility due to potential for data loss. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15322 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-26[1.2.X] Fixed #13206 -- call super().__init__() in Model.__init__ to allow ↵Alex Gaynor
mixins to do things there. Backport of [15317]. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15320 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-26[1.2.X] Fixed #13159 -- properly quote aggregates in order_by. Backport of ↵Alex Gaynor
[15318]. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15319 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-25[1.2.X] Fixed #14938 - Fixed save-as-new on inline formset with new forms.Carl Meyer
Backport of r15306 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15307 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-25[1.2.X] Fixed #11319 - Added lookup support for ForeignKey.to_field. Also ↵Carl Meyer
reverted no-longer-needed model formsets workaround for lack of such support from r10756. Thanks Russell and Alex for review. Backport of r15303 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15304 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-25[1.2.X] Fixed #14796 -- Modified order of operations performed on field ↵Ramiro Morales
names by the inspectdb command so it doesn't generates model fields with names equal to Python keywords. Thanks pappjm at gmail dot com for the report, mmcnickle for the fix and Alex for simplifying the tests. Backport of r15296 and r15297 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15301 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24[1.2.X] Fixed #14149: Initialize the Oracle connection.operators at ↵Ian Kelly
connection time since some systems don't seem to like the "TRANSLATE" trick. Backport of r15299 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15300 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24[1.2.X] Updated all existing translations after changes to filesize ↵Jannis Leidel
translation strings made in [15291]. Backport from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15293 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24[1.2.X] Fixed #14240 -- Enabled localization for the filesize filter. Thanks ↵Russell Keith-Magee
to David Danier for the report and patch. Backport of r15290 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15291 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24[1.2.X] Fixed #15067 -- Modified the range checks on base36_to_int so you ↵Russell Keith-Magee
are guaranteed to always get an int, avoiding possible OverflowErrors. Thanks to Garthex for the report, jboutros for the patch, and kfrazier for the feedback. Backport of r15288 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15289 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-24[1.2.X] Fixed #14982 -- Ensure that EMPTY_CHANGELIST_VALUE is honored for ↵Russell Keith-Magee
nullable foreign keys. Thanks to marcob for the report and fix, and to sontek for the test case. Backport of r15286 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15287 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-21[1.2.X] Added a modification missed in r15241 (backport of r15239 to this ↵Ramiro Morales
branch.) git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15256 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-20[1.2.X] Fixed #15122 -- Restored reporting of the template files tried in ↵Ramiro Morales
the texmplate loader post mortem section of the TemplateDoesNotExit 500 error debug page. Thanks rdrey for reporting this regression. Backport of [15252] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15253 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-01-18[1.2.X] Refs #14661 -- Clarified the handling of initial data injected via ↵Russell Keith-Magee
custom SQL. This is BACKWARDS INCOMPATIBLE CHANGE for anyone relying on SQL-injected initial data in a test case. Backport of r15239 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15241 bcc190cf-cafb-0310-a4f2-bffc1f526a37