summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2011-09-11[1.2.X] Bump to 1.2.7, refs #16804.1.2.7James Bennett
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16801 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-09-10[1.2.X] Bump to 1.2.6 for security release.1.2.6James Bennett
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16769 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-09-10[1.2.X] Altered the behavior of URLField to avoid a potential DOS vector, ↵Russell Keith-Magee
and to avoid potential leakage of local filesystem data. A security announcement will be made shortly. Backport of r16760 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16766 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-09-10[1.2.X] Corrected an issue which could allow attackers to manipulate session ↵Russell Keith-Magee
data using the cache. A security announcement will be made shortly. Backport of r16759 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16765 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-09-10[1.2.X] Added protection against spoofing of X_FORWARDED_HOST headers. A ↵Russell Keith-Magee
security announcement will be made shortly. Backport of r16758 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16764 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-24[1.2.X] Ensure stdin is a tty before handing it to termios, so as to prevent ↵Karen Tracey
prolems when running under IDEs. r15911 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15912 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-19[1.2.X] Fixed #15565: Ensure terminal echo is on after reloader reloads ↵Karen Tracey
(something turns it off on some systems if reload happens while at a pdb prompt). Thanks for the report zimnyx. r15883 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15884 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-19[1.2.X] Fixed #13686 -- Ensure that memcache handling of unicode values in ↵Russell Keith-Magee
add() and set_many() is consistent with the handling provided by get() and set(). Thanks to nedbatchelder for the report, and to jbalogh, accuser and Jacob Burch for their work ont the patch. Backport of r15880 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15881 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-17[1.2.X] Fixed #15622 -- Clear content type cache to avoid problems with ↵Russell Keith-Magee
subsequence TransactionTestCases. Thanks to zyga for the report Backport of r15867 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15868 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-17[1.2.X] Fixed #15142 -- Force test views to be non-cached so that projects ↵Russell Keith-Magee
with caching middleware enabled don't cause test failures. Thanks to jsdalton for the report and patch Backport of r15865 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15866 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-17[1.2.X] Fixed #15569 -- Corrected the numbering updates to inlines when rows ↵Russell Keith-Magee
are added and deleted. Thanks to sbaechler for the report, to Arthur de Jong and mk for the work on the patch, and to Karen Tracey for the last minute testing help. Backport of r15862 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15863 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-16[1.2.X] Add `setUp` and `tearDown` methods to the geographic feed and ↵Justin Bronn
sitemap tests to ensure `Site` exists for tests. Backport of r15856 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15857 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-16[1.2.X] Fixed #15194 -- Add OSGeo4W DLL library names to GEOS and GDAL ↵Justin Bronn
interfaces. Thanks, master for ticket and initial patch. Backport of r15852 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15853 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-16[1.2.X] Fixed #15533 -- Now use 3857 as spherical mercator projection ↵Justin Bronn
instead of deprecated 900913 on platforms that support it. Thanks to cnorthwood for bug report and Christopher Schmidt for OpenLayers JavaScript workaround. Backport of r15845 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15846 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-15[1.2.X] Fixed #15617 - CSRF referer checking too strictLuke Plant
Thanks to adam for the report. Backport of [15840] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15844 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-15[1.2.X] Previous changeset did not include new test data, stupid ↵Justin Bronn
hgsubversion. Refs #15378. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15815 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-15[1.2.X] Fixed #15378 -- Now properly handle OGR layers that have features ↵Justin Bronn
with invalid geometries. Thanks, kunitoki for bug report and initial patch. Backport of r15813 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15814 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-14[1.2.X] Fixed #9213 - Added check to prevent inactive users from resetting ↵Carl Meyer
their password. Thanks to John Scott for report and draft patch, and Evgeny Fadeev for final patch with test. Backport of r15805 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15808 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-14[1.2.X] Fixed brittle tests that broke with release of GDAL 1.8.Justin Bronn
Backport of r15806 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15807 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-14[1.2.X] Fixed an invalid import in the GeoDjango 3D tests.Justin Bronn
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15804 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-10[1.2.X] Fixed #15559 - distinct queries introduced by [15607] cause errors ↵Luke Plant
with some custom model fields This patch just reverts [15607] until a more satisfying solution can be found. Refs #11707 Backport of [15791] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15792 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-09[1.2.X] Fixed another case-sensitivity bug in Oracle introspection. This ↵Ian Kelly
one was harmless, but it was causing an irritating test failure. Backport of r15787 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15788 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-09[1.2.X] Fixed a case-sensitivity bug in Oracle introspection that was ↵Ian Kelly
preventing inspectdb from identifying foreign keys. Backport of r15785 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15786 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-07[1.2.X] Fixed #15554 -- Corrected test failure in contenttypes when default ↵Russell Keith-Magee
site isn't example.com. Thanks to twil for the report, and PaulM for the patch. Backport of r15766 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15767 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #11206 -- Ensure that the floatformat template filter doesn't ↵Ramiro Morales
switch to scientific notation when asked to format a zero value with more than six decimal places. Thanks Tai Lee for the report and fix and Facundo Batista for his help when Decimal module expertise was needed. Backport of [15736] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15738 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #15543 -- Tweaked change from r15696 to not use 'if' syntax ↵Ramiro Morales
introduce in Python 2.5. Thanks to an anonymous reporter for the heads up. Backport of [15731] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15732 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #12252 -- Ensure that queryset unions are commutative. Thanks ↵Russell Keith-Magee
to benreynwar for the report, and draft patch, and to Karen and Ramiro for the review eyeballs and patch updates. Backport of r15726 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15727 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #12475 -- Fixed an edge case with hidden fields in ModelAdmin ↵Jannis Leidel
changelists when used in conjunction with list_display_links or list_editable. Thanks, Simon Meers, Julien Phalip, Karen and master. Backport from trunk (r15722). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15724 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #13411 -- Made sure URL fragments are correctly handled by the ↵Jannis Leidel
next_redirect utility of the comments apps. Thanks, timesong, dpn and Julien Phalip. Backport from trunk (r15720). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15721 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #15502 -- Ensure that nested TemplateDoesNotExist errors are ↵Russell Keith-Magee
propegated with a meaningful error message when loaded using select_template. Thanks to jaylett for the report, and GDorn for the patch. Backport of r15717 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15718 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #15530 -- Corrected typo in template loader deprecation ↵Russell Keith-Magee
message. Thanks to msaelices for the report and patch. Backport of r15714 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15716 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #15532 -- Clarified the error message for unknown auth ↵Russell Keith-Magee
backends. Thanks to kmike for the report. Backport of r15713 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15715 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-02[1.2.X] Fixed #15535 -- Stopped the blocktrans template tag from raising a ↵Jannis Leidel
KeyError if an included variable can't be found in the context. Thanks, melinath. Backport from trunk (r15709). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15710 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-02[1.2.X] Fixed #11223 -- Fixed logout view to use the 'next' GET parameter ↵Jannis Leidel
correctly as described in the docs, while only allowing redirection to the same host. Backport from trunk (r15706). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15707 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-01[1.2.X] Fixed #717 - If-Modified-Since handling should compare dates ↵Luke Plant
according to RFC 2616 Thanks to Maniac for the report, julienb for the initial patch, and especially to aaugustin for the final patch and tests. Backport of [15696] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15697 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-28[1.2.X] Fixed #15520 -- Fixed incompatibility with email module shipped with ↵Ramiro Morales
Python 2.4 introduced in r15669. Thanks dobcey for the report. Backport of [15675] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15676 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-28[1.2.X] Fixed #13433 -- Changed default behavior of Django email message ↵Ramiro Morales
wrappers to not mangle lines starting with 'From '. Thanks Leo for the report and patch. Backport of [15669] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15670 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-27[1.2.X] Fixed #15368 - test failures due to regression with RequestContextLuke Plant
Thanks to cyberdelia for the reports on this. Backport of [15660] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15661 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-26[1.2.X] Fixed #10918 -- Ensure that the search widget on a raw_id_admin uses ↵Russell Keith-Magee
the right field name when the ForeignKey has a to_field definition. Thanks to David Cramer for the report, Collin Anderson for the fix, and Julien Phalip for the test. Backport of r15657 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15659 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-26[1.2.X] Fixed #11447 -- Ensured that ForeignKey widgets in a list-editable ↵Russell Keith-Magee
admin changelist won't wrap split the widget. Thanks to patrick@vonautomatisch.at for the report, and Julien Phalip for the patch. Backport of r15656 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15658 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-26[1.2.X] Fixed #15424 -- Corrected lookup of callables listed in admin ↵Ramiro Morales
inlines' `readonly_fields` by passing the right ModelAdmin (sub)class instance when instantiating inline forms admin wrappers. Also, added early validation of its elements. Thanks kmike for the report and Karen for the patch fixing the issue. Backport of [15650] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15651 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-25[1.2.X] Fixed #15491 -- Added a CDATA block and closed a stray tag in the ↵Russell Keith-Magee
comments HTML. Thanks to Jonathan Slenders for the report. Backport of r15642 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15644 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-25[1.2.X] Fixed #15490 -- Added some missing semicolons in admin javascript. ↵Russell Keith-Magee
Thanks to Jonathan Slenders for the report and patch. Backport of r15641 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15643 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-24[1.2.X] Prevented non-admin users from accessing the admin redirect shortcut.Jacob Kaplan-Moss
If the admin shortcut view (e.g. /admin/r/<content-type>/<pk>/) is publically-accessible, and if a public users can guess a content-type ID (which isn't hard given that they're sequential), then the redirect view could possibly leak data by redirecting to pages a user shouldn't "know about." So the redirect view needs the same protection as the rest of the admin site. Thanks to Jason Royes for pointing this out. Backport of [15639] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15640 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-24[1.2.X] Fixed #14012 (again) -- Admin app: Don't show the full user edition ↵Ramiro Morales
view after adding a user in a FK popup. Thanks dburke for reporting this regression introduced in r14628. Backport of [15637] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15638 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-22[1.2.X] Fixed #15371 -- Ensure that a superuser created with the ↵Russell Keith-Magee
createsuperuser management command with --noinput has an invalid password, not a blank password. Thanks to yishaibeeri for the report and patch. Backport of r15631 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15632 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-22[1.2.X] Fixed #13510 -- Corrected colspan of non-field-specific error ↵Ramiro Morales
messages in admin app tabular inlines so it isn't greater than the actual number of field cells. Thanks KyleMac for the report and Julien Phalip for the patch fixing the issue. Backport of [15626] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15627 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed error that was introduced in [15601] causing lots of test ↵Luke Plant
failures on 1.2.X In 1.2.X and earlier, the test client adds the 'template' attribute to responses, while in trunk it adds 'templates', hence the confusion. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15622 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #11058 - list_display_links doesn't allow callables not ↵Luke Plant
defined in the model Thanks to dvine for the report and julien for the patch. Backport of [15619] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15621 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21Remove reference to use_l10n which snuck in from a backport from trunk.Chris Beaven
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15618 bcc190cf-cafb-0310-a4f2-bffc1f526a37
generated by cgit v1.3 (git 2.53.0) at 2026-07-13 23:42:02 +0000