summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2013-09-15[1.5.x] Add release notes and bump version numbers for 1.5.4 security release.1.5.4James Bennett
2013-09-15[1.5.x] Ensure that passwords are never long enough for a DoS.Russell Keith-Magee
* Limit the password length to 4096 bytes * Password hashers will raise a ValueError * django.contrib.auth forms will fail validation * Document in release notes that this is a backwards incompatible change Thanks to Josh Wright for the report, and Donald Stufft for the patch. This is a security fix; disclosure to follow shortly. Backport of aae5a96d5754ad34e48b7f673ef2411a3bbc1015 from master.
2013-09-14Fixed #21102 -- pickling a QuerySet with prefetches twiceMinjong Chung
Fixed the bug that a QuerySet that prefetches related objects cannot be pickled and unpickled more than once (The second pickling attempt raises an exception). Added a new test for the queryset pickling idempotency. The bug was introduced by bac187c0d8e829fb3ca2ca82965eabbcbcb6ddd5.
2013-09-13[1.5.x] Fixed #18923 -- Corrected usage of sensitive_post_parameters in ↵Tim Graham
contrib.auth Thanks Collin Anderson for the report. Backport of 425d076d0c from master
2013-09-11[1.5.x] Bump version post-release.Tim Graham
2013-09-10[1.5.x] Bump version numbers for 1.5.3 security release.1.5.3James Bennett
2013-09-10[1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative ↵Tim Graham
paths. Thanks Rainer Koirikivi for the report and draft patch. This is a security fix; disclosure to follow shortly. Backport of 7fe5b656c9 from master
2013-09-09[1.5.x] Fixed #20707 -- Added explicit quota assignment to Oracle test userСадовский Николай
To enable testing on Oracle 12c
2013-08-22[1.5.x] Fixed #20922 -- Allowed customizing the serializer used by ↵Tim Graham
contrib.sessions Added settings.SESSION_SERIALIZER which is the import path of a serializer to use for sessions. Thanks apollo13, carljm, shaib, akaariai, charettes, and dstufft for reviews. Backport of b0ce6fe656 from master
2013-08-13Bump version post-release.Jacob Kaplan-Moss
2013-08-13Bumped version numbers for 1.5.2.Jacob Kaplan-Moss
2013-08-13Apply autoescaping to AdminURLFieldWidget.Jacob Kaplan-Moss
This is a security fix; disclosure to follow shortly.
2013-08-13Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S.Jacob Kaplan-Moss
This is a security fix; disclosure to follow shortly.
2013-07-29[1.5.x] Fixed #20774 -- Mention the new django-localflavor app as a ↵Jannis Leidel
replacement for the contrib app. Backport from master.
2013-07-28[1.5.x] Simplified smart_urlquote and added some basic tests.Florian Apolloner
Backport of b70c371fc1f18ea0c43b503122df3f311afc7105 from master.
2013-07-27[1.5.x] Optimisation in prefetch_related_objectsLuke Plant
Backport of 17559e6eb0 from master
2013-07-27[1.5.x] Fixed #19607 - prefetch_related crashLuke Plant
Thanks to av@rdf.ru and flarno11@yahoo.de for the report. Backport of 4fd94969d8 from master
2013-07-25[1.5.x] Fixed #20679 -- Corrected CachedFilesMixin.post_process docstring.Tim Graham
Thanks bmispelon for the report. Backport of 9b88dd3809 from master
2013-07-22[1.5.x] Fixed #20773 -- [gis] Fixed regression in GoogleMap outputClaude Paroz
Thanks Martyn Clement for the report and the initial patch. Backport of 27c1a7257 from master.
2013-07-13[1.5.x] Fixed #20681 -- Prevented teardown_databases from attempting to tear ↵Tim Graham
down aliases Thanks simonpercivall. Backport of d9c580306c from master
2013-07-10[1.5.x] Fixed #20075 -- Fixed session test fail when using a cache other ↵Mathijs de Bruin
than LocMemCache. As override_settings was used after the initialization of the session backend, we need to use a new session backend here. Backport of 8c1cc4b3b0 from master
2013-07-09[1.5.x] Fixed #20722 -- Fixed MemcachedCache backend get_many on Python 3.Tim Graham
Backport of 3c736207a3 from master
2013-07-07[1.5.x] Fixed #20711 -- Fixed broken link in timesince.py docstringSusanTan
Backport of d63327d843 from master.
2013-07-04[1.5.x] Fixed #19940 -- Made test.runner.setup_databases properly handle ↵Tim Graham
aliases for defau Thanks simonpercivall. Backport of 2cbd579efe from master.
2013-07-04[1.5.x] Fixed #20673 -- Clarified that HttpRequest.user uses AUTH_USER_MODEL.Tim Graham
Thanks littlepig for the report. Backport of f407f75aae from master.
2013-07-03[1.5.x] Fixed #20695 -- Fixed contrib.humanize translation syntax errorsClaude Paroz
Affected language: Mexican Spanish, Mongolian, Romanian, Turkish Translations for 1.6 and master will be refetched from Transifex. Thanks ruless at gmail.com for the report.
2013-07-03[1.5.x] Fixed #20687 -- Added documentation for django.core.signing API.Tomáš Ehrlich
Thanks Baptiste Mispelon for the suggestion. Backport of c5bc98d7e1 from master.
2013-06-29[1.5.x] Fixed #20677 - Typos in generic_inlineformset_factory docs.Tim Graham
Thanks Riley Strong for the report. Backport of 3fd0ee5b46 from master
2013-06-24[1.5.x] Fixed #20636 -- Stopped stuffing values in the settings.Aymeric Augustin
In Django < 1.6, override_settings restores the settings module that was active when the override_settings call was executed, not when it was run. This can make a difference when override_settings is applied to a class, since it's executed when the module is imported, not when the test case is run. In addition, if the settings module for tests is stored alongside the tests themselves, importing the settings module can trigger an import of the tests. Since the settings module isn't fully imported yet, class-level override_settings statements may store a reference to an incorrect settings module. Eventually this will result in a crash during test teardown because the settings module restored by override_settings won't the one that was active during test setup. While Django should prevent this situation in the future by failing loudly in such dubious import sequences, that change won't be backported to 1.5 and 1.4. However, these versions received the "allowed hosts" patch and they're prone to "AttributeError: 'Settings' object has no attribute '_original_allowed_hosts'". To mitigate this regression, this commits stuffs _original_allowed_hosts on a random module instead of the settings module. This problem shouldn't occur in Django 1.6, see #20290, but this patch will be forward-ported for extra safety. Also tweaked backup variable names for consistency.
2013-05-24[1.5.x] Rotate CSRF token on loginAndrew Godwin
Backport of 1514f17aa60772f48839130f9a5071b9ffe15213 from master
2013-05-21[1.5.x] Imported copyreg from six.movesClaude Paroz
2013-05-21[1.5.x] Fixed #20212 - __reduce__ should only be defined for Py3+.Daniel Lindsley
2013-05-21[1.5.x] Fixed prefetch_related + pickle regressionsAnssi Kääriäinen
There were a couple of regressions related to field pickling. The regressions were introduced by QuerySet._known_related_objects caching. The regressions aren't present in master, the fix was likely in f403653cf146384946e5c879ad2a351768ebc226. Fixed #20157, fixed #20257. Also made QuerySets with model=None picklable.
2013-05-20[1.5.x] Fixed #20278 -- ensured .get() exceptions do not recurse infinitelyAnssi Kääriäinen
A regression caused by d5b93d3281fe93cbef5de84a52 made .get() error reporting recurse infinitely on certain rare conditions. Fixed this by not trying to print the given lookup kwargs. Backpatch of 266c0bb23e9d64c47ace4d162e582febd5a1e336
2013-05-11[1.5.X] Fixed #20136 - Fixed and expanded the docs for loaddata and model ↵Tim Graham
signals. Thanks brandon@ and Anssi for the report. Backport of 2c62a509de from master
2013-05-10[1.5.x] Fixed #20025 -- Pointed to a MySQLdb fork for Python 3.Aymeric Augustin
Made a few minor compatibility adjustments. Backport of e81e319f from master.
2013-05-10[1.5.x] [py3] Stopped iterating on exceptions. Refs #20025.Aymeric Augustin
Backport of 86b4ac66 from master.
2013-05-07[1.5.x] Fixed #20354 -- `makemessages` no longer crashes with ↵Tai Lee
`UnicodeDecodeError` Handle the `UnicodeDecodeError` exception, send a warning to `stdout` with the file name and location, and continue processing other files. Backport of 99a6f0e77 from master.
2013-05-01[1.5.x] Fixed #19252 -- Added support for wheel packages.Florian Apolloner
Backport from master (a5becad9094e5c5403b692b9a7b3a6ffaabf64a3). Signed-off-by: Jannis Leidel <jannis@leidel.info>
2013-04-14[1.5.x] Fixed geojson detection with SpatialiteClaude Paroz
This is a partial backport of commit eb9430fc4be1. Without this, geojson support is never detected with Spatialite. Refs #20252 and #19028.
2013-04-12[1.5.x] Fixed #20237 (again) Allowed binary parameter to assertContainsClaude Paroz
Backport of b04fd579d5 from master.
2013-04-12[1.5.x] Fixed #20211: Document backwards-incompatible change in ↵Baptiste Mispelon
BoundField.label_tag Also cleaned up label escaping and consolidated the test suite regarding label_tag. Backport of ab686022f from master.
2013-04-11[1.5.x] Fixed #20237 -- Reenabled assertContains with binary parameterClaude Paroz
Thanks Baptiste Mispelon for the review. Backport of fe01404bb9 from master.
2013-04-05[1.5.x] Fixed #20207 -- Handle ManyToManyField with a unicode name correctly.Simon Charette
Backport of 216580e034.
2013-04-01[1.5.x] Fixed #20169 -- Ensured that the WSGI request's path is correctly ↵Julien Phalip
based on the `SCRIPT_NAME` environment parameter or the `FORCE_SCRIPT_NAME` setting, regardless of whether or not those have a trailing slash. Thanks to bmispelon for the review. Backport of 2f81a0ca6543f
2013-03-29[1.5.x] Fixed spelling errorsGavin Wahl
Backport of ec04fd1344 from master
2013-03-28Bumped version number post-release.Jacob Kaplan-Moss
2013-03-28Bump version numbers for 1.5.1.1.5.1Jacob Kaplan-Moss
2013-03-28Updated translations from TransifexClaude Paroz
Polish, Telugu, Georgian, Azerbaijani, Norwegian Bokmål, Basque, Dutch, Thai, Spanish (Argentina), Afrikaans.
2013-03-27[1.5.x] Fixed #20078: don't allow filtering on password in the user admin.Jacob Kaplan-Moss
Backport of 9e462f810194800af30ea19a6fb8ac5697d839b4 from master.
generated by cgit v1.3 (git 2.53.0) at 2026-10-16 18:04:10 +0000