summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2015-01-13[1.6.x] Bumped version for 1.6.10 release.1.6.10Tim Graham
2015-01-13[1.6.x] Fixed DoS possibility in ModelMultipleChoiceField.Tim Graham
This is a security fix. Disclosure following shortly. Thanks Keryn Knight for the report and initial patch.
2015-01-13[1.6.x] Prevented views.static.serve() from using large memory on large files.Tim Graham
This is a security fix. Disclosure following shortly.
2015-01-13[1.6.x] Fixed is_safe_url() to handle leading whitespace.Tim Graham
This is a security fix. Disclosure following shortly.
2015-01-13[1.6.x] Stripped headers containing underscores to prevent spoofing in WSGI ↵Carl Meyer
environ. This is a security fix. Disclosure following shortly. Thanks to Jedediah Smith for the report.
2015-01-02[1.6.x] Post-release version bump.Tim Graham
2015-01-02[1.6.x] Bumped version for 1.6.9 release.1.6.9Tim Graham
2015-01-02[1.6.x] Updated six to 1.9.0.Tim Graham
Backport of 52f0b2b62262743d5f935ddae29428e661b5d8ea from master
2014-11-25[1.6.x] Fixed #23754 -- Always allowed reference to the primary key in the adminSimon Charette
This change allows dynamically created inlines "Add related" button to work correcly as long as their associated foreign key is pointing to the primary key of the related model. Thanks to amorce for the report, Julien Phalip for the initial patch, and Collin Anderson for the review. Backport of f9c4e14aeca7df79991bca8ac2d743953cbd095c from master
2014-11-13[1.6.x] Removed thread customizations of six which are now built-in.Tim Graham
Backport of 7ef81b5cdd4c8eda12aa7786484a0bfde00aaaa4 from master
2014-11-04[1.6.x] Updated six to 1.8.0.Tim Graham
Backport of 81477c91f6 from master
2014-10-22[1.6.x] Post-release version bump.Tim Graham
2014-10-22[1.6.x] Bump version number for bugfix release.1.6.8James Bennett
2014-10-06[1.6.x] Fixed #23604 -- Allowed related m2m fields to be references in the ↵Emmanuelle Delescolle
admin. Thanks Simon Charette for review. Backport of a24cf21722 from master
2014-09-23[1.6.x] Skipped a broken geoapp test on Oracle; refs #23504.Tim Graham
Backport of 729cd6a11a from master
2014-09-22[1.6.x] Made a GIS test work on Oracle.Tim Graham
Thanks Josh Smeaton and Claude Paroz for advice. Backport of 7add30df01 from master
2014-09-22[1.6.x] Skipped a broken GIS test on Oracle; refs #23504.Tim Graham
Backport of 828edc5ba9 from master
2014-09-22[1.6.x] Removed unnecessary order_by() from a GIS test that crashed Oracle.Tim Graham
Oracle cannot order_by() a TextField; refs #23504. Backport of 7fc13178d6 from master
2014-09-22[1.6.x] Skipped some broken tests on Oracle GIS; refs #23504.Tim Graham
Backport of 7fce7f51ef from master
2014-09-10[1.6.x] Corrected indentation in a contrib.humanize test; refs #23340.Tim Graham
Thanks Zach Borboa for the report. Backport of 96010ae15b from master
2014-09-08[1.6.x] Fixed #23431 -- Allowed inline and hidden references to admin fields.Simon Charette
This fixes a regression introduced by the 53ff096982 security fix. Thanks to @a1tus for the report and Tim for the review. refs #23329. Backport of 342ccbd from master
2014-09-06[1.6.x] Additional edits for refs #23340; thanks Loic.Tim Graham
Backport of 0a2bc6e6bd from master
2014-09-06[1.6.x] Fixed #23340 -- Corrected naturaltime docs to match behavior.Collin Anderson
Thanks zachborboa for the report and blackguest for the patch. Backport of 7353e26d5d from master
2014-09-02[1.6.x] Post release version bump.Tim Graham
2014-09-02[1.6.x] Update version number for bugfix release.1.6.7James Bennett
2014-08-30[1.6.x] Fixed #23370 -- defer() + select_related() crashed with inherited ↵Akis Kesoglou
models. Backport of 6613ea6e3f from master
2014-08-27[1.6.x] Fixed #23329 -- Allowed inherited and m2m fields to be referenced in ↵Simon Charette
the admin. Thanks to Trac alias Markush2010 and ross for the detailed reports. Backport of 3cbb759 from master
2014-08-20[1.6.x] Bumped version number post-release.Tim Graham
2014-08-20[1.6.x] Update version number for security release.1.6.6James Bennett
2014-08-20[1.6.x] Prevented data leakage in contrib.admin via query string manipulation.Simon Charette
This is a security fix. Disclosure following shortly.
2014-08-20[1.6.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on ↵Preston Holmes
REMOTE_USE change. This is a security fix. Disclosure following shortly.
2014-08-20[1.6.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file ↵Tim Graham
names. This is a security fix. Disclosure following shortly.
2014-08-20[1.6.x] Prevented reverse() from generating URLs pointing to other hosts.Florian Apolloner
This is a security fix. Disclosure following shortly.
2014-08-19[1.6.x] Fixed #22996 -- Prevented crash with unencoded query stringClaude Paroz
Thanks Jorge Carleitao for the report and Aymeric Augustin, Tim Graham for the reviews. Backport of fa02120d36 from master.
2014-08-15[1.6.x] Fixed multi geometries editing in OpenLayers widgetClaude Paroz
Backport of 457c16d0d from master.
2014-08-14[1.6.x] Fixed #23265 -- Used system-specific encoding in runserverClaude Paroz
Thanks SpaceFox for the report. Backport of 055d95fce066 from master.
2014-07-30[1.6.x] Fixed #19107 -- Restored bug fix for sending unicode email with ↵Tim Graham
Python 2.6.5 and below.
2014-07-29[1.6.x] Fixed #20292: Pass datetime objects (not formatted dates) as params ↵Shai Berger
to Oracle This seems worthwhile in its own right, but also works around an Oracle bug (in versions 10 -- 11.1) where the use of Unicode would reset the date/time formats, causing ORA-01843 errors. Thanks Trac users CarstenF for the report, jtiai for the initial patch, and everyone who contributed to the discussion on the ticket. Backport of 6983201 from master.
2014-07-24[1.6.x] Fixed #23089 -- Fixed transaction handling in two management commands.Aymeric Augustin
Previously, when createcachetable and flush operated on non-default databases, they weren't atomic. Also avoided transactional DDL and transactional truncates on databases that don't support them (refs #22308). Backport of 753a22a635, 0757e0f30d, and 6877a9d415 from master
2014-07-21[1.6.x] Replaced instances of 'his/her' with 'their'.Iain Dawson
Backport of 8fbf13a6c8 from master
2014-07-16[1.6.x] Fixed #22998 -- Updated the fast_delete logic for GFKsGavin Wahl
Backport of 6e2b82fdf6 from master
2014-07-14[1.6.x] Fixed #13794 -- Fixed to_field usage in BaseInlineFormSet.Tim Graham
Thanks sebastien at clarisys.fr for the report and gautier for the patch. Backport of 5e2c4a4bd1 from master
2014-07-05[1.6.x] Fixed various minor doc typos / references.Daniel Hahler
Backport of 67f9f385aa from master
2014-06-30[1.6.x] Fixed a French translation in contrib.authClaude Paroz
Refs #22929.
2014-06-24[1.6.x] Improved documentation for QueryDict.Duncan Parkes
Backport of 7f4e2ef1e9 from master
2014-06-20[1.6.x] Fixed #22514 -- Prevented indexes on virtual fields [postgres].Vlastimil Zíma
Backport of 78c32f1caa from master
2014-06-03[1.6.x] Removed erroneous trailing comma in OLMapWidget.js.Egor Semiguzov
Backport of c5226eb72a from master
2014-05-31[1.6.x] Made an aggregate test pass with spatialite backendClaude Paroz
backends.tests.SqliteAggregationTests was failing with spatialite. Backport of 550b6195ed from master
2014-05-28[1.6.X] Added missing commas to list of stringsAlasdair Nicol
2014-05-16[1.6.x] Fixed #22579 -- Corrected validation for email to reject trailing slashErik Romijn
Backport of 424fe76349a2e34eafef13c2450a7a1f4d3115a6 from master.