| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2015-01-13 | [1.6.x] Bumped version for 1.6.10 release.1.6.10 | Tim Graham | |
| 2015-01-13 | [1.6.x] Fixed DoS possibility in ModelMultipleChoiceField. | Tim Graham | |
| This is a security fix. Disclosure following shortly. Thanks Keryn Knight for the report and initial patch. | |||
| 2015-01-13 | [1.6.x] Prevented views.static.serve() from using large memory on large files. | Tim Graham | |
| This is a security fix. Disclosure following shortly. | |||
| 2015-01-13 | [1.6.x] Fixed is_safe_url() to handle leading whitespace. | Tim Graham | |
| This is a security fix. Disclosure following shortly. | |||
| 2015-01-13 | [1.6.x] Stripped headers containing underscores to prevent spoofing in WSGI ↵ | Carl Meyer | |
| environ. This is a security fix. Disclosure following shortly. Thanks to Jedediah Smith for the report. | |||
| 2015-01-02 | [1.6.x] Post-release version bump. | Tim Graham | |
| 2015-01-02 | [1.6.x] Bumped version for 1.6.9 release.1.6.9 | Tim Graham | |
| 2015-01-02 | [1.6.x] Updated six to 1.9.0. | Tim Graham | |
| Backport of 52f0b2b62262743d5f935ddae29428e661b5d8ea from master | |||
| 2014-11-25 | [1.6.x] Fixed #23754 -- Always allowed reference to the primary key in the admin | Simon Charette | |
| This change allows dynamically created inlines "Add related" button to work correcly as long as their associated foreign key is pointing to the primary key of the related model. Thanks to amorce for the report, Julien Phalip for the initial patch, and Collin Anderson for the review. Backport of f9c4e14aeca7df79991bca8ac2d743953cbd095c from master | |||
| 2014-11-13 | [1.6.x] Removed thread customizations of six which are now built-in. | Tim Graham | |
| Backport of 7ef81b5cdd4c8eda12aa7786484a0bfde00aaaa4 from master | |||
| 2014-11-04 | [1.6.x] Updated six to 1.8.0. | Tim Graham | |
| Backport of 81477c91f6 from master | |||
| 2014-10-22 | [1.6.x] Post-release version bump. | Tim Graham | |
| 2014-10-22 | [1.6.x] Bump version number for bugfix release.1.6.8 | James Bennett | |
| 2014-10-06 | [1.6.x] Fixed #23604 -- Allowed related m2m fields to be references in the ↵ | Emmanuelle Delescolle | |
| admin. Thanks Simon Charette for review. Backport of a24cf21722 from master | |||
| 2014-09-23 | [1.6.x] Skipped a broken geoapp test on Oracle; refs #23504. | Tim Graham | |
| Backport of 729cd6a11a from master | |||
| 2014-09-22 | [1.6.x] Made a GIS test work on Oracle. | Tim Graham | |
| Thanks Josh Smeaton and Claude Paroz for advice. Backport of 7add30df01 from master | |||
| 2014-09-22 | [1.6.x] Skipped a broken GIS test on Oracle; refs #23504. | Tim Graham | |
| Backport of 828edc5ba9 from master | |||
| 2014-09-22 | [1.6.x] Removed unnecessary order_by() from a GIS test that crashed Oracle. | Tim Graham | |
| Oracle cannot order_by() a TextField; refs #23504. Backport of 7fc13178d6 from master | |||
| 2014-09-22 | [1.6.x] Skipped some broken tests on Oracle GIS; refs #23504. | Tim Graham | |
| Backport of 7fce7f51ef from master | |||
| 2014-09-10 | [1.6.x] Corrected indentation in a contrib.humanize test; refs #23340. | Tim Graham | |
| Thanks Zach Borboa for the report. Backport of 96010ae15b from master | |||
| 2014-09-08 | [1.6.x] Fixed #23431 -- Allowed inline and hidden references to admin fields. | Simon Charette | |
| This fixes a regression introduced by the 53ff096982 security fix. Thanks to @a1tus for the report and Tim for the review. refs #23329. Backport of 342ccbd from master | |||
| 2014-09-06 | [1.6.x] Additional edits for refs #23340; thanks Loic. | Tim Graham | |
| Backport of 0a2bc6e6bd from master | |||
| 2014-09-06 | [1.6.x] Fixed #23340 -- Corrected naturaltime docs to match behavior. | Collin Anderson | |
| Thanks zachborboa for the report and blackguest for the patch. Backport of 7353e26d5d from master | |||
| 2014-09-02 | [1.6.x] Post release version bump. | Tim Graham | |
| 2014-09-02 | [1.6.x] Update version number for bugfix release.1.6.7 | James Bennett | |
| 2014-08-30 | [1.6.x] Fixed #23370 -- defer() + select_related() crashed with inherited ↵ | Akis Kesoglou | |
| models. Backport of 6613ea6e3f from master | |||
| 2014-08-27 | [1.6.x] Fixed #23329 -- Allowed inherited and m2m fields to be referenced in ↵ | Simon Charette | |
| the admin. Thanks to Trac alias Markush2010 and ross for the detailed reports. Backport of 3cbb759 from master | |||
| 2014-08-20 | [1.6.x] Bumped version number post-release. | Tim Graham | |
| 2014-08-20 | [1.6.x] Update version number for security release.1.6.6 | James Bennett | |
| 2014-08-20 | [1.6.x] Prevented data leakage in contrib.admin via query string manipulation. | Simon Charette | |
| This is a security fix. Disclosure following shortly. | |||
| 2014-08-20 | [1.6.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on ↵ | Preston Holmes | |
| REMOTE_USE change. This is a security fix. Disclosure following shortly. | |||
| 2014-08-20 | [1.6.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file ↵ | Tim Graham | |
| names. This is a security fix. Disclosure following shortly. | |||
| 2014-08-20 | [1.6.x] Prevented reverse() from generating URLs pointing to other hosts. | Florian Apolloner | |
| This is a security fix. Disclosure following shortly. | |||
| 2014-08-19 | [1.6.x] Fixed #22996 -- Prevented crash with unencoded query string | Claude Paroz | |
| Thanks Jorge Carleitao for the report and Aymeric Augustin, Tim Graham for the reviews. Backport of fa02120d36 from master. | |||
| 2014-08-15 | [1.6.x] Fixed multi geometries editing in OpenLayers widget | Claude Paroz | |
| Backport of 457c16d0d from master. | |||
| 2014-08-14 | [1.6.x] Fixed #23265 -- Used system-specific encoding in runserver | Claude Paroz | |
| Thanks SpaceFox for the report. Backport of 055d95fce066 from master. | |||
| 2014-07-30 | [1.6.x] Fixed #19107 -- Restored bug fix for sending unicode email with ↵ | Tim Graham | |
| Python 2.6.5 and below. | |||
| 2014-07-29 | [1.6.x] Fixed #20292: Pass datetime objects (not formatted dates) as params ↵ | Shai Berger | |
| to Oracle This seems worthwhile in its own right, but also works around an Oracle bug (in versions 10 -- 11.1) where the use of Unicode would reset the date/time formats, causing ORA-01843 errors. Thanks Trac users CarstenF for the report, jtiai for the initial patch, and everyone who contributed to the discussion on the ticket. Backport of 6983201 from master. | |||
| 2014-07-24 | [1.6.x] Fixed #23089 -- Fixed transaction handling in two management commands. | Aymeric Augustin | |
| Previously, when createcachetable and flush operated on non-default databases, they weren't atomic. Also avoided transactional DDL and transactional truncates on databases that don't support them (refs #22308). Backport of 753a22a635, 0757e0f30d, and 6877a9d415 from master | |||
| 2014-07-21 | [1.6.x] Replaced instances of 'his/her' with 'their'. | Iain Dawson | |
| Backport of 8fbf13a6c8 from master | |||
| 2014-07-16 | [1.6.x] Fixed #22998 -- Updated the fast_delete logic for GFKs | Gavin Wahl | |
| Backport of 6e2b82fdf6 from master | |||
| 2014-07-14 | [1.6.x] Fixed #13794 -- Fixed to_field usage in BaseInlineFormSet. | Tim Graham | |
| Thanks sebastien at clarisys.fr for the report and gautier for the patch. Backport of 5e2c4a4bd1 from master | |||
| 2014-07-05 | [1.6.x] Fixed various minor doc typos / references. | Daniel Hahler | |
| Backport of 67f9f385aa from master | |||
| 2014-06-30 | [1.6.x] Fixed a French translation in contrib.auth | Claude Paroz | |
| Refs #22929. | |||
| 2014-06-24 | [1.6.x] Improved documentation for QueryDict. | Duncan Parkes | |
| Backport of 7f4e2ef1e9 from master | |||
| 2014-06-20 | [1.6.x] Fixed #22514 -- Prevented indexes on virtual fields [postgres]. | Vlastimil Zíma | |
| Backport of 78c32f1caa from master | |||
| 2014-06-03 | [1.6.x] Removed erroneous trailing comma in OLMapWidget.js. | Egor Semiguzov | |
| Backport of c5226eb72a from master | |||
| 2014-05-31 | [1.6.x] Made an aggregate test pass with spatialite backend | Claude Paroz | |
| backends.tests.SqliteAggregationTests was failing with spatialite. Backport of 550b6195ed from master | |||
| 2014-05-28 | [1.6.X] Added missing commas to list of strings | Alasdair Nicol | |
| 2014-05-16 | [1.6.x] Fixed #22579 -- Corrected validation for email to reject trailing slash | Erik Romijn | |
| Backport of 424fe76349a2e34eafef13c2450a7a1f4d3115a6 from master. | |||
