summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2014-04-21[1.7.x] Update for 1.7b2 security release.1.7b2James Bennett
2014-04-21[1.7.x] Fixed queries that may return unexpected results on MySQL due to ↵Erik Romijn
typecasting. This is a security fix. Disclosure will follow shortly. Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master
2014-04-21[1.7.x] Prevented leaking the CSRF token through caching.Aymeric Augustin
This is a security fix. Disclosure will follow shortly. Backport of c083e3815aec23b99833da710eea574e6f2e8566 from master
2014-04-21[1.7.x] Fixed a remote code execution vulnerabilty in URL reversing.Tim Graham
Thanks Benjamin Bach for the report and initial patch. This is a security fix; disclosure to follow shortly. Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master
2014-04-21[1.7.x] Appeased flake8 2.1.0.Aymeric Augustin
Backport of 428c0bbe1bcd303560d7e96d7d2721ff3fdc0e3f from master
2014-04-21[1.7.x] Corrected many style guide violations that the newest version of ↵Alex Gaynor
flake8 catches Backport of 778ce245dd466bce1b19f89e52cf9ed8f1b46513 from master
2014-04-20[1.7.x] Fixed flake8 warnings introduced in recent commits.Simon Charette
Backport of 79f05616fbf48cf7c205ef17666af0c3d47b3c1e from master
2014-04-20[1.7.x] Fixed flake8 errors.Tim Graham
Backport of 471fb04a30 from master
2014-04-18[1.7.x] Fixed #22397 -- Issues removing M2M field with explicit through modelAndrew Gorcester
Changed the migration autodetector to remove models last so that FK and M2M fields will not be left as dangling references. Added a check in the migration state renderer to error out in the presence of dangling references instead of leaving them as strings. Fixed a bug in the sqlite backend to handle the deletion of M2M fields with "through" models properly (i.e., do nothing successfully). Thanks to melinath for report, loic for tests and andrewgodwin and charettes for assistance with architecture. Backport of 956bd64424 from master
2014-04-18[1.7.x] Adapted fixture read mode to file typeClaude Paroz
Binary mode added in ed532a6a1e is not supported by ZipFile. Refs #22399. Backport of 275811a93 from master.
2014-04-18[1.7.x] Fixed #22399 -- Forced fixture reading in binary modeClaude Paroz
This might help on systems where default encoding is not UTF-8 (and on Python 3). Thanks bacilla for the report. Backport of ed532a6a1 from master.
2014-04-17[1.7.x] Fixed #22454 - Changed compatibility warning hintMoayad Mardini
The warning hint of `_check_test_runner` of 1.6 compatibility had a link to a general release note. The link should be edited to refer the relevant "Backwards incompatible changes in 1.6" section that documents the cause and the possible solutions and workarounds of the warning. Backport of 214d1e1b0f from master
2014-04-17[1.7.x] Fixed a KeyError on login with legacy sessions; refs #21649.Tim Graham
Thanks Loic for the report. Backport of 11e30b684d from master
2014-04-17[1.7.x] Fixed #22456 -- Replaced 900913 EPSG code by 3857 in some testsClaude Paroz
3857 is now the official EPSG code for the Google spherical mercator projection and some recent versions of GDAL do not recognize 900913 any longer. Thanks Tim Graham for the report and initial patch. Backport of c082f3c74c from master.
2014-04-16[1.7.x] Fixed #22434 -- Retain ordering on related sliced subqueries.Justin Hamade
Thanks maciej.pawlisz for the report, and charettes for the review. Backport of a13df671a5 from master
2014-04-16[1.7.x] Fixed #22460 -- Explicity remove constraints when dropping a related ↵Motiejus Jakštys
field. Backport of 0e45669fa9 from master
2014-04-13[1.7.x] Fixed #22350 -- Consistently serialize bytes and text in migrations.Simon Charette
Thanks to @treyhunner and Loïc for their suggestions and review. Backport of 72d3889db4 from master
2014-04-13[1.7.x] Fixed #21760 -- prefetch_related used an inefficient query for ↵valtron
reverse FK. Regression introduced by commit 9777442. Refs #21410. Backport of d3b71b976d from master
2014-04-12[1.7.x] Also allowed a non-overridden setting to be deletedClaude Paroz
Refs #20032, #18824. Thanks ztorstri at gmail.com for the report. Backport of 3417ba0309 from master.
2014-04-12[1.7.x] Fixed #22102 -- Made SimpleTestCase tests run before ↵Claude Paroz
unittest.TestCase ones Thanks aptiko for the report and Tim Graham for the review. Backport of 3e3a7372f5 from master.
2014-04-11[1.7.x] Improved a comment. Thanks intgr for the report.Aymeric Augustin
Backport of 476db08 from master
2014-04-10[1.7.x] Increased robustness of 58161e4e. Refs #22291.Aymeric Augustin
Backport of ee837b9a from master
2014-04-10[1.7.x] Fixed #21202 -- Maintained atomicity when the server disconnects.Aymeric Augustin
Thanks intgr for the report. This commit doesn't include a test because I don't know how to emulate a database disconnection in a cross-database compatible way. Also simplified a 'backends' test that was constrained by this problem. Backport of 81761508 from master
2014-04-10[1.7.x] Fixed #21239 -- Maintained atomicity when closing the connection.Aymeric Augustin
Refs #15802 -- Reverted #7c657b24 as BaseDatabaseWrapper.close() now has a proper "finally" clause that may need to preserve self.connection. Backport of 25860096 from master.
2014-04-10[1.7.x] Fixed #22321 -- Wrapped exceptions in _set_autocommit.Aymeric Augustin
Refs #21202. Backport of 3becac84 from master
2014-04-10[1.7.x] Fixed #22291 -- Avoided shadowing deadlock exceptions on MySQL.Aymeric Augustin
Thanks err for the report. Backport of 58161e4e from master.
2014-04-10[1.7.x] Fixed #22364 -- Sanitized getpass input in changepassword.John Paulett
Python 2 getpass on Windows does not accept unicode, even when containing on ASCII characters. Related #190807. Backport of b5a9166f7e from master
2014-04-10[1.7.x] Fixed #22194 -- Added --list-tags option to check command.Tim Graham
Thanks Elvard for the patch. Backport of 395d75ea6b from master
2014-04-10[1.7.x] Fixed #22195 -- Used constants to define built-in tags for check ↵Tim Graham
framework. Thanks Elvard for the patch. Backport of b513fa5fc6 from master
2014-04-10[1.7.x] Fixed #22343 -- Disallowed select_for_update in autocommit modeShai Berger
The ticket was originally about two failing tests, which are fixed by putting their queries in transactions. Thanks Tim Graham for the report, Aymeric Augustin for the fix, and Simon Charette, Tim Graham & Loïc Bistuer for review. Backport of b990df1d63 from master
2014-04-09[1.7.x] Fixed #21553 -- Ensured unusable database connections get closed.Aymeric Augustin
Backport of 5f2f47f from master
2014-04-07[1.7.x] Fixed #21084 -- Used proxy model's content type for admin log entries.Tim Graham
(the previous commit included only the test) Backport of 3cba90f22a from master
2014-04-05[1.7.x] Fixed #21649 -- Added optional invalidation of sessions when user ↵Tim Graham
password changes. Thanks Paul McMillan, Aymeric Augustin, and Erik Romijn for reviews. Backport of fd23c06023 from master
2014-04-03[1.7.x] Refactored and commented strip_tags utilityTomasz Wysocki
Backport of c28beb4291 from master.
2014-04-03[1.7.x] Fixed #22363 -- Correctly serialize `django.utils.datetime_safe` ↵Simon Charette
objects. Thanks to linovia for the report. Backport of 074d3183d9 from master
2014-04-03[1.7.x] Fixed #22372 -- Improved description of WizardView.get_context_data().Vishal Lal
Thanks simon29 for the report. Backport of a8e2ec0e82 from master
2014-03-31[1.7.x] Fixed #22362 -- Improved AuthenticationMiddleware assertion message.Tim Graham
Thanks Keryn Knight. Backport of 246face209 from master
2014-03-31[1.7.x] Replaced urllib/urlparse imports with from django.utils.six.moves.Tim Graham
Backport of 981b864fbd from master
2014-03-31[1.7.x] Fixed #21795 -- Made add_preserved_filters account for url prefixes.Loic Bistuer
Thanks to trac username honyczek for the report. Refs #6903. Backport of 4339e9a92d from master
2014-03-31[1.7.x] Fixed typo in docstring.Tim Graham
Backport of 029d77eaaa from master
2014-03-31[1.7.x] Fixed #22319 -- Fixed migration external dependencies when there are ↵Loic Bistuer
internal dependencies. Backport of 0fd51cf0bd from master
2014-03-31[1.7.x] Fixed #22359 -- Changing M2M field to blank=True failed on sqlite.Loic Bistuer
Backport of a449e7feec from master
2014-03-29[1.7.x] Increased memoization cache size for language codes.Aymeric Augustin
There may be more than 100 (default maxsize) commonly seen xx-yy values on some sites. The additional memory consumption isn't significant. Also added a comment explaining why this cache must have a maxsize. Backport of f356b6e from master.
2014-03-29[1.7.x] Fixed #22250 -- regression in gis compiler for non-concrete fieldsAnssi Kääriäinen
Thanks to gwahl@fusionbox.com for the report. Backport of 21f208e66e from master
2014-03-27[1.7.x] Add a useful stacklevel to some RemovedInDjango19WarningsChris Beaven
Backport of b077ba7ac1 from master
2014-03-26[1.7.x] Fixed the PostGIS circular imports caused by 1506c71a95.Simon Charette
Thanks to @loic for the help and @timgraham for the review. refs #12030. Backport of b9e50e4774 from master
2014-03-26[1.7.x] Fixed Python 3.4 test failure.Tim Graham
Backport of 45ef4baf5c from master
2014-03-25[1.7.x] Fixed #22331 -- Made MigrationAutodetector ignore unmanaged models.Loic Bistuer
This commit reverts 69d4b1c and tackle the issue from a different angle. Models remain present in the project state, but are now ignored by the autodetector. Backport of 42336c84a0daedfd8242333622eefe202e32398e from master
2014-03-25[1.7.x] Fixed field deconstruction tests failures introduced by 1506c71a95.Simon Charette
refs #12030. Backport of ff874f363c from master
2014-03-25[1.7.x] Fixed #12030 -- Validate integer field range at the model level.Simon Charette
Thanks to @timgraham for the review. Backport of 1506c71a95 from master