summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Collapse)Author
2021-06-02Fixed CVE-2021-33571 -- Prevented leading zeros in IPv4 addresses.Mariusz Felisiak
validate_ipv4_address() was affected only on Python < 3.9.5, see [1]. URLValidator() uses a regular expressions and it was affected on all Python versions. [1] https://bugs.python.org/issue36384
2021-06-02Fixed CVE-2021-33203 -- Fixed potential path-traversal via admindocs' ↵Florian Apolloner
TemplateDetailView.
2021-06-01Fixed #32793 -- Fixed loss of precision for temporal operations with ↵Mariusz Felisiak
DecimalFields on MySQL. Regression in 1e38f1191de21b6e96736f58df57dfb851a28c1f. Thanks Mohsen Tamiz for the report.
2021-06-01Refs #32552 -- Added DiscoverRunner.log() to allow customization.Daniyal
Thanks Carlton Gibson, Chris Jerdonek, and David Smith for reviews.
2021-06-01Fixed #32796 -- Changed CsrfViewMiddleware to fail earlier on badly ↵Chris Jerdonek
formatted cookie tokens.
2021-06-01Refs #24121 -- Added __repr__() to Engineabhiabhi94
2021-05-31Fixed #32795 -- Changed CsrfViewMiddleware to fail earlier on badly ↵Chris Jerdonek
formatted tokens.
2021-05-31Fixed #32319 -- Added ES module support to ManifestStaticFilesStorage.Gildardo Adrian Maravilla Jacome
2021-05-31Refs #32319 -- Changed HashedFilesMixin to use named groups in patterns.Gildardo Adrian Maravilla Jacome
2021-05-29Refs #32778 -- Improved the name of the regex object detecting invalid CSRF ↵Chris Jerdonek
token characters. This also improves the comments near where the variable is used.
2021-05-29Fixed typos in comments and docs.David Sanders
2021-05-28Fixed #32676 -- Prevented migrations from rendering related field attributes ↵David Wobrock
when not passed during initialization. Thanks Simon Charette for the implementation idea.
2021-05-28Refs #32779 -- Changed ↵Hannes Ljungberg
DatabaseSchemaEditor._unique_sql()/_create_unique_sql() to take fields as second parameter.
2021-05-28Refs #24121 -- Added __repr__() to PermWrapper.abhiabhi94
2021-05-28Refs #32596 -- Added early return on safe methods in ↵Chris Jerdonek
CsrfViewMiddleware.process_view().
2021-05-28Refs #32596 -- Optimized CsrfViewMiddleware._check_referer() to delay ↵Chris Jerdonek
computing good_referer.
2021-05-28Fixed #32596 -- Added CsrfViewMiddleware._check_referer().Chris Jerdonek
This encapsulates CsrfViewMiddleware's referer logic into a method and updates existing tests to check the "seam" introduced by the refactor, when doing so would improve the test.
2021-05-27Fixed #32789 -- Made feeds emit elements with no content as self-closing tags.Mohammadreza Varasteh
2021-05-26Fixed #32669 -- Fixed detection when started non-django modules which aren't ↵Moriyoshi Koizumi
packages with "python -m" in autoreloader.
2021-05-26Fixed #32772 -- Made database cache count size once per set.Michael Lissner
2021-05-26Fixed #32783 -- Fixed crash of autoreloader when __main__ module doesn't ↵Mariusz Felisiak
have __spec__ attribute. Regression in ec6d2531c59466924b645f314ac33f54470d7ac3. Thanks JonathanNickelson for the report.
2021-05-26Fixed #32543 -- Added search_help_text to ModelAdmin.Hasan Ramezani
2021-05-26Fixed #32744 -- Normalized to pathlib.Path in autoreloader check for ↵Hasan Ramezani
template changes.
2021-05-25Fixed #32780 -- Made Add/RemoveConstraint operations a noop for ↵Hannes Ljungberg
covering/deferrable unique constraints on SQLite.
2021-05-25Fixed #32778 -- Avoided unnecessary recompilation of token regex in ↵abhiabhi94
_sanitize_token().
2021-05-24Refs #24121 -- Added __repr__() to Lookup.saeedblanchette
2021-05-24Refs #24121 -- Improved Value.__repr__().Mariusz Felisiak
2021-05-24Fixed #32777 -- Passed table reference as a string to ↵Hannes Ljungberg
DatabaseSchemaEditor._index_columns().
2021-05-21Fixed #32503 -- Fixed altering BLOB/TEXT field to non-nullable with default ↵Yuekui Li
on MySQL 8.0.13+. MySQL 8.0.13+ supports defaults for BLOB/TEXT but not in the ALTER COLUMN statement. Regression in 6b16c91157512587017e9178d066ed1a683e7795. Thanks Matt Westcott for the report.
2021-05-21Fixed #32375 -- Started deprecation toward changing the default sitemap ↵Rohith PR
protocol to https. The default sitemap protocol, when it is built outside the context of a request, will be changed from 'http' to 'https' in Django 5.0.
2021-05-20Renamed "object" argument of ModelAdmin.log_addition(), log_change(), and ↵David Sanders
log_deletion() methods.
2021-05-20Fixed #32771 -- Used IS_POPUP_VAR constant instead of hard-coded value.David Sanders
2021-05-19Fixed #32765 -- Removed "for" HTML attribute from ReadOnlyPasswordHashWidget.David Sanders
ReadOnlyPasswordHashWidget doesn't have any labelable elements.
2021-05-19Fixed #32740 -- Caught possible exception when initializing colorama.Carlton Gibson
2021-05-19Fixed #32766 -- Removed unused ORDER_TYPE_VAR.David Sanders
Unused since 5434ce231d75004bdbe5cf2b7b24ce67a2a6e737.
2021-05-18Fixed #32379 -- Started deprecation toward changing default USE_TZ to True.Claude Paroz
Co-authored-by: Nick Pope <nick@nickpope.me.uk> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-05-18Fixed #32747 -- Prevented initialization of unused caches.Mariusz Felisiak
Thanks Alexander Ebral for the report. Regression in 98e05ccde440cc9b768952cc10bc8285f4924e1f.
2021-05-18Fixed #32733 -- Skipped system check for specifying type of auto-created ↵Rust Saiargaliev
primary keys on abstract models. Regression in b5e12d490af3debca8c55ab3c1698189fdedbbdb.
2021-05-18Fixed #32754 -- Made AdminSite.catch_all_view() respect SCRIPT_NAME.Slava Skvortsov
Regression in ba31b0103442ac891fb3cb98f316781254e366c3.
2021-05-18Fixed #32317 -- Refactored loaddata command to make it extensible.William Schwartz
Moved deeply nested blocks out of inner loops to improve readability and maintainability. Thanks to Mariusz Felisiak, Shreyas Ravi, and Paolo Melchiorre for feedback.
2021-05-17Fixed #32750 -- Fixed crash of Extract() transform on OuterRef() expressions.Artur Beltsov
Thanks Simon Charette for the review.
2021-05-14Refs #32317 -- Simplified find_fixtures() in loaddata command.William Schwartz
This always replaces 'fixture_name' with its base name, which preserves the previous behavior, because os.path.basename() was not called only on relative paths without os.path.sep i.e. when base name was equal to the file name. This also changes os.path.dirname() and os.path.basename() calls to the equivalent os.path.split() call.
2021-05-14Refs #32317 -- Cleaned up try/except blocks in loaddata command.William Schwartz
This moves code unable to trigger relevant exceptions outside of try/except blocks, and changes 'objects' to 'objects_in_fixture' which is equal to the length of 'objects'.
2021-05-14Fixed #32734 -- Fixed validation of startapp's directory with trailing slash.Rohith PR
Regression in fc9566d42daf28cdaa25a5db1b5ade253ceb064f.
2021-05-14Fixed #32721 -- Fixed migrations crash when adding namespaced spatial ↵snowman2
indexes on PostGIS.
2021-05-13Refs #32721 -- Made PostGISSchemaEditor._create_index_sql() call ↵snowman2
super()._create_index_sql().
2021-05-13Fixed #32718 -- Relaxed file name validation in FileField.Mariusz Felisiak
- Validate filename returned by FileField.upload_to() not a filename passed to the FileField.generate_filename() (upload_to() may completely ignored passed filename). - Allow relative paths (without dot segments) in the generated filename. Thanks to Jakub Kleň for the report and review. Thanks to all folks for checking this patch on existing projects. Thanks Florian Apolloner and Markus Holtermann for the discussion and implementation idea. Regression in 0b79eb36915d178aef5c6a7bbce71b1e76d376d3.
2021-05-13Fixed #32717 -- Fixed filtering of querysets combined with the | operator.Simon Charette
Address a long standing bug in a Where.add optimization to discard equal nodes that was surfaced by implementing equality for Lookup instances in bbf141bcdc31f1324048af9233583a523ac54c94. Thanks Shaheed Haque for the report.
2021-05-13Fixed #32031 -- Added model class for each model to AdminSite.each_context().Raffaele Salmaso
2021-05-12Fixed #32738 -- Deprecated django.utils.datetime_safe module.Nick Pope
generated by cgit v1.3 (git 2.53.0) at 2026-07-08 11:05:48 +0000