summaryrefslogtreecommitdiff
path: root/docs/ref/settings.txt
AgeCommit message (Collapse)Author
2020-06-15Fixed #31696 -- Updated OWASP links in docs.Hasan Ramezani
2020-05-25Refs #23097 -- Used new octal format in FILE_UPLOAD_PERMISSIONS docs.René Fleschenberg
2020-05-21Fixed #31608 -- Doc'd that form ISO 8601 datetime parsing always retains tzinfo.Hasan Ramezani
2020-05-13Removed versionadded/changed annotations for 3.0.Mariusz Felisiak
2020-05-05Refs #28622 -- Corrected PASSWORD_RESET_TIMEOUT/PASSWORD_RESET_TIMEOUT_DAYS ↵Chris Burchhardt
docs. Removed outdated note about an extra day in PASSWORD_RESET_TIMEOUT docs and incorrect "minimum" phrase.
2020-04-28Fixed broken links in docs.Mariusz Felisiak
2020-03-27Fixed #31400 -- Doc'd the expected type of CONN_MAX_AGE database option.Hasan Ramezani
2020-02-05Fixed #31232 -- Changed default SECURE_REFERRER_POLICY to 'same-origin'.Adam Johnson
2020-01-29Fixed #31126 -- Doc'd STATICFILES_DIRS namespacing in static files how-to.Abhijeet
2020-01-16Fixed #30752 -- Allowed using ExceptionReporter subclasses in error reports.Pavel Lysak
2020-01-07Fixed #15982 -- Added DATE_INPUT_FORMATS to forms.DateTimeField default ↵Claude Paroz
input formats.
2019-12-12Fixed #30862 -- Allowed setting SameSite cookies flags to 'none'.Osaetin Daniel
Thanks Florian Apolloner and Carlton Gibson for reviews.
2019-12-05Fixed #31010 -- Allowed subdomains of localhost in the Host header by ↵Gordon Pendleton
default when DEBUG=True.
2019-12-04Fixed #23524 -- Allowed DATABASES['TIME_ZONE'] option on PostgreSQL.Aymeric Augustin
2019-11-27Fixed #31029 -- Used more specific links to RFCs.Baptiste Mispelon
2019-11-25Refs #25388 -- Corrected value of TEST MIGRATE setting in MIGRATION_MODULES ↵Jon Dufresne
docs.
2019-11-20Fixed #25388 -- Added an option to allow disabling of migrations during test ↵Jon Dufresne
database creation.
2019-11-06Refs #29983 -- Added pathlib.Path support to the file email backend.Jon Dufresne
2019-11-06Added a link to the file email backend from EMAIL_FILE_PATH setting.Jon Dufresne
2019-10-11Clarified that SECURE_REDIRECT_EXEMPT patterns should not include leading ↵René Fleschenberg
slashes.
2019-09-25Fixed #25598 -- Added SCRIPT_NAME prefix to STATIC_URL and MEDIA_URL set to ↵Oleg Kainov
relative paths. Thanks Florian Apolloner for reviews. Co-authored-by: Joel Dunham <Joel.Dunham@technicalsafetybc.ca>
2019-09-23Fixed typo in docs/ref/settings.txt.Mariusz Felisiak
2019-09-20Refs #28622 -- Clarified security implications of PASSWORD_RESET_TIMEOUT.Luke Plant
2019-09-20Fixed #28622 -- Allowed specifying password reset link expiration in seconds ↵Hasan Ramezani
and deprecated PASSWORD_RESET_TIMEOUT_DAYS.
2019-09-13Fixed typos in docs/ref/settings.txt.Ben Falk
2019-09-10Refs #29817 -- Removed settings.FILE_CHARSET per deprecation timeline.Mariusz Felisiak
2019-09-10Removed versionadded/changed annotations for 2.2.Mariusz Felisiak
2019-09-09Fixed #29406 -- Added support for Referrer-Policy header.Nick Pope
Thanks to James Bennett for the initial implementation.
2019-09-09Fixed #30426 -- Changed X_FRAME_OPTIONS setting default to DENY.Claude Paroz
2019-09-06Fixed #30573 -- Rephrased documentation to avoid words that minimise the ↵Tobias Kunze
involved difficulty. This patch does not remove all occurrences of the words in question. Rather, I went through all of the occurrences of the words listed below, and judged if they a) suggested the reader had some kind of knowledge/experience, and b) if they added anything of value (including tone of voice, etc). I left most of the words alone. I looked at the following words: - simply/simple - easy/easier/easiest - obvious - just - merely - straightforward - ridiculous Thanks to Carlton Gibson for guidance on how to approach this issue, and to Tim Bell for providing the idea. But the enormous lion's share of thanks go to Adam Johnson for his patient and helpful review.
2019-08-18Refs #30426 -- Changed default SECURE_CONTENT_TYPE_NOSNIFF to True.Claude Paroz
2019-08-05Fixed #30680 -- Removed obsolete system check for SECURE_BROWSER_XSS_FILTER ↵Adnan Umer
setting.
2019-07-01Fixed CVE-2019-12781 -- Made HttpRequest always trust ↵Carlton Gibson
SECURE_PROXY_SSL_HEADER if set. An HTTP request would not be redirected to HTTPS when the SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings were used if the proxy connected to Django via HTTPS. HttpRequest.scheme will now always trust the SECURE_PROXY_SSL_HEADER if set, rather than falling back to the request scheme when the SECURE_PROXY_SSL_HEADER did not have the secure value. Thanks to Gavin Wahl for the report and initial patch suggestion, and Shai Berger for review.
2019-06-11Changed charset and collation link to MySQL docs.Mykola Nicholas
2019-05-27Refs #29548 -- Updated docs for MariaDB support.Mariusz Felisiak
2019-04-24Fixes #30342 -- Removed a system check for LANGUAGES_BIDI setting.Matthias Kestenholz
This partly reverts commit 4400d8296d268f5a8523cd02ddc33b12219b2535.
2019-04-08Fixed #30304 -- Added support for the HttpOnly, SameSite, and Secure flags ↵Ran Benita
on language cookies.
2019-04-02Fixed typo in docs/ref/settings.txt.Mariusz Felisiak
2019-03-29Removed unnecessary /static from links to PostgreSQL docs.Nick Pope
2019-03-28Moved extlinks in docs config to allow using 'version' variable.Tim Graham
After a stable branch is created, 'master' will change to 'stable/' + version + '.x'.
2019-03-28Used extlinks for Django's source code.Tim Graham
2019-03-28Refs #1660 -- Doc'd the LANGUAGES_BIDI setting.Nick Pope
2019-03-27Updated spelling and RFCs in HttpOnly cookie flag docs.Nick Pope
2019-02-08Fixed #30004 -- Changed default FILE_UPLOAD_PERMISSION to 0o644.Himanshu Lakhara
2019-02-06Refs #27753 -- Favored force/smart_str() over force/smart_text().Aymeric Augustin
2019-02-05Simplified and corrected LOGIN_URL, LOGIN_REDIRECT_URL, and ↵Tim Graham
LOGOUT_REDIRECT_URL docs.
2019-01-30Fixed #30091 -- Doc'd middleware ordering requirements with CSRF_USE_SESSIONS.Carlton Gibson
2019-01-17Refs #27829 -- Removed settings.DEFAULT_CONTENT_TYPE per deprecation timeline.Tim Graham
2019-01-17Removed versionadded/changed annotations for 2.1.Tim Graham
2018-12-05Reverted "Fixed #25251 -- Made data migrations available in ↵Tim Graham
TransactionTestCase when using --keepdb." This reverts commits b3b1d3d45fc066367f4fcacf0b06f72fcd00a9c6 and 9fa0d3786febf36c87ef059a39115aa1ce3326e8 due to reverse build failures for which a solution isn't forthcoming.