summaryrefslogtreecommitdiff
path: root/docs/ref
AgeCommit message (Collapse)Author
2024-09-03[5.0.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when ↵Natalia
email sending fails. On successful submission of a password reset request, an email is sent to the accounts known to the system. If sending this email fails (due to email backend misconfiguration, service provider outage, network issues, etc.), an attacker might exploit this by detecting which password reset requests succeed and which ones generate a 500 error response. Thanks to Thibaut Spriet for the report, and to Mariusz Felisiak, Adam Johnson, and Sarah Boyce for the reviews.
2024-09-03[5.0.x] Fixed CVE-2024-45230 -- Mitigated potential DoS in urlize and ↵Sarah Boyce
urlizetrunc template filters. Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.
2024-07-25[5.0.x] Fixed #35627 -- Raised a LookupError rather than an unhandled ↵Lorenzo Peña
ValueError in get_supported_language_variant(). LocaleMiddleware didn't handle the ValueError raised by get_supported_language_variant() when language codes were over 500 characters. Regression in 9e9792228a6bb5d6402a5d645bc3be4cf364aefb. Backport of 0e94f292cda632153f2b3d9a9037eb0141ae9c2e from main.
2024-07-23[5.0.x] Updated example links in urlize docs.Matthew Somerville
goo.gl links are being removed in 2025: https://developers.googleblog.com/en/google-url-shortener-links-will-no-longer-be-available/ Backport of fb7be022cb44d8faec52f17042fa58e4c9f02daf from main.
2024-07-09[5.0.x] Fixed CVE-2024-39614 -- Mitigated potential DoS in ↵Sarah Boyce
get_supported_language_variant(). Language codes are now parsed with a maximum length limit of 500 chars. Thanks to MProgrammer for the report.
2024-07-04[5.0.x] Removed outdated note about limitations in Clickjacking protection.Mariusz Felisiak
There is no need to list old browser versions or point users to workarounds. Backport of f302343380c77e1eb5dab3b64dd70895a95926ca from main.
2024-07-01[5.0.x] Fixed #23790 -- Warned about renaming AppConfig.label in ↵Andrew Miller
docs/ref/applications.txt. Backport of aa74c4083e047473ac385753e047e075e8f04890 from main.
2024-05-30[5.0.x] Made cosmetic edits to code snippets reformatted with blacken-docs.Mariusz Felisiak
Backport of 0f694ce2ebce01356d48302c33c23902b4777537 from main.
2024-05-04[5.0.x] Fixed #35426 -- Updated querysets to be a required argument of ↵sobolevn
GenericPrefetch. Backport of 9a27c76021f934201cccf12215514a3091325ec8 from main.
2024-05-03[5.0.x] Fixed #35427 -- Corrected help text for makemessages --extension in ↵Shamil
docs/ref/django-admin.txt. Backport of 32d163e680817e202e0def3fbb70d2450b02cffd from main.
2024-04-26[5.0.x] Fixed #20744 -- Removed hint that arbitrary kwargs are allowed when ↵Adam Zapletal
creating forms.Fields. Backport of 828b94b178736f7882cc6e5cd86b5c8e84b62ece from main
2024-04-16[5.0.x] Doc'd that RemoveField also drops related database objects in ↵David Sanders
PostgreSQL. Backport of f0d50a937910571fc4adb7e6fb91045cdc215aa8 from main
2024-04-15[5.0.x] Extended docs for Q() objects mentioning the ~ (NOT) operator.Mohammad Kazemi
Co-authored-by: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com> Backport of 47c608202a58c8120d049c98d5d27c4609551d33 from main.
2024-04-10[5.0.x] Fixed settings path in docs for installing SpatiaLite with Homebrew.Adam Johnson
Co-authored-by: Adam Zapletal <adamzap@gmail.com> Backport of 8bbf73ca749d7740c82a7cd52f38289444070900 from main
2024-04-05[5.0.x] Refs #35354 -- Clarified FORCE_SCRIPT_NAME docs.Carlton Gibson
Backport of ca5cd3e3e8e53f15e68ccd727ec8fe719cc48099 from main
2024-03-21[5.0.x] Added RowNumber() link in Rank() docs.Adam Zapletal
Backport of fd2514d17daaa561963e14297fb35cddf483728c from main
2024-03-11[5.0.x] Fixed #25595 -- Doc'd that URLValidator rejects file:// URIs without ↵Adam Zapletal
a host. Backport of 7326513a8f5d4d4e0aeec28540f9451b939b1dda from main
2024-03-10[5.0.x] Fixed #35280 -- Improved iriencode filter example in docs.canhuynh1998
Backport of a7baa874d8452859060ecd28c83cecd566f756e3 from main
2024-03-06[5.0.x] Fixed broken links and redirects in docs.Mariusz Felisiak
Backport of 177e6493961dfcdafb44e5b02894bf4201050910 from main
2024-03-06[5.0.x] Updated broken links in docs/ref/contrib/gis/tutorial.txt.Mohammad Alsakhawy
Backport of f06bb7c88a03e03e1c041e4b10cdc90c8f710dda from main
2024-02-29[5.0.x] Fixed typo in docs/ref/contrib/admin/index.txt.kbehlers
Backport of 3cb1ba50ccde5b33d6bc5b7cc1ea22c8af3c2aa3 from main
2024-02-28[5.0.x] Removed #django-geo IRC channel in docs.Mariusz Felisiak
It's been inactive for several years. Backport of 11695b8fdd002362be8d5dc48bc78db09ddf33d8 from main
2024-02-28[5.0.x] Refs #34964 -- Doc'd that Q expression order is preserved.David Sanders
Backport of 7714ccfeae969aca52ad46c1d69a13fac4086c08 from main
2024-02-20[5.0.x] Fixed #35153 -- Added note about locale name notation to ↵sandjio
FORMAT_MODULE_PATH docs. Co-authored-by: Paul Hermans <paul.hermans@benemtech.com> Backport of 9bd849c8d5c587209a231af643a17ec2db802ab2 from main
2024-02-17[5.0.x] Fixed #28011 -- Corrected Field.hidden docs.Adam Johnson
Backport of 7ba6c9edc50dc989fc5c306b541636249b952f93 from main
2024-01-29[5.0.x] Fixed #35141 -- Clarified the expected type of ↵Alexander Lazarević
CACHE_MIDDLEWARE_SECONDS setting. Backport of a5365339eaee043895a79dbbdd7462f1399136e5 from main
2024-01-26[5.0.x] Applied Black's 2024 stable style.Mariusz Felisiak
https://github.com/psf/black/releases/tag/24.1.0 Backport of 305757aec19c9d5111e4d76095ae0acd66163e4b from main
2024-01-24[5.0.x] Fixed #34971 -- Doc'd additional loggers.duranbe
Co-authored-by: duranbe <benoit.durand.mail@gmail.com> Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 0450c9bdf1773297c61b4e36850ab997ffd5dde2 from main
2024-01-20[5.0.x] Updated "Dive Into Python" links.Emmanuel Katchy
Backport of 12ffcfc350a19bbfbc203126a9b6c84b5e0d0ba2 from main
2024-01-16[5.0.x] Used more specific link to email backends in EMAIL_BACKEND docs.Baptiste Mispelon
Backport of 1592f0ac220c1fd37779f6d33efb28ebd60e2e66 from main
2024-01-15[5.0.x] Fixed #34949 -- Clarified when UniqueConstraints with ↵jordanbae
include/nulls_distinct are not created. Backport of 4fec1d2ce37241fb8fa001971c441d360ed2a196 from main
2023-12-30[5.0.x] Fixed #35069 -- Fixed typo in docs/ref/forms/api.txt.Salvo Polizzi
Backport of dc26a3d563b1e1d98d40f5d351a6a61c34f12d98 from main
2023-12-28[5.0.x] Corrected code-block directives in docs.Mariusz Felisiak
Backport of 0be6dde81721e4a61caf45422987c599ebfcfe56 from main
2023-12-28[5.0.x] Improved DEFAULT_FROM_EMAIL/SERVER_EMAIL docs.David D Lowe
Co-authored-by: nessita <124304+nessita@users.noreply.github.com> Backport of 61aae838f77c2d3f1bb2b50095cdf3d79afffb02 from main
2023-12-19[5.0.x] Doc'd that users with unusable passwords cannot request a password ↵Amin Shah Gilani
reset. Backport of 47033bfd486206d6809068c838d45b999e5c1bd2 from main
2023-12-15[5.0.x] Added missing import in docs/ref/models/expressions.txt.Viicos
Backport of e28bd6776dfedc1ad4dce4719e4303ca34019a83 from main
2023-12-14[5.0.x] Added clarifications about the DATABASES.TIME_ZONE setting in docs.David Sanders
These include: - Doc'd which is the default used when DATABASES.TIME_ZONE is None. - Doc'd that the database connection's time zone setting is set for PostgreSQL and clarified that it may be necessary to set it to the same value as TIME_ZONE. Co-authored-by: David Smith <39445562+smithdc1@users.noreply.github.com> Co-authored-by: Natalia Bidart <124304+nessita@users.noreply.github.com> Backport of acfc7e3a735ffa41dcd9ad7f4f8fef97c1a2c3c6 from main
2023-12-08[5.0.x] Fixed #35016 -- Doc'd that DATABASES["OPTIONS"] are passed to new ↵Yashas
PostgreSQL connections. Backport of eeb2119985d9879b1d9ac3730ea0b53c0c019221 from main
2023-12-01[5.0.x] Improved wording in auth.models.User field docs.Adrien
Co-authored-by: Lily Foote <code@lilyf.org> Backport of 79099a7ba454581ab521fcb4ea61fc6ed3dccf26 from main
2023-11-29[5.0.x] Updated conditions to retrieve primary keys in bulk_create() docs.KimSia Sim
Backport of c9ce764f59c1e809b210337980ae10c4b1d0f9be from main.
2023-11-28[5.0.x] Removed link to lawrence.com in contrib.sites docs.Adam Johnson
lawrence.com has since become a redirect to LJWorld.com, making the link pointless. Backport of 9e7ac5890147a8271eb5eb19bb88ab93dadc6c6d from main
2023-11-28[5.0.x] Refs #34380 -- Added FORMS_URLFIELD_ASSUME_HTTPS transitional setting.Mariusz Felisiak
This allows early adoption of the new default "https". Backport of a4931cd75a1780923b02e43475ba5447df3adb31 from main.
2023-11-25[5.0.x] Refs #34380 -- Improved docs for forms.URLField.assume_scheme.Adam Johnson
Backport of 0203771b626c27c1af24cdeb0e425ccca3d19ad5 from main
2023-11-23[5.0.x] Fixed #34990 -- Changed link to OWASP in CSRF docs.Tim Schilling
The OWASP site is the standard resource for web application security information. Backport of aceee39d44994df20d13104e55ae61845d7a1e95 from main
2023-11-16[5.0.x] Refs #32819 -- Used auto_id instead of id_for_label as unique ↵David Smith
identifier for the field. `id_for_label` is blank for widgets with multiple inputs such as radios and multiple checkboxes. Therefore , `help_text` for fields using these widgets cannot currently be associated using `aria-describedby`. `id_for_label` is being used as a guard to avoid incorrectly adding `aria-describedby` to those widgets. This change uses `auto_id` as the unique identified for the fields `help_text`. A guard is added to avoid incorrectly adding `aria-describedby` to inputs by checking the widget's `use_fieldset` attribute. Fields rendered in a `<fieldset>` should have `aria-describedby` added to the `<fieldset>` and not every `<input>`. Backport of 292f1ea90f90ff140617299a25884c8fda24aa64 from main
2023-11-15[5.0.x] Refs #33690 -- Added missing data-theme selector to example in ↵William Hayes
theming support docs. Backport of 640283711e6c8d25ad0e3c97453cd178a3e4d6a6 from main
2023-11-14[5.0.x] Refs #34944 -- Propagated system checks for GeneratedField.output_field.Mariusz Felisiak
Backport of c705625ebff0141ed2b95dd3c8174bda8270a47f from main
2023-11-14[5.0.x] Fixed #34944 -- Made GeneratedField.output_field required.Mariusz Felisiak
Regression in f333e3513e8bdf5ffeb6eeb63021c230082e6f95. Backport of 5875f03ce61b85dfd9ad34f7b871c231c358d432 from main
2023-11-09[5.0.x] Fixed #34457 -- Restored output for makemigrations --check.Adam Johnson
Co-authored-by: David Sanders <shang.xiao.sanders@gmail.com> Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of f7389c4b07ceeb036436e065898e411b247bca78 from main
2023-11-09[5.0.x] Fixed typos in docs/ref/models/fields.txt.Jacob Walls
Backport of 427f0ed98d7ecf4381cebd4f7773f761e2446851 from main
generated by cgit v1.3 (git 2.53.0) at 2026-07-04 22:26:40 +0000