summaryrefslogtreecommitdiff
path: root/docs/ref
AgeCommit message (Collapse)Author
2010-10-15Fix the version which the safe argument for the urlencode filter was added. ↵Chris Beaven
Thanks eternicode for pointing this out. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14219 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-14Fixed #14445 - Use HMAC and constant-time comparison functions where needed.Luke Plant
All adhoc MAC applications have been updated to use HMAC, using SHA1 to generate unique keys for each application based on the SECRET_KEY, which is common practice for this situation. In all cases, backwards compatibility with existing hashes has been maintained, aiming to phase this out as per the normal deprecation process. In this way, under most normal circumstances the old hashes will have expired (e.g. by session expiration etc.) before they become invalid. In the case of the messages framework and the cookie backend, which was already using HMAC, there is the possibility of a backwards incompatibility if the SECRET_KEY is shorter than the default 50 bytes, but the low likelihood and low impact meant compatibility code was not worth it. All known instances where tokens/hashes were compared using simple string equality, which could potentially open timing based attacks, have also been fixed using a constant-time comparison function. There are no known practical attacks against the existing implementations, so these security improvements will not be backported. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14218 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-14Fixed #5327 -- Added standardized field information to ModelChoiceField and ↵Gabriel Hurley
ModelMultipleChoiceField documentation. Thanks to danielrubio for the report and PhiR for the text. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14214 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-12Enabled area calculations for geography columns.Justin Bronn
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14189 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-11Fixed #14349 -- Added Belgium localflavor. Thanks for the report and patch, ↵Jannis Leidel
Laurent Luce. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14160 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-11Updated version of PostGIS in GeoDjango install docs.Justin Bronn
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14150 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-10Fixed #14058 -- Clarified information on OPTIONS setting (for adding ↵Gabriel Hurley
additional parameters when connecting to a database) and linked to Database Backend docs. Thanks to chris@cwroofs for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14114 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-10Fixed #10027 -- Makes links to form and field validation (and form reference ↵Gabriel Hurley
docs in general) more readily available from form topic overview. Thanks to john_fries for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14112 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-10Fixed #14228 -- Added additional information on what the APPEND_SLASH ↵Gabriel Hurley
setting does. Thanks to ttencate for the report and draft text. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14110 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09Fixed misspelling in model fields docs.Carl Meyer
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14096 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09Fixed #14004 -- Adds documentation for QuerySet.update() method. Thanks to ↵Gabriel Hurley
dwillis and timo for the majority of the wording. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14074 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09Fixed #11509 -- Modified usage of "Web" to match our style guide in various ↵Russell Keith-Magee
documentation, comments and code. Thanks to timo and Simon Meers for the work on the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14069 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09Tiny formatting tweak.Simon Meers
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14068 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09Fixed #5537 -- document trailing '+' on related_name for supressing backward ↵Simon Meers
relation. Thanks to dcramer for the report, and Russ for pointing out the workaround. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14049 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08Fixed #14232 -- Clarified the data type of date_list in date-based generic ↵Russell Keith-Magee
views. Thanks to clelland for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14020 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08Fixed #14375 -- Corrected the capitalization of MultiValueField. Thanks to ↵Russell Keith-Magee
Blue for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14018 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08Fixed #14383 -- Corrected the capitalization of reStructuredText. Thanks to ↵Russell Keith-Magee
timo for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14017 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08Fixed #13188 -- Moved date format documentation from the now template tag to ↵Jannis Leidel
the date filter. Thanks, dwillis and timo. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14013 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08Fixed #10497 -- Added a few time-related methods to the storage API. Thanks ↵Jannis Leidel
for the report and patch to Stephan Jaekel. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14012 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08Fixed #14221 -- Cleaned up some text in the GIS tutorial. Thanks to Grant ↵Russell Keith-Magee
<renderbox@gmail.com> for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@14006 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-05Fixed #14388 -- Corrected some typos in the logging docs. Thanks to varikin, ↵Russell Keith-Magee
gremmie, Ramiro Morales and Gabriel Hurley for the reviews. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13982 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-04Fixed #12012 -- Added support for logging. Thanks to Vinay Sajip for his ↵Russell Keith-Magee
draft patch, and to the many people who gave feedback during development of the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13981 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-04Fixed #14386, #8960, #10235, #10909, #10608, #13845, #14377 - standardize ↵Luke Plant
Site/RequestSite usage in various places. Many thanks to gabrielhurley for putting most of this together. Also to bmihelac, arthurk, qingfeng, hvendelbo, petr.pulc@s-cape.cz, Hraban for reports and some initial patches. The patch also contains some whitespace/PEP8 fixes. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13980 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-01Fixed #7048 -- Added ClearableFileInput widget to clear file fields. Thanks ↵Jannis Leidel
for report and patch, jarrow and Carl Meyer. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13968 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-01Fixed #13876 -- Fixed duplication in docs. Thanks, zerok and timo.Jannis Leidel
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13966 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-01Fixed #14281 -- A few documentation fixes. Thanks, Ramiro and Timo.Jannis Leidel
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13964 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-26Fixed #14122 -- Added example for builtin yesno template filter. Thanks, ↵Jannis Leidel
idahogray. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13872 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-13Fixed #13765 - 'safe' parameter for urlencode filterLuke Plant
Thanks to KyleMac for the suggestion and SmileyChris for the patch git-svn-id: http://code.djangoproject.com/svn/django/trunk@13849 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-12Allow setting HttpResponse cookie expiry times with datetime objects.Malcolm Tredinnick
Patch from SmileyChris. Fixed #7770. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13809 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-12Documented how to manually piece together URLs with get_script_name().Malcolm Tredinnick
Thanks to timo and leovitch for the patch. Fixed #10328. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13772 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-11Add option to redirect_to view to allow passing along the query stringMalcolm Tredinnick
from the original request. Default is current behaviour, which is not to pass the query string (it often won't be appropriate to do so). Thanks to steingrd@ifi.uio.no for the patch and tests. Fixed #9966. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13746 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-11Better error message for calling get_next_by_* on unsaved models.Malcolm Tredinnick
Patch from Marc Fargas. Fixed #7435. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13738 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-10Fixed #11358: Don't include private flatpages in sitemap. Thanks dburke and ↵Karen Tracey
mlavin. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13734 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-07Fixed #13350 - Documentation on autoescape should mention endautoescapeLuke Plant
Thanks to mountainpaul@gmail.com for report and to dwillis patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13694 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-07Fixed #13414 - QuerySet API ref wrong sql equivalent in __year lookup exampleLuke Plant
Thanks to idle for report and patch git-svn-id: http://code.djangoproject.com/svn/django/trunk@13692 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-07Fixed #14205 - Tiny grammar fix in form validation documentationLuke Plant
Thanks to zendak for report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13687 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-30Fixed #14054 -- Added documentation for the connection_created event. Thanks ↵Russell Keith-Magee
to Rob Hudson for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13673 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-30Fixed #14162 - Dumpdata needs an option to use the base manager instead of ↵Luke Plant
the default manager Thanks to PaulM for suggestion and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13669 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-30Fixed #14189 - permalink docs import mistakeLuke Plant
Thanks to 7times9 for report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13666 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-28Fixed #6932 -- Added a template tag that gives a list of available flatpages ↵Russell Keith-Magee
for a given user. Thanks to Dmitri Fedortchenko for the suggestion, and to Mnewman, faldridge and Simon Meers for their work on the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13654 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-28Fixed #14185 - improved example SQL for 'select' example.Luke Plant
Thanks to Trindaz for the suggestion. Also fixed some references to 'lede' which is no longer part of the example Blog model. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13652 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-28Fixed #13820 -- Started the deprecation process for mod_python. Thanks to ↵Russell Keith-Magee
Robert Coup for the patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13648 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-28Refactored markup documentation to give it it's own home.Russell Keith-Magee
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13647 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-27Fixed #14116 -- Added a flag to enable CSRF checks in the test client. ↵Russell Keith-Magee
Thanks to jon@licq.org for the suggestion. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13640 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-26Fixed #14172: Corrected misspelling of explicitly. Thanks 3point2.Karen Tracey
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13638 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-23Fixed #14154 -- Corrected grammar error in settings docs. Thanks to d00gs ↵Russell Keith-Magee
for the report. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13633 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-23Fixed #14112 -- Various Markup fixes for the docs. Thanks to ramiro for the ↵Russell Keith-Magee
patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13628 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-19Fixed #14141: docs now use the :doc: construct for links between documents.Jacob Kaplan-Moss
Thanks, Ramiro Morales. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13608 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-12Fixed #14100: Corrected spelling error in description of user_email. Thanks ↵Karen Tracey
tom_simpson. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13574 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-07Fixed #11021 -- Clarified newline stripping behavior in the truncatewords ↵Russell Keith-Magee
and truncatewords_html filters. Thanks to Ben Spaulding for the report and patch. git-svn-id: http://code.djangoproject.com/svn/django/trunk@13555 bcc190cf-cafb-0310-a4f2-bffc1f526a37