| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2015-08-18 | [1.4.x] Fixed DoS possiblity in contrib.auth.views.logout() | Tim Graham | |
| Refs #20936 -- When logging out/ending a session, don't create a new, empty session. Previously, when logging out, the existing session was overwritten by a new sessionid instead of deleting the session altogether. This behavior added overhead by creating a new session record in whichever backend was in use: db, cache, etc. This extra session is unnecessary at the time since no session data is meant to be preserved when explicitly logging out. Backport of 393c0e24223c701edeb8ce7dc9d0f852f0c081ad, 088579638b160f3716dc81d194be70c72743593f, and 2dee853ed4def42b7ef1b3b472b395055543cc00 from master Thanks Florian Apolloner and Carl Meyer for review. This is a security fix. | |||
| 2014-08-02 | [1.4.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs | Erik Romijn | |
| Backport of e26366da44bb343e7a95d01ff0dd18b8026c2802 from master. | |||
| 2014-04-21 | [1.4.x] Fixed queries that may return unexpected results on MySQL due to ↵ | Erik Romijn | |
| typecasting. This is a security fix. Disclosure will follow shortly. Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master | |||
| 2013-12-11 | [1.4.x] Fixed #21594 -- Added note about model formsets deleting objects. | Ben Spaulding | |
| This behavior has been fixed in 65e03a424e. refs #10284. Backport of de1d5d5df5 from stable/1.6.x. | |||
| 2013-09-11 | [1.4.x] Fixed #20887 -- Added a warning to GzipMiddleware in light of BREACH. | Tim Graham | |
| Thanks EvilDMP for the report and Russell Keith-Magee for the draft text. Backport of da843e7dba from master | |||
| 2013-07-11 | [1.4.x] Fixed #20730 -- Fixed "Programmatically creating permissions" error. | Tim Graham | |
| Thanks glarrain for the report. Backport of 684a606a4e from master | |||
| 2013-05-28 | [1.4.x] Fixed #20523 - Incorrect form field for FilePathField. | Tim Graham | |
| Thanks sane4ka.sh@ for the report. Backport of 1fdc3d256d from master | |||
| 2013-03-29 | [1.4.x] Fixed #20150 -- Fixed an error in manager doc example | Nimesh Ghelani | |
| Backport of 485c024567 from master | |||
| 2013-03-26 | Document password truncation with BCryptPasswordHasher | Donald Stufft | |
| 2013-03-02 | [1.4.x] Fixed #19926 -- Fixed a link to code example in queries docs | Claude Paroz | |
| Thanks Randy Salvo for the report. | |||
| 2013-02-19 | [1.4.x] Added a default limit to the maximum number of forms in a formset. | Aymeric Augustin | |
| This is a security fix. Disclosure and advisory coming shortly. | |||
| 2013-02-19 | [1.4.x] Added ALLOWED_HOSTS setting for HTTP host header validation. | Carl Meyer | |
| This is a security fix; disclosure and advisory coming shortly. | |||
| 2013-02-16 | [1.4.x] Fixed #19719 - Removed misleading example from ModelForm documentation | Alex Hunley | |
| Backport of 976dc07baf from master | |||
| 2013-02-07 | [1.4.x] Fixed #19756 - Corrected a ManyToMany example and added some links ↵ | Tim Graham | |
| and markup. Backport of 43efefae69 from master | |||
| 2012-12-21 | [1.4.X] Fixed #19506 - Remove 'mysite' prefix in model example. | Tim Graham | |
| Thanks Mike O'Connor for the report. Backport of 52a2588df6 from master | |||
| 2012-12-10 | [1.4.X] Fixed a security issue in get_host. | Florian Apolloner | |
| Full disclosure and new release forthcoming. | |||
| 2012-11-02 | Fixed #19225 -- Typo in shortcuts docs. | Aymeric Augustin | |
| Thanks SunPowered for the report. | |||
| 2012-10-17 | Fixed an error in the set cookie documentation | Preston Holmes | |
| 2012-10-16 | [1.4.x] Fixed a couple links that didn't backport cleanly | Tim Graham | |
| 2012-10-16 | [1.4.X] Fixed #18548 - Clarified note regarding reusing model instances when ↵ | Tim Graham | |
| form validation fails. Backport of fd02bcff4a from master | |||
| 2012-10-15 | [1.4.X] Fixed #10936 - Tempered recommendation of SQLite - thanks Karen ↵ | Tim Graham | |
| Tracey for the feedback. Backport of 9190d89829 from master | |||
| 2012-10-12 | [1.4.x] Fixed #18996 - Clarified overriden model methods not called on bulk ↵ | Tim Graham | |
| operations Backport of 443999a1eeea70e4deebcf31f8f845696be62c3d from master. | |||
| 2012-10-11 | [1.4.X] Fixed #10936 - Noted that using SQLite for development is a good idea | Tim Graham | |
| Backport of 470deb5cbb from master | |||
| 2012-10-11 | [1.4.X] Fixed #16588 - Warned about field names that conflict with the model API | Tim Graham | |
| Backport of dd0cbc6bdc from master | |||
| 2012-10-11 | [1.4.X] Fixed #16817 - Added a guide of code coverage to contributing docs. | Tim Graham | |
| Thanks Pedro Lima for the draft patch. Backport of 06f5da3d78 from master | |||
| 2012-10-10 | [1.4.x] Fixed #4501 - Documented how to use coverage.py with Django tests. | Tim Graham | |
| Thanks krzysiumed for the draft patch. Backport of 7ef2781ca0ce48872e21dce2f322c9e4106d1cfd from master. | |||
| 2012-10-06 | [1.4.X] Fixed #17435 - Clarified that QuerySet.update returns the number of ↵ | Tim Graham | |
| rows matched Backport of 6d46c740d8 from master | |||
| 2012-10-04 | [1.4.X] Fixed #19051 - Fixed Selenium tearDownClass method; thanks glarrain ↵ | Tim Graham | |
| for the report. Backport of a1a5c0854f from master | |||
| 2012-09-22 | [1.4.X] Fixed #18057 - Documented that caches are not cleared after each ↵ | Tim Graham | |
| test; thanks guettli for the suggestion. Backport of 2aaa467a2a from master | |||
| 2012-09-19 | [1.4.X] Fixed #14829 - Added references to CBVs in the URLConf docs; thanks ↵ | Tim Graham | |
| Andrew Willey for the suggestion. Backport of acd74ffa35 from master | |||
| 2012-09-15 | [1.4.x] Fixed #16929 - Documented how to extend UserAdmin with UserProfile ↵ | Tim Graham | |
| fields; thanks charettes for the draft example. Backport of 22242c510f84c53803afe2907649c892cb1b3d9a from master. | |||
| 2012-09-15 | [1.4.x] Fixed #11185 - Expanded docs on customizing widgets; thanks fadeev ↵ | Tim Graham | |
| for the draft patch. Backport of a73838fde33374573b8e765dfcb0225287d396c0 from master. | |||
| 2012-09-08 | [1.4.x] Fixed some broken links in 1.4 docs | Tim Graham | |
| 2012-09-08 | [1.4.X] Fixed #15566 - Documented that update() doesn't honor DateField.auto_now | Tim Graham | |
| Thanks Shabda Raaj for the draft patch. Backport of dc01e41d23 from master | |||
| 2012-09-01 | [1.4.x] Merge pull request #315 from streeter/auth-docs-cleanup-patch | Tim Graham | |
| Clarify some of the password reset docs Backport of 03ad7d3c2085fa252e7bf6a725fec1ed3d1e6a7c from master. | |||
| 2012-09-01 | [1.4.X] Fixed #18840 - Added a mentioned of the upload_to parameter to the ↵ | Tim Graham | |
| ModelForm example in file uploads. Backport of c6088bc91d from master | |||
| 2012-09-01 | [1.4.x] Fixed #13608 - Noted that template lookups use literal values. | Tim Graham | |
| Backport of 74c025d0285450bf277afbee095172af54562ab6 from master. | |||
| 2012-08-30 | [1.4.x] Updated obsolete links in the documentation | Claude Paroz | |
| Backport of 8a5d1a6b93e05546c5fdbfc497d7fb3a3377cf85 from master. | |||
| 2012-08-30 | [1.4.X] Fixed #18871 - Fixed typo in multi-db docs. | Tim Graham | |
| Backport of 141e6cd2ac from master | |||
| 2012-08-22 | [1.4.x] Fixed #17069 -- Added log filter example to docs. | Tim Graham | |
| Backport of e06189f7ceb48013b37b902588bea6750c989b14 from master. | |||
| 2012-08-21 | [1.4.x] Fixed #18637 - Updated some documentation for aspects of models that ↵ | Tim Graham | |
| are ModelForm specific, not admin specific. Thanks Ben Sturmfels for the patch. Backport of 13d47c3f338e1e9a5da943b97b5334c0523d2e2c from master. | |||
| 2012-08-21 | [1.4.x] Fixed #14885 - Clarified that ModelForm cleaning may not fully ↵ | Tim Graham | |
| complete if the form is invalid. Thanks Ben Sturmfels for the patch. Backport of 3fd89d99036696ba08dd2dd7e20a5b375f85d23b from master. | |||
| 2012-08-19 | [1.4.X] Fixed #17180 - Emphasized the need to load the i18n template tag in ↵ | Tim Graham | |
| each template that uses translations. Thanks stefan.freyr for the suggestion and buddylindsey for the draft patch. Backport of 514a0013cd from master | |||
| 2012-08-16 | [1.4.X] Fixed #17183 - Added a note regarding LocaleMiddleware at the top of ↵ | Tim Graham | |
| the i18n docs. Thanks krzysiumed for the patch. Backport of b1f18e95a5 from master | |||
| 2012-08-10 | [1.4.X] Fixed #17680 - Clarified when logging is configured. | Tim Graham | |
| Backport of cb38fd9632 from master | |||
| 2012-08-10 | [1.4.X] Fixed #17016 - Added examples for file uploads in views. | Tim Graham | |
| Thanks Tim Saylor for the draft patch and Aymeric Augustin and Claude Paroz for feedback. Backport of eff6ba2f64 from master | |||
| 2012-08-06 | [1.4.X] Fixed #17053 - Added a note about USE_THOUSAND_SEPARATOR setting to ↵ | Tim Graham | |
| localizations docs. Thanks shelldweller for the draft patch. Backport of 4f3a6b853a from master | |||
| 2012-08-04 | [1.4.X] Fixed #16980 - Misc updates to the auth docs. Thanks Preston Holmes ↵ | Tim Graham | |
| for the patch. Backport of 865ff32b84 from master | |||
| 2012-08-02 | [1.4.x] Fixed #18472 - Added warning regarding set_language / i18n_patterns. | Simon Meers | |
| Backport of d7816c563b58ed53d49956321d549a16e2b2ebc0 from master. | |||
| 2012-08-01 | [1.4.X] Fixed #16168 - Added note regarding type requirements when overridng ↵ | Tim Graham | |
| ModelForm fields. Thanks Pieter Swinkels for the patch. Backport of ebbc414d17 from master | |||
 |
index : chango.git | |
| django |
| summaryrefslogtreecommitdiff |