summaryrefslogtreecommitdiff
path: root/docs/topics
AgeCommit message (Collapse)Author
2025-12-02[5.2.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation ↵Shai Berger
in XML serializer. Previously, `getInnerText()` recursively used `list.extend()` on strings, which added each character from child nodes as a separate list element. On deeply nested XML content, this caused the overall deserialization work to grow quadratically with input size, potentially allowing disproportionate CPU consumption for crafted XML. The fix separates collection of inner texts from joining them, so that each subtree is joined only once, reducing the complexity to linear in the size of the input. These changes also include a mitigation for a xml.dom.minidom performance issue. Thanks Seokchan Yoon (https://ch4n3.kr/) for report. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com> Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of 50efb718b31333051bc2dcb06911b8fa1358c98c from main.
2025-11-30[5.2.x] Added link to Python Pickle documentation in docs/topics/cache.txt.Rida Zouga
Co-authored-by: Rida Zouga <ridazouga@gmail.com> Backport of 3ea0195ca57790d7bd6921ecaa32312eabec78d0 from main
2025-11-27[5.2.x] Fixed outdated redis-py link in cache docs.Bruno Alla
Backport of 7b32485ee98edf7e8b94ad9c8acdccee562bf216 from main.
2025-11-13[5.2.x] Fixed #36686 -- Clarified Meta.ordering is ignored in GROUP BY queries.Kasyap Pentamaraju
Backport of 7e765a68598b2b798e49bf1f4b431a7bcac085a4 from main.
2025-10-27[5.2.x] Fixed #36681 -- Removed English pluralization bias from example in ↵Kasyap Pentamaraju
docs/topics/i18n/translation.txt. Backport of 0ea01101c3a35568bc43e9707ac058b9874bd425 from main.
2025-10-23[5.2.x] Fixed #35095 -- Clarified Swiss number formatting in ↵Annabelle Wiegart
docs/topics/i18n/formatting.txt. Co-authored-by: Ahmed Nassar <a.moh.nassar00@gmail.com> Backport of 74239181252ca73bebb84789856f5d8937d421b4 from main.
2025-10-03[5.2.x] Fixed #36636, Refs #15902 -- Removed session-based storage reference ↵Dani Fornons
from set_language() docs. Backport of 2514857e3fae831106832cca8823237801cf2cad from main.
2025-09-29[5.2.x] Fixed #36587 -- Clarified usage of `list.insert()` for upload handlers.okaybro
Thanks Baptiste Mispelon for the report Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Backport of afe6634146d0fe70498976c49d2eb4d745aa9064 from main.
2025-09-18[5.2.x] Fixed #36581 -- Updated serialization examples from XML to JSON.CodingWithSaksham
Backport of 762d3be8c559b0abf415be8d6117f04fb6347983 from main.
2025-09-12[5.2.x] Fixed #36597 -- Corrected directives for functions from email module ↵Mridul Dhall
in docs. Thanks Mike Edmunds for the report. Backport of e183d6c26c8da4486c151f9ce973828e2404a796 from main.
2025-08-29[5.2.x] Fixed #35831 -- Documented the model form meta API in model form ↵Mustafa Pirbhai
reference docs. Co-authored-by: Jonathan <3218047+jernwerber@users.noreply.github.com> Co-authored-by: Mustafa <117516335+mspirbhai@users.noreply.github.com> Backport of 183fcebf88aa0762a2e28477f9b24c34341a75f4 from main.
2025-08-19[5.2.x] Fixed spelling of "logged-in" when used as an adjective in docs.mengxun
Backport of f5c944b3141c58bb4a5c7bbca61180b2ad7c13aa from main.
2025-08-11[5.2.x] Corrected code examples in topics docs.Rohit
Backport of fa804d0d14ef4547b4fe2a88ab5d89d4eed5bacd from main.
2025-08-04[5.2.x] Corrected assertNumQueries() example in docs/topics/testing/tools.txt.Adam Zapletal
Backport of dca8284a376128c64bd0e0792ad12391ae3e7202 from main.
2025-07-25[5.2.x] Fixed typo in docs/topics/email.txt.Mike Edmunds
Backport of f551aeb003ee7f43efffb0e312b014362ce1d7c4 from main.
2025-07-17[5.2.x] Fixed get_connection() signature in docs/topics/email.txt.Mike Edmunds
django.core.mail.get_connection() has always supported only variable keyword arguments (never variable positional arguments). Backport of 5289ce65b9a1963707767cc11c476679ab445135 from main.
2025-06-13[5.2.x] Corrected jsonfield fieldlookup references.Sarah Boyce
Backport of 8e2249bc79a74d96f9ad20c89f82a89c78d4b648 from main.
2025-06-10[5.2.x] Refs #373 -- Doc'd that on_delete is ignored for ForeignObject.Jacob Walls
Backport of 76e1ca77bc9cdfa12df9541c32b75af926dbdfea from main.
2025-06-10[5.2.x] Fixed #36449 -- Fixed field types in example model using ForeignObject.Jacob Walls
Backport of 59427547692b433bef3640a96cc0f6601f57532f from main.
2025-05-02[5.2.x] Fixed #17461 -- Doc'd the presumed order of foreign keys on the ↵Clifford Gama
intermediary model of a self-referential m2m. Thanks Giannis Terzopoulos and Sarah Boyce for the reviews. Backport of 9d93e35c207a001de1aa9ca9165bdec824da9021 from main.
2025-04-27[5.2.x] Fixed #36335 -- Fixed typo in docs/topics/db/managers.txt.dbogar89
Backport of 7b394b9988b986429a4da4e60416e0f08ff649e5 from main
2025-04-15[5.2.x] Fixed #36269 -- Documented how to test callable storage in FileField.Ahmed Nassar
Backport of 8bca33f68acc4fc881146c4b9cf4101a8bfab437 from main.
2025-04-15[5.2.x] Fixed #35993 -- Documented gettext f-string support limitations.Ahmed Nassar
Thank you to Claude Paroz and Athena Wolfskämpf for the review. Backport of 2c2f09055579cc6068cae6c6fd3135011d6df4f1 from main.
2025-03-23[5.2.x] Fixed typo in docs/topics/signals.txt.mguegnol
Backport of e2b9a179133ebca9773c5c259f6a7d27489cf141 from main
2025-03-21[5.2.x] Fixed #36095 -- Introduced lazy references in "Models across files" ↵Clifford Gama
section. Backport of 6a2c296e706a0b8f9f9b89e66b37001ce2a03ea7 from main.
2025-03-18[5.2.x] Fixed #33497 -- Doc'd that persistent DB connections should be ↵Carlton Gibson
disabled in ASGI and async modes. Backport of 8713e4ae96817a0c7be3f7a8fee25a7c7f819721 from main.
2025-03-18[5.2.x] Fixed #36202 -- Added examples of JSONField __contains and ↵Clifford Gama
__contained_by lookups with nested arrays to docs. Backport of 304e9f3d6ae8387bbfc261d68b51247a1f5230bb from main
2025-03-17[5.2.x] Fixed #36254 -- Fixed template dictionary unpacking in ↵YQ
docs/topics/i18n/timezones.txt. Backport of 30e0a43937e685083fa1210c3594678a3b813806 from main.
2025-03-13[5.2.x] Fixed incorrect formatting for inline pluralized code references in ↵Clifford Gama
docs. Backport of efe3ca09e029c63e25f6e19843cb0c68cc7fa816 from main.
2025-03-12[5.2.x] Fixed #36249 -- Fixed typo in docs/topics/db/queries.txt.hesham hatem
Backport of e03440291b0599934da73b7dfbd2ccf7ec7270d8 from main.
2025-03-04[5.2.x] Fixed #36128 -- Clarified auto-generated unique constraint on m2m ↵Clifford Gama
through models. Backport of ae2736ca3bf4c6a27e23ee95530ad965b550d4cc from main.
2025-03-02[5.2.x] Added some heading labels to to docs/topics/cache.txt.Tim Graham
Backport of 6d1cf5375f6fbc1496095d2356357c3b08a46324 from main
2025-02-24[5.2.x] Added security reporting guidelines.Sarah Boyce
Backport of 59353360590202fab04067e23214a825157c524b from main.
2025-02-16[5.2.x] Refs #35967 -- Doc'd DatabaseCreation.serialize_db_to_string() method.Simon Charette
Backport of 99ac8e2589ea978c1c80ff66b4536814121f77dd from main
2025-01-15Fixed #36070 -- Clarified model validation behavior for composite pks.Jacob Walls
2025-01-15Refs #36070 -- Referred to pk as an attribute when a composite primary key ↵Jacob Walls
is defined. This is to avoid confusion that a field is often associated with having a single associated database column.
2025-01-14Fixed #36075 -- Documented how to introspect composite primary keys.Simon Charette
Document _meta.pk_fields and interactions between Field.primary_key and CompositePrimaryKey. Thanks Mariusz for the review.
2025-01-07Refs #36042 -- Raised ValueError when providing composite expressions to ↵Jacob Walls
aggregates.
2025-01-02Fixed #36037 -- Fixed default primary key type in docs.Ari Pollak
BigAutoField is the default type for primary keys. In models.txt, the linked anchor shows that the default primary key is a BigAutoField, so it now defers to that section instead of duplicating an (incorrect) type.
2025-01-02Fixed #35886 -- Added support for object-based form media script assets.Johannes Maron
2024-12-16Fixed #36008 -- Fixed order of database reset in TransactionTestCase docs.Chiemezuo
2024-12-11Removed links to outdated tools in docs/topics/performance.txt.amansharma612
Co-authored-by: Aman Sharma <210100011@iitb.ac.in>
2024-12-02Removed question marks from headings in docs/topics/db/fixtures.txt.Anders Hovmöller
2024-12-02Fixed #35964 -- Cleaned up can_order and can_delete formset examples.antoliny0919
2024-11-29Fixed #373 -- Added CompositePrimaryKey.Bendeguz Csirmaz
Thanks Lily Foote and Simon Charette for reviews and mentoring this Google Summer of Code 2024 project. Co-authored-by: Simon Charette <charette.s@gmail.com> Co-authored-by: Lily Foote <code@lilyf.org>
2024-11-26Added missing backticks to class-based views docs.Adam Zapletal
2024-11-18Refs #32339 -- Updated formset docs to reflect default rendering as as_div.antoliny0919
2024-11-18Fixed typo in docs/topics/performance.txt.Caitlin Hogan
2024-11-14Fixed #35784 -- Added support for preserving the HTTP request method in ↵Lorenzo Peña
HttpResponseRedirectBase. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2024-11-14Fixed #35887 -- Added imports and admin.site.register to non-partial admin ↵Alexander Lazarević
inline doc examples.
generated by cgit v1.3 (git 2.53.0) at 2026-07-09 18:45:13 +0000