summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2016-02-29[1.8.x] Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during ↵Florian Apolloner
login. This is a security fix.
2016-02-29[1.8.x] Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth.Mark Striemer
This is a security fix.
2016-02-29[1.8.x] Added stub release notes for security issues.Tim Graham
2016-02-26[1.8.x] Fixed #26286 -- Prevented content type managers from sharing their ↵Simon Charette
cache. This should prevent managers methods from returning content type instances registered to foreign apps now that these managers are also attached to models created during migration phases. Thanks Tim for the review. Refs #23822. Backport of 3938b3ccaa85f1c366909a4839696007726a09da from master
2016-02-24[1.8.x] Fixed a function signature in docs/topics/auth/default.txt.Tim Graham
Backport of 441c537b66233ae57bf0023f02d8262474229e1a from master
2016-02-24[1.8.x] Removed docs of deprecated SimpleTestCase warnings behavior.Tim Graham
Removed in Django 1.7 (4f6be9a0c43050500af598527e1453d27c5c5b85). Backport of 6637cd0ef2fd5f063df82000c18c64c246bb6e1b from master
2016-02-24[1.8.x] Fixed #26267 -- Fixed BoundField to reallow slices of subwidgets.Jon Dufresne
Backport of b41268135995cef46d40e550f9301fab20cf330d from master
2016-02-23[1.8.x] Fixed many spelling mistakes in code, comments, and docs.Josh Soref
Partial backport of 93452a70e8a62c7408eeded444f5088d4a26212d from master
2016-02-23[1.8.x] Fixed #26188 -- Documented how to wrap password hashers.Tim Graham
Backport of 5a541e2e6cb01e254f20c302093a24d7dc9af8ce from master
2016-02-22[1.8.x] Fixed import location of check_password() in docs.Daniel Quinn
Backport of de7edc005f06c47c1d39d5cb30762d424ee4dabf from master
2016-02-19[1.8.x] Fixed some code blocks indentation in GIS docs.Sergey Fedoseev
Backport of dbaa1a6b59b4f8f942e8378465aaeb943c3d9de5 from master
2016-02-19[1.8.x] Used relative models imports in the GIS tutorial.Juan José Conti
Backport of bb7042cda from master.
2016-02-18[1.8.x] Fixed #26204 -- Reallowed dashes in top-level domains for URLValidator.Tim Graham
Thanks Shai Berger for the review. Backport of b1afebf882db5296cd9dcea26ee66d5250922e53 from master
2016-02-17[1.8.x] Followed recommended ValidationError use in docs.Jon Dufresne
Backport of 0db7e61076116c2d93d61f98ef31690542359e48 from master
2016-02-16[1.8.x] Fixed #26215 -- Fixed RangeField/ArrayField serialization with None ↵Claude Paroz
values Also added tests for HStoreField. Thanks Aleksey Bukin for the report and Tim Graham for the initial patch and the review. Backport of 928c12eb1 from master.
2016-02-16[1.8.x] Fixed possible "RuntimeError: maximum recursion depth exceeded" ↵Tim Graham
building docs. Backport of 6a71ac61bd8ebd57f036e076a4f7f29cf2d88c00 from master
2016-02-15[1.8.x] Fixed #26221 -- Used find_packages() in reusable apps tutorial.Ryan Nowakowski
Otherwise the migrations package won't be included in the tarball. Backport of 11af73eaeb4371ded68460c1591abd6aefa57a90 from master
2016-02-15[1.8.x] Fixed #26212 -- Made forms.FileField and translation.lazy_number() ↵Tim Graham
picklable. Backport of b59f963ad2a49322725b20fac71661bd49643443 from master
2016-02-12[1.8.x] Added import in docs/topics/email.txt example.Camilo Nova
Backport of a6f856df52d532d5537191eca237de6efdffe309 from master
2016-02-12[1.8.x] Fixed allow_migrate() signature in documentationMarkus Holtermann
Backport of 228427ab1ab6aaafed4eacfb532f7ddb6cc1ed6c from master
2016-02-08[1.8.x] Fixed #26162 -- Checked query name clashes of hidden relationships.Simon Charette
Although reverse accessor clashes should be skipped query name can't be hidden. Thanks to Ian Foote and Tim Graham for the review. Backport of a325fb1f9b14b46288d0e1342407be4a6db2bdb1 from master
2016-02-08[1.8.x] Fixed #26177 -- Fixed a PostgreSQL crash with TIME_ZONE=None and ↵Tim Graham
USE_TZ=False. Backport of 97eb3356b2a7488c8d0ca0e47ef3e538852d44a2 from master
2016-02-06[1.8.x] Added stub release notes for 1.8.10.Tim Graham
Backport of d6337e65ed86ac0d2e55ebcbc710c42f87e0a3b6 from master
2016-02-03[1.8.x] Fix typos in 1.8 release notes.Carl Meyer
Backport of a0ce4c09ff516af52718885120c2231404515428 from master
2016-02-02[1.8.x] Refs #26089 -- Removed obsolete docs about custom user model testing.Tim Graham
Backport of 1e9150443e5696d764ed81c97b53ef0365a5d854 from master
2016-02-02Updated xhtml2pdf URL in docs.Ramon Moraes
2016-02-01[1.8.x] Added CVE-2016-2048 to the security archive.Tim Graham
Backport of ecd502cfdb57706dd0e84d9928934bcae6b1ef25 from master
2016-02-01[1.8.x] Added release date for 1.8.9.Tim Graham
2016-01-28[1.8.x] Fixed #20415 -- Ensured srid isn't localized in OpenLayers JavaScript.Tim Graham
Backport of 19d1cb14519186902d7e27813bf2643fe3f7cfa3 from master
2016-01-27[1.8.x] Fixed #26136 -- Removed URL reversing by dotted path from JavaScript ↵Yoong Kang Lim
catalog example. Backport of 31817dd2eb69db54eb559716aae42fe55ada5fea from master
2016-01-26[1.8.x] Fixed #26122 -- Fixed copying a LazyObjectBen Kraft
Shallow copying of `django.utils.functional.LazyObject` or its subclasses has been broken in a couple of different ways in the past, most recently due to 35355a4.
2016-01-25[1.8.x] Fixed Sphinx highlight warnings in docs.Tim Graham
Backport of 9c43d8252a926f72be5a279186b42848501819b8 from master
2016-01-25[1.8.x] Refs #26034 -- Added another case fixed by this ticket to release notes.Tim Graham
Thanks Shai Berger for the report. Backport of 497b5d6feee5b7947231bd0ae6edf833773b6cce from master
2016-01-24[1.8.x] Added Django version trove classifier to reusable apps tutorial.Tim Graham
Backport of 2d36c7d515312e7a476041c96a29727ed47eb517 from master
2016-01-22[1.8.x] Fixed #26121 -- Updated MySQL storage engine example.Tim Graham
default_storage_engine was introduced in MySQL 5.5.3. storage_engine was removed in MySQL 5.7.5. Backport of 79d0a4fdb0d13ba6a843dace2b90ab44e856bd85 from master
2016-01-21[1.8.x] Changed `action="."` to `action=""` in tests and docs.Luke Plant
`action="."` strips query parameters from the URL which is not usually what you want. Copy-paste coding of these examples could lead to difficult to track down bugs or even data loss if the query parameter was meant to alter the scope of a form's POST request. Backport of 77974a684a2e874bccd8bd9e0939ddcb367a8ed2 from master
2016-01-21[1.8.x] Fixed #26060 -- Fixed crash with reverse OneToOneField in ↵Alexander Gaevsky
ModelAdmin.readonly_fields. Backport of 9a33d3d76497d9e198de942ee1236c452231262f from master
2016-01-13[1.8.x] Fixed #26071 -- Fixed crash with __in lookup in a Case expression.Alberto Avila
Partial backport of afe0bb7b13bb8dc4370f32225238012c873b0ee3 from master.
2016-01-08[1.8.x] Fixed #26034 -- Fixed incorrect index handling on PostgreSQL on ↵Tim Graham
Char/TextField with unique=True and db_index=True. Thanks Simon Charette for review. Backport of 56aaae58a746eb39d5e92ba60f59f4c750a8e1a8 from master
2016-01-08[1.8.x] Fixed #26055 -- Removed an orphaned phrase in ↵Tim Graham
docs/howto/deployment/wsgi/modwsgi.txt. Backport of db8f462494d603eba922818479a87f5ddfe1a13b from master
2016-01-07[1.8.x] Fixed #24980 -- Fixed day determination in admin calendar widget.Alexander Gaevsky
Backport of 44930cc4667268c20493d7e97387db2a97d61a26 from master
2016-01-06[1.8.x] Fixed #26046 -- Fixed a crash with translations and Django-unknown ↵Claude Paroz
language code Thanks Jens Lundstrom for the report and Tim Graham for the review. Backport of 632a9f21bc from master.
2016-01-06[1.8.x] Fixed #26035 -- Prevented user-tools from appearing on admin logout ↵Scott Pashley
page. Backport of 7cc2efc2d6916c05a0a5cb0c0e67f5405d8f6a03 from master
2016-01-05[1.8.x] Added stub release notes for 1.8.9.Tim Graham
Backport of 1e57dccb31b1302c7292dfa7eac8d8aeeb76a7d0 from master
2016-01-02[1.8.x] Added release date for 1.8.8 release.Tim Graham
Backport of 24c1713e2ec29214838be61cc6bf13b6bf380f4f from master
2016-01-02[1.8.x] Fixed #25316 -- Fixed a crash with order_by() and values() after ↵varunnaganathan
annotate(). Backport of 3eba9638ee69138c73efb1d1c1d1b806ddafc6cf from master
2015-12-31[1.8.x] Fixed #23372 -- Made loaddata faster if it doesn't find any fixtures.Anssi Kääriäinen
Django's test suite often tries to load fixture files from apps that have no fixtures at all. This creates a lot of unnecessary disabling and enabling of constraints which can be expensive on some database. To speed this up, loaddata now first checks if any fixture file matches. If no fixture file is matched, then the command exits before disabling and enabling of constraints is done. The main benefit of this change is seen on MSSQL, where tests on Django 1.8 run hours faster. Backport of ee9f4686b19e2b4a68f5cb4f9d61dc045c1d4c63 from master
2015-12-29[1.8.x] Fixed #25465 -- Restored line breaks conversion in admin readonly ↵Alexander Gaevsky
fields. Backport of 69208a5a1c55d42ca0eaffa900be643d9f801089 from master
2015-12-24[1.8.x] Fixed #13008 -- Added more Cache-Control headers to never_cache() ↵Markus Bertheau
decorator. Backport of 4a438e400b7ce0ab9d0b6876196cbe8d620a4171 from master
2015-12-24[1.8.x] Discouraged use of /tmp with predictable names.Chris Lamb
The use of predictable filenames in /tmp often leads to symlink attacks so remove the most obvious use of them in the docs. Backport of 77b8d8cb6d6d6345f479c68c4892291c1492ba7e from master