| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-10-25 | [1.8.x] Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True. | Tim Graham | |
| This is a security fix. | |||
| 2016-10-25 | [1.8.x] Fixed CVE-2016-9013 -- Generated a random database user password ↵ | Marti Raudsepp | |
| when running tests on Oracle. This is a security fix. | |||
| 2016-10-25 | [1.8.x] Added stub release notes for 1.8.16. | Tim Graham | |
| 2016-10-13 | [1.8.x] Fixed #27342 -- Corrected QuerySet.update_or_create() example. | Tim Graham | |
| Backport of 51b83d9e5113ea5b81d04f4d117bd5acd3c1b822 from master | |||
| 2016-10-03 | [1.8.x] Fixed #27307 -- Added missing url names in sitemaps docs. | Tim Graham | |
| Backport of fe1aee6b98d2a94ecc983463938135d192ef9afc from master | |||
| 2016-09-28 | [1.8.x] Fixed 27283 -- Fixed typo in 1.8 release notes. | Alasdair Nicol | |
| Backport of 32031718320e1b4d708b15d8c67738e4c77c9bc7 from master | |||
| 2016-09-26 | [1.8.x] Added CVE-2016-7401 to the security release archive. | Tim Graham | |
| Backport of 6fe846a8f08dc959003f298b5407e321c6fe3735 from master | |||
| 2016-09-26 | [1.8.x] Added a CVE role for Sphinx. | Tim Graham | |
| Backport of a46742e738b91f79dd7b2e6ecba6dd1604e14d05 from master | |||
| 2016-09-14 | [1.8.x] Fixed CVE-2016-7401 -- Fixed CSRF protection bypass on a site with ↵ | Collin Anderson | |
| Google Analytics. This is a security fix. Backport of "refs #26158 -- rewrote http.parse_cookie() to better match browsers." 93a135d111c2569d88d65a3f4ad9e6d9ad291452 from master | |||
| 2016-08-18 | [1.8.x] Fixed #26807 -- Documented how to replicate SubfieldBase's ↵ | Tim Graham | |
| assignment behavior. Backport of 518eaf1fa2d86dc1b0ba7adba22b30bcc8f3a497 from master | |||
| 2016-07-25 | [1.8.x] Fixed #26941 -- Corrected uwsgi "env = LANG=…" configuration in docs. | Naved Khan | |
| Backport of 9a5a789da2b53a9c19ea47130507ce26839eb008 from master | |||
| 2016-07-18 | [1.8.x] Added CVE-2016-6186 to the security release archive. | Tim Graham | |
| Backport of bc53af13cbf09b0cbac945426c2d51d0ca52fff3 from master | |||
| 2016-07-18 | [1.8.x] Fixed XSS in admin's add/change related popup. | Tim Graham | |
| This is a security fix. | |||
| 2016-07-18 | [1.8.x] Fixed #24796 -- Moved SecurityMiddleware in MIDDLEWARE_CLASSES docs. | Marissa Zhou | |
| Partial backport of 8b1f39a727be91aab40bdb37235718ed63ae1d50 from master | |||
| 2016-07-13 | [1.8.x] Fixed #26889 -- Fixed missing PostgreSQL index in ↵ | Jon Dufresne | |
| SchemaEditor.add_field(). Backport of 2e4cfcd2b9a0984ad6c4087a5deebbf33413835c from master | |||
| 2016-07-06 | [1.8.x] Fixed #25461 -- Corrected meta API code examples to account for MTI. | Romain Garrigues | |
| In the case of multiple-table inheritance models, get_all_related_objects() and get_all_related_objects_with_model() don't return the auto-created OneToOneField, but the new examples didn't account for this. Backport of 8be84e2ac42b2556fd6fa07794b3708b143ef341 from master | |||
| 2016-07-06 | [1.8.x] Fixed typo in docs/topics/class-based-views/generic-display.txt | Taylor Edmiston | |
| Backport of 43d0345fe11624d6b4fd960139ff653451b4f147 from master | |||
| 2016-06-17 | [1.8.x] Fixed #26774 -- Corrected value of default_zoom in GeoModelAdmin doc | Krzysztof Jurewicz | |
| Backport of 6dd4d2709bfe427c05842c0269860ef95a0b4f00 from master | |||
| 2016-06-09 | [1.8.x] Fixed #21588 -- Corrected handler initialization in "modifying ↵ | Berker Peksag | |
| upload handlers" example. Backport of 8f50ff5b15a742f345dade0848a3fbbf2aff629d from master | |||
| 2016-06-02 | [1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2. | Tim Graham | |
| Backport of 149ace94dfc10504a0e69462c7737f5ce05340a4 from master | |||
| 2016-06-02 | [1.8.x] Ignored new warnings when building the docs with Sphinx 1.4. | Tim Graham | |
| Backport of af3273757397fa88163174546f2b620d7b4837ed from master | |||
| 2016-05-31 | [1.8.x] Fixed a typo in the docs. | Florian Apolloner | |
| Backport of 62e4f8ec435a4b600c8efb071201070a2443477e from master. | |||
| 2016-05-31 | [1.8.x] Fixed #26503 -- Removed an outdated example from session docs. | Berker Peksag | |
| Backport of 698c8dfc2a5c5865a8bb163c1ae70b75d53e6415 from master | |||
| 2016-05-27 | [1.8.x] Fixed typo in docs/topics/forms/modelforms.txt | Sergey Fedoseev | |
| Backport of 26794f6657a9d201d47a0748a449a94ad5d7c66e from master | |||
| 2016-05-25 | [1.8.x] Added imports to docs/topics/db/aggregation.txt example. | MariKiev | |
| Backport of 30d110ef43d8a3c50ea8ec4e4fe49bd2bb859530 from master | |||
| 2016-05-18 | [1.8.x] Fixed #26636 -- Fixed typo in docs/ref/request-response.txt | Tim Graham | |
| Backport of 6d9c5d46e644a8ef93b0227fc710e09394a03992 from master | |||
| 2016-05-06 | [1.8.x] Fixed code example in docs/howto/custom-lookups.txt | vytisb | |
| Backport of b3acf35f13aae57eb3c8340dd5ff7e61482e2537 from master | |||
| 2016-05-02 | [1.8.x] Added release date for 1.8.13. | Tim Graham | |
| 2016-04-29 | [1.8.x] Fixed #26557 -- Converted empty strings to None when saving ↵ | Joshua Phillips | |
| GenericIPAddressField. Backport of 4681d65048ca2553895e10c2c492997b0a78ffba from master | |||
| 2016-04-27 | [1.8.x] Refs #25136 -- Fixed nonexistent field reference in aggregation ↵ | Tim Graham | |
| topic guide. Thanks Ankush Thakur for the report and Simon for the review. Backport of fe70f280d7ea4402f676696c4013c4a23d4e4990 from master | |||
| 2016-04-20 | [1.8.x] Fixed incorrect rendered widget in forms example. | Jon Dufresne | |
| Backport of 38ddd4ab553fb6b311c62d15fca7d848f84d539a from master | |||
| 2016-04-18 | [1.8.x] Fixed #26498 -- Fixed TimeField microseconds round-tripping on MySQL ↵ | Lukasz Wiecek | |
| and SQLite. Thanks adamchainz for the report and review. Backport of d3c87a2425b30400c3e6ea76585a9a537b6d0386 from master | |||
| 2016-04-13 | [1.8.x] Added stub release notes for 1.8.13. | Tim Graham | |
| Backport of ad3c72118fd79d27c9f958f41d354b59d883d403 from master | |||
| 2016-04-07 | [1.8.x] Fixed #26477 -- Fixed typo in docs/ref/contrib/contenttypes.txt | Mikkel Munch Mortensen | |
| Backport of 4bb3ddbcc674601743c63311d7efbf0e1fd19742 from master | |||
| 2016-04-01 | [1.8.x] Added release date for 1.8.12. | Tim Graham | |
| Backport of 93539ba2f42fe56bacefd09a9e8f93b31565f746 from master | |||
| 2016-03-31 | [1.8.x] Fixed #26438 -- Fixed multiple .objects typos in the docs. | Simon Charette | |
| Thanks Pablo Oubiña for the report. Backport of 64aba7a8aba06b8be52a1a099b44e1d3be4bdd26 from master | |||
| 2016-03-25 | [1.8.x] Fixed #26408 -- Updated link to DEP 182. | Aymeric Augustin | |
| Thanks kaifeldhoff for the report. Backport of 7b1ce7f from master | |||
| 2016-03-25 | [1.8.x] Fixed #26387 -- Restored the functionality of the admin's ↵ | Tim Graham | |
| raw_id_fields in list_editable. Backport of acfaec3db5ba39de52f6e607e74343dccf72fba1 from master | |||
| 2016-03-25 | [1.8.x] Fixed typo in docs/topics/db/aggregation.txt. | Tim Shaffer | |
| Backport of 8550566af6321fe111ac1fe6497720e6ac291824 from master | |||
| 2016-03-21 | [1.8.x] Fixed #26392 -- Corrected login_required/permission_required ↵ | Tim Graham | |
| stacking example. Backport of c41737dc00e2c8d34046b9f856f23fcc0cb4a82c from master | |||
| 2016-03-19 | [1.8.x] Fixed a broken link in ↵ | Amine | |
| docs/internals/contributing/writing-documentation.txt. Backport of 8b5a4fa941ba6e308b5ebd831b7953440fc0ee9b from master | |||
| 2016-03-18 | [1.8.x] Fixed #26375 -- Used a more generic name in a reusable template example. | Tim Graham | |
| Backport of 1d0abeaf757518808aabe9c85a2beaaa340fbc43 from master | |||
| 2016-03-15 | [1.8.x] Fixed DiscoverRunner failfast parameter default in docs. | Andrew Abraham | |
| Backport of f2d9caa625084b0b96d60153f6b26ba43a1ab835 from master | |||
| 2016-03-10 | [1.8.x] Fixed #26324 -- Fixed DurationField with fractional seconds on SQLite. | Tim Graham | |
| Backport of 4f0cd0fd162122da96978b357ac9fc9534529410 from master | |||
| 2016-03-09 | [1.8.x] Fixed indenting in "Serving files in development" code example | Tim Osborn | |
| Backport of 8fb3a2877bac1ecf0e5665389d60eab637d1622e from master | |||
| 2016-03-07 | [1.8.x] Fixed #26325 -- Made MultiPartParser ignore filenames that normalize ↵ | John-Mark Bell | |
| to an empty string. Backport of 4b129ac81f4fa38004950d0b307f81d1e9b44af8 from master | |||
| 2016-03-05 | [1.8.x] Added stub release notes for 1.8.12. | Tim Graham | |
| Backport of c960af4adb87f8ce87f5698902b68e8332e448cb from master | |||
| 2016-03-04 | [1.8.x] Added safety to URL decoding in is_safe_url() on Python 2 | Claude Paroz | |
| The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef. Backport of 552f03869e from master. | |||
| 2016-03-04 | [1.8.x] Fixed #26308 -- Prevented crash with binary URLs in is_safe_url() | Claude Paroz | |
| This fixes a regression introduced by c5544d28923. Thanks John Eskew for the reporti and Tim Graham for the review. Backport of ada7a4aef from master. | |||
| 2016-03-04 | [1.8.x] Added stub release notes for 1.8.11. | Tim Graham | |
| Backport of 2f0c785a4c2353a3035ba6022cec5e25fb9d569b from master | |||
