summaryrefslogtreecommitdiff
path: root/docs
AgeCommit message (Collapse)Author
2021-05-06Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs from being ↵Mariusz Felisiak
accepted in URLValidator on Python 3.9.5+. In Python 3.9.5+ urllib.parse() automatically removes ASCII newlines and tabs from URLs [1, 2]. Unfortunately it created an issue in the URLValidator. URLValidator uses urllib.urlsplit() and urllib.urlunsplit() for creating a URL variant with Punycode which no longer contains newlines and tabs in Python 3.9.5+. As a consequence, the regular expression matched the URL (without unsafe characters) and the source value (with unsafe characters) was considered valid. [1] https://bugs.python.org/issue43882 and [2] https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4
2021-05-05Fixed #32714 -- Prevented recreation of migration for Meta.ordering with ↵Simon Charette
OrderBy expressions. Regression in c8b659430556dca0b2fe27cf2ea0f8290dbafecd. Thanks Kevin Marsh for the report.
2021-05-04Added commits for CVE-2021-31542 to security archive.Carlton Gibson
2021-05-04Added CVE-2021-31542 to security archive.Carlton Gibson
2021-05-04Added stub release notes for Django 3.2.2.Carlton Gibson
2021-05-04Fixed CVE-2021-31542 -- Tightened path & file name sanitation in file uploads.Florian Apolloner
2021-04-30Added spelling option to make.bat.Susan Wright
2021-04-30Fixed #32678 -- Removed SECURE_BROWSER_XSS_FILTER setting.Tim Graham
2021-04-30Fixed #32698 -- Moved HttpRequest.get_raw_uri() to ↵Hasan Ramezani
ExceptionReporter._get_raw_insecure_uri().
2021-04-29Refs #32178 -- Doc'd ↵Hasan Ramezani
DatabaseFeatures.django_test_skips/django_test_expected_failures in contributing guide.
2021-04-29Fixed capitalization of "ECMAScript" and "JavaScript".Nick Pope
2021-04-29Refs #32674 -- Noted that auto-created through table PKs cannot be ↵Carlton Gibson
automatically migrated.
2021-04-29Refs #32682 -- Renamed lookup_needs_distinct() to lookup_spawns_duplicates().Mariusz Felisiak
Follow up to 187118203197801c6cb72dc8b06b714b23b6dd3d.
2021-04-29Refs #32694 -- Clarified when colorama requirement is needed in Windows how-to.Carlton Gibson
2021-04-29Fixed #32675 -- Doc'd that autodector changes might cause generation of ↵David Wobrock
no-op migrations. Follow up to aa4acc164d1247c0de515c959f7b09648b57dc42.
2021-04-28Corrected introduction to range field lookups docs.Adam Johnson
Follow up to 24b9f5082344a127147266dd52d5d2dcd1c9cb44.
2021-04-28Fixed #32632, Fixed #32657 -- Removed flawed support for Subquery ↵Simon Charette
deconstruction. Subquery deconstruction support required implementing complex and expensive equality rules for sql.Query objects for little benefit as the latter cannot themselves be made deconstructible to their reference to model classes. Making Expression @deconstructible and not BaseExpression allows interested parties to conform to the "expression" API even if they are not deconstructible as it's only a requirement for expressions allowed in Model fields and meta options (e.g. constraints, indexes). Thanks Phillip Cutter for the report. This also fixes a performance regression in bbf141bcdc31f1324048af9233583a523ac54c94.
2021-04-27Fixed #32687 -- Restored passing process’ environment to underlying tool ↵Konstantin Alekseev
in dbshell on PostgreSQL. Regression in bbe6fbb8768e8fb1aecb96d51c049d7ceaf802d3.
2021-04-27Fixed #32682 -- Made admin changelist use Exists() instead of distinct() for ↵Mariusz Felisiak
preventing duplicates. Thanks Zain Patel for the report and Simon Charette for reviews. The exception introduced in 6307c3f1a123f5975c73b231e8ac4f115fd72c0d revealed a possible data loss issue in the admin.
2021-04-27Refs #32682 -- Renamed use_distinct variable to may_have_duplicates.Mariusz Felisiak
QuerySet.distinct() is not the only way to avoid duplicate, it's also not preferred.
2021-04-26Fixed #32681 -- Fixed VariableDoesNotExist when rendering some admin template.Zain Patel
Regression in 84609b3205905097d7d3038d32e6101f012c0619.
2021-04-23Refs #28034 -- Corrected docs example in contributing tutorial.Clumart.G
2021-04-22Added note to update docs config when creating new stable branch.Carlton Gibson
django_next_version in docs/conf.py should be bumped when creating a new stable branch.
2021-04-21Fixed #32667 -- Added link to labeling checks in ↵Abhyudai
BaseCommand.requires_system_checks docs. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-04-21Fixed #32650 -- Fixed handling subquery aliasing on queryset combination.Simon Charette
This issue started manifesting itself when nesting a combined subquery relying on exclude() since 8593e162c9cb63a6c0b06daf045bc1c21eb4d7c1 but sql.Query.combine never properly handled subqueries outer refs in the first place, see QuerySetBitwiseOperationTests.test_subquery_aliases() (refs #27149). Thanks Raffaele Salmaso for the report.
2021-04-21Fixed #32665 -- Fixed caches system check crash when STATICFILES_DIRS is a ↵Mariusz Felisiak
list of 2-tuples. Thanks Jared Lockhart for the report. Regression in c36075ac1dddfa986340b1a5e15fe48833322372.
2021-04-21Fixed #32647 -- Restored multi-row select with shift-modifier in admin ↵Carlton Gibson
changelist. Regression in 30e59705fc3e3e9e8370b965af794ad6173bf92b.
2021-04-20Refs #25287 -- Added support for multiplying and dividing DurationField by ↵Tobias Bengfort
scalar values on SQLite.
2021-04-19Fixed #32574 -- Confirmed support for PROJ 8.x.David Smith
2021-04-16Corrected File, ContentFile, and ImageFile signatures in docs.Adam Johnson
2021-04-15Fixed #32652 -- Fixed links to new contributors FAQ.Carlton Gibson
2021-04-14Fixed #32643 -- Fixed decoding of messages in the pre-Django 3.2 format.Florian Apolloner
Thanks Jan Pieter Waagmeester for the report. Regression in 2d6179c819010f6a9d00835d5893c4593c0b85a0.
2021-04-14Fixed #32645 -- Fixed QuerySet.update() crash when ordered by joined fields ↵Mariusz Felisiak
on MySQL/MariaDB. Thanks Matt Westcott for the report. Regression in 779e615e362108862f1681f965ee9e4f1d0ae6d2.
2021-04-14Refs #32548 -- Forwardported 3.2.1 release note.Mariusz Felisiak
2021-04-14Fixed #32648 -- Fixed VariableDoesNotExist rendering sitemaps template.Arthur Jovart
2021-04-14Fixed #32649 -- Fixed ModelAdmin.search_fields crash when searching against ↵Mariusz Felisiak
phrases with unbalanced quotes. Thanks Dlis for the report. Regression in 26a413507abb38f7eee4cf62f2ee9727fdc7bf8d.
2021-04-14Fixed #32635 -- Fixed system check crash for reverse o2o relations in ↵Hasan Ramezani
CheckConstraint.check and UniqueConstraint.condition. Regression in b7b7df5fbcf44e6598396905136cab5a19e9faff. Thanks Szymon Zmilczak for the report.
2021-04-13Fixed #32637 -- Restored exception message on technical 404 debug page.Mariusz Felisiak
Thanks Atul Varma for the report.
2021-04-12Fixed #32627 -- Fixed QuerySet.values()/values_list() crash on combined ↵Iuri de Silvio
querysets ordered by unannotated columns.
2021-04-09Fixed #32618 -- Added link to conditional aggregation in aggregation topic ↵Hasan Ramezani
guide.
2021-04-09Fixed #32535 -- Added note about DEBUG_PROPAGATE_EXCEPTIONS setting to ↵Hasan Ramezani
middleware docs.
2021-04-08Fixed #32620 -- Allowed subclasses of Big/SmallAutoField for DEFAULT_AUTO_FIELD.Adam Johnson
2021-04-08Fixed #32575 -- Added support for SpatiaLite 5.Claude Paroz
2021-04-08Refs #31578 -- Removed outdated notes about MyISAM in GIS docs.Mariusz Felisiak
InnoDB supports spatial data types in MySQL 5.7+ and MariaDB 10.2+.
2021-04-08Refs #27488 -- Corrected detection of IsValid() support on SpatiaLite.Mariusz Felisiak
LWGEOM is not required for IsValid().
2021-04-07Dropped support for GEOS 3.5 and GDAL 2.0.Claude Paroz
2021-04-07Fixed #32501 -- Added support for returning fields from INSERT statements on ↵girishsontakke
SQLite 3.35+.
2021-04-07Corrected release number format in 3.2.1 release notes.Carlton Gibson
2021-04-07Fixed #32544 -- Confirmed support for GDAL 3.2 and GEOS 3.9.Claude Paroz
2021-04-07Corrected wrapping in 3.2 release notes.Carlton Gibson
Partially reverts 0802b404a210862e6765a6c7dee6cba61085d7a6.
generated by cgit v1.3 (git 2.53.0) at 2026-07-07 04:45:16 +0000