summaryrefslogtreecommitdiff
path: root/tests/admin_utils/tests.py
AgeCommit message (Collapse)Author
10 daysFixed CVE-2026-15920 -- Made display_for_field() validate URLs before ↵Natalia
rendering admin links. The admin renders URLField values as clickable links on changelists and read-only change forms. The link was built without validating the URL, so a potentially dangerous stored value could be rendered as a link that runs script in a staff member's authenticated session when clicked. The admin renders URLField values as clickable links on changelists and read-only change forms. The link was built without validating the URL, so a stored value using a potentially dangerous value was rendered as a link, which could lead to cross-site scripting in an authenticated admin session. Refs CVE-2019-12308, #36032. Thanks to Egor Saltykov for the report, and Sarah Boyce for reviews.
2026-07-29Fixed #27752 -- Fixed ordering by Model.__str__ in the admin.VIZZARD-X
Co-authored-by: blighj <blighj@users.noreply.github.com>
2026-07-28Fixed #37230 -- Fixed a crash for second-degree relations in ↵Zubair Hassan
ModelAdmin.list_display. Thanks Rob Kuipers for the report. Regression in 4b2b4bf0ac2707dc9c4d51cabfa72168eaea95fe. Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>
2026-06-18Fixed #37168 -- Made admin display database defaults as empty values.Mariusz Felisiak
2026-02-20Fixed #36127 -- Applied default empty display value to links otherwise ↵SiHyunLee
containing only whitespace in admin.
2025-11-23Refs #21961 -- Added DatabaseFeatures.supports_on_delete_db_(cascade/null) ↵Tim Graham
feature flags. Needed on MongoDB. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2025-10-18Fixed #21961 -- Added support for database-level delete options for ForeignKey.Mariusz Felisiak
Thanks Simon Charette for pair programming. Co-authored-by: Nick Stefan <NickStefan12@gmail.com> Co-authored-by: Akash Kumar Sen <71623442+Akash-Kumar-Sen@users.noreply.github.com> Co-authored-by: Simon Charette <charette.s@gmail.com>
2025-07-23Refs #36500 -- Rewrapped long docstrings and block comments via a script.django-bot
Rewrapped long docstrings and block comments to 79 characters + newline using script from https://github.com/medmunds/autofix-w505.
2025-04-17Fixed #35959 -- Displayed password reset button in admin only when user has ↵Sarah Boyce
sufficient permissions. This change ensures that the "Reset password" button in the admin is shown only when the user has the necessary permission to perform a password change operation. It reuses the password hashing rendering logic in `display_for_field` to show the appropriate read-only widget for users with view-only access.
2025-01-10Fixed #36032 -- Rendered URLField values as links in the admin.antoliny0919
2024-02-05Fixed #10743 -- Allowed lookups for related fields in ModelAdmin.list_display.Tom Carrick
Co-authored-by: Alex Garcia <me@alexoteiza.com> Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> Co-authored-by: Nina Menezes <https://github.com/nmenezes0>
2024-01-11Refs #28404 -- Made displaying property values in admin respect non-None ↵Alexander Lazarević
empty values.
2024-01-10Fixed #28404 -- Made displaying values in admin respect Field's empty_values.Alexander Lazarević
2024-01-09Refs #28404 -- Split test_null_display_for_field() test.Alexander Lazarević
2023-08-22Removed unnecessary trailing commas in tests.konsti
2023-03-16Fixed #1873 -- Handled multi-valued query parameters in admin changelist ↵sarahboyce
filters.
2023-02-01Refs #33476 -- Applied Black's 2023 stable style.David Smith
Black 23.1.0 is released which, as the first release of the year, introduces the 2023 stable style. This incorporates most of last year's preview style. https://github.com/psf/black/releases/tag/23.1.0
2022-02-07Refs #33476 -- Refactored code to strictly match 88 characters line length.Mariusz Felisiak
2022-02-07Refs #33476 -- Reformatted code with Black.django-bot
2021-09-14Fixed #32873 -- Deprecated settings.USE_L10N.Claude Paroz
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-01-14Refs #31369 -- Removed models.NullBooleanField per deprecation timeline.Mariusz Felisiak
2021-01-13Fixed #16117 -- Added decorators for admin action and display functions.Nick Pope
Refs #25134, #32099.
2020-10-09Fixed #32080 -- Fixed displaying Unicode chars in forms.JSONField and ↵Qi Zhao
read-only JSONField values in admin.
2020-06-25Added test for django.contrib.admin.utils.help_text_for_field().Mariusz Felisiak
2020-05-15Refs #31395 -- Relied on setUpTestData() test data isolation in various tests.Simon Charette
2020-05-08Fixed #31157 -- Fixed displaying read-only JSONField values in admin.dbxnr
2020-05-08Refs #31157 -- Added tests for display_for_field() with empty JSONField.dbxnr
2018-08-20Fixed #29682 -- Fixed admin change form crash if a view-only model's form ↵Tim Graham
has an extra field.
2018-03-20Fixed #29227 -- Allowed BooleanField to be null=True.Tim Graham
Thanks Lynn Cyrin for contributing to the patch, and Nick Pope for review.
2018-01-21Fixed #29038 -- Removed closing slash from HTML void tags.Jon Dufresne
2018-01-03Fixed #28986 -- Prevented boolean values in admin list display from being ↵Jonas Haag
formatted with thousand separators.
2018-01-03Added display_for_value() tests for boolean values.Jonas Haag
2017-07-29Used assertRaisesMessage() to test Django's error messages.Mads Jensen
2017-01-20Refs #23919 -- Removed unneeded force_str callsClaude Paroz
2017-01-19Refs #23919 -- Stopped inheriting from object to define new style classes.Simon Charette
2017-01-18Refs #23919 -- Removed encoding preambles and future importsClaude Paroz
2016-11-10Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings.za
2016-06-08Fixing #26524 -- Made a foreign key id reference in ModelAdmin.list_display ↵krishbharadwaj
display the id.
2016-05-07Fixed #26582 -- Added prettier admin display for list values.Dan Watson
2016-04-08Fixed E128 flake8 warnings in tests/.Tim Graham
2016-01-29Refs #26022 -- Used context manager version of assertRaises in tests.Hasan
2016-01-25Fixed #26125 -- Fixed E731 flake warnings.userimack
2016-01-08Fixed #21113 -- Made LogEntry.change_message language independentClaude Paroz
Thanks Tim Graham for the review.
2015-12-28Moved LogEntry-related tests to their own test caseClaude Paroz
Thanks Tim Graham for reviewing and contributing to the patch. Refs #21113.
2015-11-03Fixed #25668 -- Misc spelling errorsVille Skyttä
2015-09-04Fixed #25348 -- Removed unused gif/png images from contrib.admin.elky
2015-08-27Fixed #20597 -- Replaced admin GIF/PNG icons by SVGelky
2015-08-10Fixed #25160 -- Moved unsaved model instance data loss check to Model.save()Tim Graham
This mostly reverts 5643a3b51be338196d0b292d5626ad43648448d3 and 81e1a35c364e5353d2bf99368ad30a4184fbb653. Thanks Carl Meyer for review.
2015-06-18Fixed #24962 -- Added newline to characters escaped by ↵Tim Graham
contrib.admin.utils.quote() Thanks alito for the report and patch.
2015-06-04Fixed #24474 -- Allowed configuring the admin's empty change list value.Loek van Gent
generated by cgit v1.3 (git 2.53.0) at 2026-08-14 22:46:59 +0000