chango.git - django

Age	Commit message (Collapse)	Author
2025-06-27	Fixed #15727 -- Added Content Security Policy (CSP) support.	Rob Hudson
	This initial work adds a pair of settings to configure specific CSP directives for enforcing or reporting policy violations, a new `django.middleware.csp.ContentSecurityPolicyMiddleware` to apply the appropriate headers to responses, and a context processor to support CSP nonces in templates for safely inlining assets. Relevant documentation has been added for the 6.0 release notes, security overview, a new how-to page, and a dedicated reference section. Thanks to the multiple reviewers for their precise and valuable feedback. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com>
2022-02-07	Refs #33476 -- Reformatted code with Black.	django-bot

2016-04-09	Fixed #26145 -- Made debug context processor return queries for all databases.	Mounir Messelmeni

2014-12-28	Deprecated some arguments of django.shortcuts.render(_to_response).	Aymeric Augustin
	dictionary and context_instance and superseded by context. Refactored tests that relied context_instance with more modern idioms.
2014-12-28	Moved context_processors from django.core to django.template.	Aymeric Augustin

2014-11-22	Avoided rewrapping Contexts in render_to_response.	Aymeric Augustin
	This change preserves backwards-compatibility for a very common misuse of render_to_response which even occurred in the official documentation. It fixes that misuse wherever it happened in the code base and docs. Context.__init__ is documented as accepting a dict and nothing else. Since Context is dict-like, Context(Context({})) could work to some extent. However, things get complicated with RequestContext and that gets in the way of refactoring the template engine. This is the real rationale for this change.
2014-08-30	Converted sql_queries into a lazily evaluated list.	Bas Peschier
	Fixed #23364. Thanks Markush2010 for the report.
2013-02-26	Merged regressiontests and modeltests into the test root.	Florian Apolloner