| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2025-01-14 | [5.1.x] Fixed CVE-2024-56374 -- Mitigated potential DoS in IPv6 validation. | Michael Manfre | |
| Thanks Saravana Kumar for the report, and Sarah Boyce and Mariusz Felisiak for the reviews. Co-authored-by: Natalia <124304+nessita@users.noreply.github.com> | |||
| 2024-08-28 | [5.1.x] Fixed #35666 -- Documented stacklevel usage and testing, and ↵ | Simon Charette | |
| adjusted test suite accordingly. Over the years we've had multiple instances of hit and misses when emitting warnings: either setting the wrong stacklevel or not setting it at all. This work adds assertions for the existing warnings that were declaring the correct stacklevel, but were lacking tests for it. Backport of 57307bbc7d88927989cf5b314f16d6e13ade04e6 from main. | |||
| 2024-04-30 | Refs #32819 -- Avoided adding 'aria-describedby' to hidden inputs. | David Smith | |
| Hidden elements are not visible for both accessibility tools and browsers presentation layer. This change therefore only reduces the size of the generated HTML. | |||
| 2024-03-14 | Refs #34488 -- Made ClearableFileInput preserve "Clear" checked attribute ↵ | Johannes Maron | |
| when form is invalid. | |||
| 2024-01-26 | Applied Black's 2024 stable style. | Mariusz Felisiak | |
| https://github.com/psf/black/releases/tag/24.1.0 | |||
| 2024-01-18 | Corrected forms imports in forms_tests/tests/test_forms.py. | Mariusz Felisiak | |
| 2024-01-04 | Used enterClassContext() where appropriate. | Mariusz Felisiak | |
| 2023-12-31 | Used addCleanup() in tests where appropriate. | Mariusz Felisiak | |
| 2023-11-28 | Refs #34380 -- Added FORMS_URLFIELD_ASSUME_HTTPS transitional setting. | Mariusz Felisiak | |
| This allows early adoption of the new default "https". | |||
| 2023-11-28 | Refs #34986 -- Fixed some test assertions for PyPy. | Nick Pope | |
| These failures were due to minor inconsistencies or implementation differences between CPython and PyPy. | |||
| 2023-11-17 | Refs #32819 -- Established relationship between form fieldsets and their ↵ | David Smith | |
| help text. This adds aria-describedby for widgets rendered in a fieldset such as radios. aria-describedby for these widgets is added to the <fieldset> element rather than each <input>. | |||
| 2023-11-17 | Refs #32819 -- Added aria-describedby test for widgets with custom id. | David Smith | |
| 2023-09-29 | Refs #15667 -- Added resetting default renderer when FORM_RENDERER is changed. | Mariusz Felisiak | |
| 2023-08-30 | Fixed #31262 -- Added support for mappings on model fields and ↵ | Nick Pope | |
| ChoiceField's choices. | |||
| 2023-08-01 | Fixed #32820 -- Added aria-invalid="true" to fields with errors. | Gregor Jerše | |
| Co-authored-by: Demetris Stavrou <demestav@gmail.com> Co-authored-by: David Smith <smithdc@gmail.com> | |||
| 2023-07-31 | Refs #34655 -- Made cosmetic edits to RadioSelect tests. | nessita | |
| Follow up to f9c5958b8fe452983122b6a13c8f806e4e4e1eef. | |||
| 2023-07-28 | Fixed #34655 -- Increased radioselect's test coverage. | Jakub Bagiński | |
| 2023-07-24 | Fixed #34532 -- Made formset_factory() respect Form's default_renderer. | Christopher Cave-Ayland | |
| Co-authored-by: David Smith <smithdc@gmail.com> | |||
| 2023-07-12 | Fixed #34705 -- Reallowed BoundField.as_widget()'s attrs argument to set ↵ | Sage Abdullah | |
| aria-describedby. Regression in 966ecdd482167f3f6b08b00f484936c837751cb9. | |||
| 2023-07-06 | Fixed #32819 -- Established relationship between form fields and their help ↵ | Gregor Jerše | |
| text. Thanks Nimra for the initial patch. Thanks Natalia Bidart, Thibaud Colas, David Smith, and Mariusz Felisiak for reviews. | |||
| 2023-07-03 | Fixed CVE-2023-36053 -- Prevented potential ReDoS in EmailValidator and ↵ | Mariusz Felisiak | |
| URLValidator. Thanks Seokchan Yoon for reports. | |||
| 2023-06-16 | Fixed #34473 -- Fixed step validation for form fields with non-zero minimum ↵ | Jacob Rief | |
| value. | |||
| 2023-05-17 | Refs #32339 -- Fixed super() call in deprecated renderers. | Carlton Gibson | |
| Missing function call `()` leads to: TypeError: descriptor '__init__' of 'super' object needs an argument Regression in b209518089131c6b4afd18b1d9c320ba3521c5ab. | |||
| 2023-05-04 | Fixed MultipleFileFieldTest.test_file_multiple_validation() test if Pillow ↵ | Mariusz Felisiak | |
| isn't installed. Follow up to fb4c55d9ec4bb812a7fb91fa20510d91645e411b. | |||
| 2023-05-03 | Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of ↵ | Mariusz Felisiak | |
| validation when uploading multiple files using one form field. Thanks Moataz Al-Sharida and nawaik for reports. Co-authored-by: Shai Berger <shai@platonix.com> Co-authored-by: nessita <124304+nessita@users.noreply.github.com> | |||
| 2023-04-28 | Fixed #34380 -- Allowed specifying a default URL scheme in forms.URLField. | Coen van der Kamp | |
| This also deprecates "http" as the default scheme. | |||
| 2023-04-21 | Fixed #34488 -- Made ClearableFileInput preserve "Clear" checked attribute ↵ | Marcelo Galigniana | |
| when form is invalid. | |||
| 2023-03-24 | Fixed #34077 -- Added form field rendering. | David Smith | |
| 2023-03-22 | Fixed #34424 -- Fixed SelectDateWidget crash for inputs raising OverflowError. | Jure Slak | |
| 2023-03-22 | Refs #34434 -- Added assertion for cleaning 0-0-0 for forms.DateField. | Jure Slak | |
| 2023-03-21 | Fixed #34388 -- Allowed using choice enumeration types directly on model and ↵ | T. Franzel | |
| form fields. | |||
| 2023-03-21 | Refs #33134, Refs #34077 -- Adjusted form rendering recursion test. | David Smith | |
| Adjusted recursion depth test to use str() rather than the form or field’s render() method. | |||
| 2023-02-20 | Fixed #34349 -- Fixed FormSet.empty_form crash when deleting extra forms is ↵ | Laurens Verhoeven | |
| disabled. | |||
| 2023-02-15 | Completed test coverage for django.forms.utils. | Marcelo Galigniana | |
| 2023-02-01 | Refs #33476 -- Applied Black's 2023 stable style. | David Smith | |
| Black 23.1.0 is released which, as the first release of the year, introduces the 2023 stable style. This incorporates most of last year's preview style. https://github.com/psf/black/releases/tag/23.1.0 | |||
| 2023-01-19 | Refs #32528 -- Simplified Media.merge(). | Nick Pope | |
| This avoids building up a second datastructure for the duplicate files warning case and simply flatten and strip duplicates if that case ever arises. | |||
| 2023-01-18 | Refs #34233 -- Used str.removeprefix()/removesuffix(). | Mariusz Felisiak | |
| 2023-01-18 | Refs #32339 -- Deprecated transitional form renderers. | Mariusz Felisiak | |
| 2023-01-17 | Refs #32339 -- Changed default form and formset rendering style to div-based. | Mariusz Felisiak | |
| Per deprecation timeline. This also removes "django/forms/default.html" and "django/forms/formsets/default.html" templates. | |||
| 2023-01-17 | Refs #31026 -- Removed ability to return string when rendering ↵ | Mariusz Felisiak | |
| ErrorDict/ErrorList. Per deprecation timeline. | |||
| 2023-01-17 | Refs #31026 -- Removed BaseForm._html_output() per deprecation timeline. | Mariusz Felisiak | |
| 2023-01-17 | Refs #32873 -- Removed settings.USE_L10N per deprecation timeline. | Mariusz Felisiak | |
| 2022-11-28 | Refs #34119 -- Skipped ↵ | Mariusz Felisiak | |
| test_callable_default_hidden_widget_value_not_overridden when JSONField is not supported. | |||
| 2022-11-18 | Fixed #34119 -- Prevented callable default hidden widget value from being ↵ | David Sanders | |
| overridden. Thanks to Benjamin Rigaud for the report. | |||
| 2022-11-18 | Fixed #34148 -- Reverted "Fixed #32901 -- Optimized BaseForm.__getitem__()." | Francesco Panico | |
| This reverts commit edde2a069929c93e37835dc3f7c9a229040058e2. Thanks Jan Pieter Waagmeester for the report. | |||
| 2022-10-31 | Used more augmented assignment statements. | Nick Pope | |
| Identified using the following command: $ git grep -I '\(\<[_a-zA-Z0-9]\+\>\) *= *\1 *[-+/*^%&|<>@]' | |||
| 2022-09-09 | Fixed #33995 -- Fixed FormSet.empty_form crash when empty_permitted is ↵ | DevilsAutumn | |
| passed to form_kwargs. | |||
| 2022-08-25 | Fixed #33830 -- Fixed VariableDoesNotExist when rendering ClearableFileInput. | Neeraj Kumar | |
| 2022-08-02 | Fixed #33876, Refs #32229 -- Made management forms render with div.html ↵ | Carlton Gibson | |
| template. Thanks to Claude Paroz for the report. | |||
| 2022-07-31 | Fixed warnings per flake8 5.0.0. | Mariusz Felisiak | |
