summaryrefslogtreecommitdiff
path: root/tests/utils_tests
AgeCommit message (Collapse)Author
2019-07-31[2.1.x] Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵Florian Apolloner
django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report.
2019-07-29[2.1.X] Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵Florian Apolloner
strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report.
2019-07-29[2.1.X] Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues ↵Florian Apolloner
when truncating HTML. Thanks to Guido Vranken for initial report.
2019-02-11[2.1.x] Fixed CVE-2019-6975 -- Fixed memory exhaustion in ↵Carlton Gibson
utils.numberformat.format(). Thanks Sjoerd Job Postmus for the report and initial patch. Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review. Backport of 402c0caa851e265410fbcaa55318f22d2bf22ee2 from master
2018-10-17[2.1.x] Fixed #29838 -- Fixed crash when combining Q objects with __in ↵aspalding
lookups and lists. Regression in fc6528b25ab1834be1a478b405bf8f7ec5cf860c. Backport of 834c4ec8e4cfc43acf0525e0a4d8c914534f6afd, 217f82d7139fd32f07adbfa92c5fb383d0ade577, and dc5e75d419893bde33b7e439b59bdf271fc1a3f2 from master.
2018-10-09[2.1.x] Refs #29784 -- Switched to https:// links where available.Jon Dufresne
Backport of 82f286cf6f198d37850d3c5df637b5665566a66b from master.
2018-08-08[2.1.x] Fixed #29643 -- Fixed crash when combining Q objects with __in ↵Mariusz Felisiak
lookups and lists. Regression in fc6528b25ab1834be1a478b405bf8f7ec5cf860c. Backport of 9fee229874367beafd532dad6d0f9ff9676ded0b from master
2018-08-01[2.1.x] Fixed CVE-2018-14574 -- Fixed open redirect possibility in ↵Andreas Hug
CommonMiddleware.
2018-07-23[2.1.x] Refs #29514 -- Added test for get_default_timezone()/timezone.utc ↵Carlton Gibson
equality. Backport of f4ef71c689b7bf3b0237d12c634fe5557f646a79 from master
2018-07-19[2.1.x] Fixed #29578 -- Made numberformat.format() honor forced l10n usage.Claude Paroz
Thanks Sassan Haradji for the report. Backport of 0adfba968e28cfb4e4d681e658866debbbd68089 from master
2018-03-06Added more tests for django.utils.html.urlize().Tim Graham
2018-03-06Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in ↵Tim Graham
django.utils.text.Truncator. Thanks James Davis for suggesting the fix.
2018-03-06Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and ↵Tim Graham
urlizetrunc template filters. Thanks Florian Apolloner for assisting with the patch.
2018-02-10Added tests for utils.html.urlize() (lazy string inputs were untested).Tim Graham
2018-02-07Fixed #17419 -- Added json_tag template filter.Jonas Haag
2018-02-02Fixed imports per isort 4.3.1.Tim Graham
Partially reverted 9bcf73d788866bc93f8248cb2e9d601ecbc4b50c.
2018-02-01Fixed imports per isort 4.3.0.Mariusz Felisiak
2018-01-21Fixed #29038 -- Removed closing slash from HTML void tags.Jon Dufresne
2018-01-11Fixed #28638 -- Made allowed_hosts a required argument of is_safe_url().Jon Dufresne
2018-01-02Refs #28965 -- Deprecated unused django.utils.http.cookie_date().Tim Graham
2017-12-28Fixed #28926 -- Fixed loss of precision of big DurationField values on ↵Sergey Fedoseev
SQLite and MySQL.
2017-11-23Used bytes.hex() and bytes.fromhex() to simplify.Sergey Fedoseev
2017-11-06Fixed #28501 -- Fixed "python -m django runserver" crash.Yusuke Miyazaki
2017-11-06Added RestartWithReloaderTests.Yusuke Miyazaki
2017-10-24Fixed #28739 -- Fixed get_fixed_timezone() for negative timedeltas.medmunds
2017-10-12Fixed #28679 -- Fixed urlencode()'s handling of bytes.François Freitag
Regression in fee42fd99ee470528858c2ccb3621135c30ec262. Thanks Claude Paroz, Jon Dufresne, and Tim Graham for the guidance.
2017-10-10Split django.utils.http tests into separate test classes.François Freitag
2017-09-28Fixed #28629 -- Made tree.Node instances hashable.Mariusz Felisiak
Regression in 508b5debfb16843a8443ebac82c1fb91f15da687 which added Node.__eq__().
2017-09-27Added a test for pbkdf2()'s default digest algorithm.Mads Jensen
2017-09-22Refs #27648 -- Removed support for (iLmsu) regex groups in url() patterns.Tim Graham
Per deprecation timeline.
2017-09-22Refs #26956 -- Removed the host parameter of django.utils.http.is_safe_url().Tim Graham
Per deprecation timeline.
2017-09-21Added test for too large input to django.utils.http.base36_to_int().Mads Jensen
2017-09-02Fixed #28306 -- Completed test coverage for django.utils.lorem_ipsum.LBerrocal
Thanks Idan Melamed for the original patch.
2017-07-12Refs #28389 -- Added release note and test for pickling of LazyObject when ↵Sergey Fedoseev
wrapped object doesn't have __reduce__(). Forwardport of 30f334cc58e939c7d9bd8455c80bd066fbde9f2b from stable/1.11.x
2017-07-03Fixed #28076 -- Added support for PostgreSQL's interval format to ↵Matthew Schinckel
parse_duration().
2017-07-03Refs #27804 -- Used subTest() in dateparse tests.Matthew Schinckel
2017-06-29Refs #28280 -- Added more tests for utils.numberformat.format().Wil Tan
2017-06-20Fixed #28324 -- Made feedgenerators write feeds with deterministically ↵Georg Sauthoff
ordered attributes.
2017-06-08Fixed #28241 -- Allowed module_has_submodule()'s module_name arg to be a ↵Thomas Khyn
dotted path.
2017-05-27Fixed #28249 -- Removed unnecessary dict.keys() calls.Jon Dufresne
iter(dict) is equivalent to iter(dict.keys()).
2017-05-10Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.UmanShahzad
2017-04-26Refs #20094 -- Removed obsolete tests/utils_tests/test_itercompat.pyTim Graham
The is_iterator() function was removed in 2456ffa42c33d63b54579eae0f5b9cf2a8cd3714.
2017-04-11Fixed #28064 -- Removed double-quoting of key names in MultiValueDictKeyError.petedmarsh
2017-04-04Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.Tim Graham
This is a security fix.
2017-04-04Updated tests after French translation updateClaude Paroz
2017-03-17Replaced type-specific assertions with assertEqual().Tim Graham
Python docs say, "it's usually not necessary to invoke these methods directly."
2017-03-04Refs #27795 -- Removed unneeded force_text callsClaude Paroz
Thanks Tim Graham for the review.
2017-03-04Fixed #27900 -- Made escapejs escape backticks for use in ES6 template literals.Tim Graham
2017-02-24Fixed #27879 -- Fixed crash if enclosures aren't provided to ↵Pavlo Kapyshin
Atom1Feed.add_item(). Regression in 75cf9b5ac031feb8f94271c9906157c921a14520
2017-02-23Refs #11964 -- Made Q objects deconstructible.Ian Foote
generated by cgit v1.3 (git 2.53.0) at 2026-07-07 22:07:04 +0000