| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2019-09-30 | [3.0.x] Fixed #28690 -- Fixed handling of two-digit years in parse_http_date(). | Ad Timmering | |
| Due to RFC7231 ayear that appears to be more than 50 years in the future are interpreted as representing the past. Backport of 7b5f8acb9e6395a1660dd7bfeb365866ca8ef47c from master | |||
| 2019-09-30 | [3.0.x] Refs #28690 -- Added more tests for parse_http_date(). | Ad Timmering | |
| Backport of 7cbd25a06e820cbd1a0bfbc339fb7d9a737c54fa from master | |||
| 2019-09-27 | [3.0.x] Fixed #30810 -- Fixed ↵ | Pablo García | |
| WatchmanReloaderTests.test_setting_timeout_from_environment_variable test. client_timeout is an instance attribute. Backport of 2fd610eb301dc01e100befed891e8007fd2e981f from master | |||
| 2019-09-02 | Fixed #30747 -- Renamed is_safe_url() to url_has_allowed_host_and_scheme(). | Carlton Gibson | |
| 2019-08-26 | Refs #27804 -- Used subTest() in utils_tests/test_encoding.py. | Jon Dufresne | |
| 2019-08-23 | Replaced subprocess commands by run() wherever possible. | Claude Paroz | |
| 2019-08-13 | Refs #30461 -- Added django.utils._os.to_path(). | Claude Paroz | |
| 2019-08-11 | Fixed #30677 -- Improved error message for urlencode() and Client when None ↵ | swatantra | |
| is passed as data. | |||
| 2019-08-01 | Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵ | Florian Apolloner | |
| django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report. | |||
| 2019-08-01 | Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵ | Florian Apolloner | |
| strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report. | |||
| 2019-08-01 | Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when ↵ | Florian Apolloner | |
| truncating HTML. Thanks to Guido Vranken for initial report. | |||
| 2019-07-31 | Fixed #30160 -- Added support for LZMA and XZ templates to ↵ | Nick Pope | |
| startapp/startproject management commands. | |||
| 2019-07-31 | Refs #30160 -- Simplified and improved tests for django.utils.archive. | Nick Pope | |
| The file executable should have 0o775 permission not only u=x. The file no_permissions should have 0o644 u=r. | |||
| 2019-07-30 | Removed redundant ArchiveTest.test_extract_method() test. | Nick Pope | |
| The extract() function has the same code as used in the test method for Archive.extract(). | |||
| 2019-07-30 | Refs #30160 -- Made destination path a required argument of extract(). | Nick Pope | |
| 2019-07-24 | Fixed #30647 -- Fixed crash of autoreloader when extra directory cannot be ↵ | Tom Forbes | |
| resolved. | |||
| 2019-07-24 | Removed unused BaseReloader.watch_file(). | Mariusz Felisiak | |
| Unused since its introduction in c8720e7696ca41f3262d5369365cc1bd72a216ca. | |||
| 2019-07-23 | Fixed #30506 -- Fixed crash of autoreloader when path contains null characters. | Tom Forbes | |
| 2019-07-19 | Fixed typos in comments and a test name. | Min ho Kim | |
| 2019-06-28 | Fixed #30400 -- Improved typography of user facing strings. | Jon Dufresne | |
| Thanks Claude Paroz for assistance with translations. | |||
| 2019-06-26 | Fixed #30588 -- Fixed crash of autoreloader when __main__ module doesn't ↵ | Tom Forbes | |
| have __file__ attribute. | |||
| 2019-06-19 | Refs #30485 -- Removed non-representative test that emitted a warning. | Jon Dufresne | |
| Previously, when running the Django test suite with warnings enabled, the following was emitted: /usr/lib64/python3.7/urllib/parse.py:915: BytesWarning: str() on a bytearray instance v = quote_via(str(v), safe, encoding, errors) This occurred due to the bytearray() being passed to urllib.parse.urlencode() which eventually calls str() on it. The test does not represent desired real world behavior. Rather than test for and assert strange unspecified behavior that emits a warning, remove it. This was also discussed in PR #11374. | |||
| 2019-05-29 | Fixed #30523 -- Fixed updating file modification times on seen files in ↵ | Tom Forbes | |
| auto-reloader when using StatReloader. Previously we updated the file mtimes if the file has not been seen before - i.e on the first iteration of the loop. If the mtime has been changed we triggered the notify_file_changed() method which in all cases except the translations will result in the process being terminated. To be strictly correct we need to update the mtime for either branch of the conditional. Regression in 6754bffa2b2df15a741008aa611c1bb0e8dff22b. | |||
| 2019-05-29 | Fixed #30516 -- Fixed crash of autoreloader when re-raising exceptions with ↵ | Tom Forbes | |
| custom signature. Regression in c8720e7696ca41f3262d5369365cc1bd72a216ca. | |||
| 2019-05-28 | Fixed #30479 -- Fixed detecting changes in manage.py by autoreloader when ↵ | Tom Forbes | |
| using StatReloader. Regression in c8720e7696ca41f3262d5369365cc1bd72a216ca. | |||
| 2019-05-24 | Fixed #30485 -- Adjusted django.utils.http.urlencode for doseq=False case. | Johan Lübcke | |
| 2019-05-22 | Fixed #30498 -- Fixed proxy class caching in lazy(). | Ran Benita | |
| lazy() should prepare the proxy class only once (the first time it's used) not on every call. Regression in b4e76f30d12bfa8a53cc297c60055c6f4629cc4c. | |||
| 2019-05-08 | Refs #27753 -- Deprecated django.utils.text.unescape_entities(). | Jon Dufresne | |
| The function was undocumented and only required for compatibility with Python 2. Code should use Python's html.unescape() that was added in Python 3.4. | |||
| 2019-04-29 | Fixed #30323 -- Fixed detecting changes by autoreloader when using StatReloader. | Tom Forbes | |
| 2019-04-26 | Fixed #30361 -- Increased the default timeout of watchman client to 5 ↵ | Jacob Green | |
| seconds and made it customizable. Made the default timeout of watchman client customizable via DJANGO_WATCHMAN_TIMEOUT environment variable. | |||
| 2019-04-25 | Fixed #30399 -- Changed django.utils.html.escape()/urlize() to use ↵ | Jon Dufresne | |
| html.escape()/unescape(). | |||
| 2019-04-24 | Fixed #30366 -- Skipped StatReloaderTests on HFS+ filesystems. | Martijn Jacobs | |
| When on MacOS High Sierra or below (<=10.13) it could be that a HFS+ filesystem is used. HFS+ has a time resolution of only one second which can be too low for some of the tests. | |||
| 2019-04-13 | Fixed #30363 -- Do not use exponential notation for small decimal numbers. | Sjoerd Job Postmus | |
| In 9cc6a60040b0f64f8ea066dd215176d4bd16621d a security patch was introduced to prevent allocating large segments of memory when a very large or very small decimal number was to be formatted. As a side-effect, there was a change in formatting of small decimal numbers even when the `decimal_pos` argument was provided, which meant that reasonable small decimal numbers (above 1e-199) would be formatted as `0.00`, while smaller decimal numbers (under 1e-200) would be formatted as `1e-200`. | |||
| 2019-03-20 | Fixed #30264 -- Fixed crash of test_parsing_year_less_than_70() on 32-bit ↵ | Mariusz Felisiak | |
| systems. Thanks Andreas Beckmann and Chris Lamb for the report. | |||
| 2019-03-15 | Cleaned up exception message checking in some tests. | Jon Dufresne | |
| 2019-02-27 | Fixed #30215 -- Fixed autoreloader crash for modules without __spec__. | shiningfm | |
| Regression in c8720e7696ca41f3262d5369365cc1bd72a216ca. | |||
| 2019-02-25 | Refs #30179 -- Moved topological sort functions to django.utils. | Matthias Kestenholz | |
| 2019-02-23 | Fixed #30141 -- Fixed parse_duration() for some negative durations. | Seunghun Lee | |
| 2019-02-11 | Fixed spelling mistakes in comments and tests. | Semen Zhydenko | |
| 2019-02-11 | Fixed CVE-2019-6975 -- Fixed memory exhaustion in utils.numberformat.format(). | Carlton Gibson | |
| Thanks Sjoerd Job Postmus for the report and initial patch. Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review. | |||
| 2019-02-09 | Removed unneeded list() calls in sorted() argument. | Sergey Fedoseev | |
| 2019-02-06 | Refs #27753 -- Favored SafeString over SafeText. | Tim Graham | |
| 2019-02-06 | Refs #27753 -- Deprecated django.utils.encoding.force_text() and smart_text(). | Tim Graham | |
| 2019-02-06 | Refs #27753 -- Favored force/smart_str() over force/smart_text(). | Aymeric Augustin | |
| 2019-02-04 | Refs #27753 -- Deprecated django.utils.http urllib aliases. | Tim Graham | |
| 2019-01-30 | Fixed #30116 -- Dropped support for Python 3.5. | Tim Graham | |
| 2019-01-28 | Fixed #25624 -- Fixed autoreload crash with jinja2.ModuleLoader. | Tom Forbes | |
| 2019-01-27 | Removed default mode='r' argument from calls to open(). | Jon Dufresne | |
| 2019-01-23 | Completed test coverage for utils.text._replace_entity(). | Hasan Ramezani | |
| 2019-01-19 | Completed test coverage for utils.text.Truncator.chars(). | Hasan Ramezani | |
