summaryrefslogtreecommitdiff
path: root/tests/utils_tests
AgeCommit message (Collapse)Author
2021-02-18[3.0.x] Fixed CVE-2021-23336 -- Fixed web cache poisoning via ↵Nick Pope
django.utils.http.limited_parse_qsl().
2021-02-01[3.0.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via ↵Mariusz Felisiak
archive.extract(). Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews. Thanks Wang Baohua for the report. Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master.
2020-06-29[3.0.x] Fixed #30807 -- Fixed TestArchive.test_extract_file_permissions() ↵Ad Timmering
when umask is 0o000. Fixed test that checks permissions on files extracted from archives with no permissions set, to not assume a default umask of 0o002. Test regression in c95d063e776e849cf1a0bf616c654165cb89c706. Backport of ec5aa2161d8015a3fe57dcbbfe14200cd18f0a16 from master
2020-05-12[3.0.x] Fixed E128, E741 flake8 warnings.Mariusz Felisiak
Backport of 0668164b4ac93a5be79f5b87fae83c657124d9ab from master.
2020-04-30[3.0.x] Fixed #31521 -- Skipped test_parsing_rfc850 test on 32-bit systems.Hasan Ramezani
Backport of f12162107327b88a2f1faaab15d048e2535ec642 from master
2019-09-30[3.0.x] Fixed #28690 -- Fixed handling of two-digit years in parse_http_date().Ad Timmering
Due to RFC7231 ayear that appears to be more than 50 years in the future are interpreted as representing the past. Backport of 7b5f8acb9e6395a1660dd7bfeb365866ca8ef47c from master
2019-09-30[3.0.x] Refs #28690 -- Added more tests for parse_http_date().Ad Timmering
Backport of 7cbd25a06e820cbd1a0bfbc339fb7d9a737c54fa from master
2019-09-27[3.0.x] Fixed #30810 -- Fixed ↵Pablo García
WatchmanReloaderTests.test_setting_timeout_from_environment_variable test. client_timeout is an instance attribute. Backport of 2fd610eb301dc01e100befed891e8007fd2e981f from master
2019-09-02Fixed #30747 -- Renamed is_safe_url() to url_has_allowed_host_and_scheme().Carlton Gibson
2019-08-26Refs #27804 -- Used subTest() in utils_tests/test_encoding.py.Jon Dufresne
2019-08-23Replaced subprocess commands by run() wherever possible.Claude Paroz
2019-08-13Refs #30461 -- Added django.utils._os.to_path().Claude Paroz
2019-08-11Fixed #30677 -- Improved error message for urlencode() and Client when None ↵swatantra
is passed as data.
2019-08-01Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵Florian Apolloner
django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report.
2019-08-01Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵Florian Apolloner
strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report.
2019-08-01Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when ↵Florian Apolloner
truncating HTML. Thanks to Guido Vranken for initial report.
2019-07-31Fixed #30160 -- Added support for LZMA and XZ templates to ↵Nick Pope
startapp/startproject management commands.
2019-07-31Refs #30160 -- Simplified and improved tests for django.utils.archive.Nick Pope
The file executable should have 0o775 permission not only u=x. The file no_permissions should have 0o644 u=r.
2019-07-30Removed redundant ArchiveTest.test_extract_method() test.Nick Pope
The extract() function has the same code as used in the test method for Archive.extract().
2019-07-30Refs #30160 -- Made destination path a required argument of extract().Nick Pope
2019-07-24Fixed #30647 -- Fixed crash of autoreloader when extra directory cannot be ↵Tom Forbes
resolved.
2019-07-24Removed unused BaseReloader.watch_file().Mariusz Felisiak
Unused since its introduction in c8720e7696ca41f3262d5369365cc1bd72a216ca.
2019-07-23Fixed #30506 -- Fixed crash of autoreloader when path contains null characters.Tom Forbes
2019-07-19Fixed typos in comments and a test name.Min ho Kim
2019-06-28Fixed #30400 -- Improved typography of user facing strings.Jon Dufresne
Thanks Claude Paroz for assistance with translations.
2019-06-26Fixed #30588 -- Fixed crash of autoreloader when __main__ module doesn't ↵Tom Forbes
have __file__ attribute.
2019-06-19Refs #30485 -- Removed non-representative test that emitted a warning.Jon Dufresne
Previously, when running the Django test suite with warnings enabled, the following was emitted: /usr/lib64/python3.7/urllib/parse.py:915: BytesWarning: str() on a bytearray instance v = quote_via(str(v), safe, encoding, errors) This occurred due to the bytearray() being passed to urllib.parse.urlencode() which eventually calls str() on it. The test does not represent desired real world behavior. Rather than test for and assert strange unspecified behavior that emits a warning, remove it. This was also discussed in PR #11374.
2019-05-29Fixed #30523 -- Fixed updating file modification times on seen files in ↵Tom Forbes
auto-reloader when using StatReloader. Previously we updated the file mtimes if the file has not been seen before - i.e on the first iteration of the loop. If the mtime has been changed we triggered the notify_file_changed() method which in all cases except the translations will result in the process being terminated. To be strictly correct we need to update the mtime for either branch of the conditional. Regression in 6754bffa2b2df15a741008aa611c1bb0e8dff22b.
2019-05-29Fixed #30516 -- Fixed crash of autoreloader when re-raising exceptions with ↵Tom Forbes
custom signature. Regression in c8720e7696ca41f3262d5369365cc1bd72a216ca.
2019-05-28Fixed #30479 -- Fixed detecting changes in manage.py by autoreloader when ↵Tom Forbes
using StatReloader. Regression in c8720e7696ca41f3262d5369365cc1bd72a216ca.
2019-05-24Fixed #30485 -- Adjusted django.utils.http.urlencode for doseq=False case.Johan Lübcke
2019-05-22Fixed #30498 -- Fixed proxy class caching in lazy().Ran Benita
lazy() should prepare the proxy class only once (the first time it's used) not on every call. Regression in b4e76f30d12bfa8a53cc297c60055c6f4629cc4c.
2019-05-08Refs #27753 -- Deprecated django.utils.text.unescape_entities().Jon Dufresne
The function was undocumented and only required for compatibility with Python 2. Code should use Python's html.unescape() that was added in Python 3.4.
2019-04-29Fixed #30323 -- Fixed detecting changes by autoreloader when using StatReloader.Tom Forbes
2019-04-26Fixed #30361 -- Increased the default timeout of watchman client to 5 ↵Jacob Green
seconds and made it customizable. Made the default timeout of watchman client customizable via DJANGO_WATCHMAN_TIMEOUT environment variable.
2019-04-25Fixed #30399 -- Changed django.utils.html.escape()/urlize() to use ↵Jon Dufresne
html.escape()/unescape().
2019-04-24Fixed #30366 -- Skipped StatReloaderTests on HFS+ filesystems.Martijn Jacobs
When on MacOS High Sierra or below (<=10.13) it could be that a HFS+ filesystem is used. HFS+ has a time resolution of only one second which can be too low for some of the tests.
2019-04-13Fixed #30363 -- Do not use exponential notation for small decimal numbers.Sjoerd Job Postmus
In 9cc6a60040b0f64f8ea066dd215176d4bd16621d a security patch was introduced to prevent allocating large segments of memory when a very large or very small decimal number was to be formatted. As a side-effect, there was a change in formatting of small decimal numbers even when the `decimal_pos` argument was provided, which meant that reasonable small decimal numbers (above 1e-199) would be formatted as `0.00`, while smaller decimal numbers (under 1e-200) would be formatted as `1e-200`.
2019-03-20Fixed #30264 -- Fixed crash of test_parsing_year_less_than_70() on 32-bit ↵Mariusz Felisiak
systems. Thanks Andreas Beckmann and Chris Lamb for the report.
2019-03-15Cleaned up exception message checking in some tests.Jon Dufresne
2019-02-27Fixed #30215 -- Fixed autoreloader crash for modules without __spec__.shiningfm
Regression in c8720e7696ca41f3262d5369365cc1bd72a216ca.
2019-02-25Refs #30179 -- Moved topological sort functions to django.utils.Matthias Kestenholz
2019-02-23Fixed #30141 -- Fixed parse_duration() for some negative durations.Seunghun Lee
2019-02-11Fixed spelling mistakes in comments and tests.Semen Zhydenko
2019-02-11Fixed CVE-2019-6975 -- Fixed memory exhaustion in utils.numberformat.format().Carlton Gibson
Thanks Sjoerd Job Postmus for the report and initial patch. Thanks Michael Manfre, Tim Graham, and Florian Apolloner for review.
2019-02-09Removed unneeded list() calls in sorted() argument.Sergey Fedoseev
2019-02-06Refs #27753 -- Favored SafeString over SafeText.Tim Graham
2019-02-06Refs #27753 -- Deprecated django.utils.encoding.force_text() and smart_text().Tim Graham
2019-02-06Refs #27753 -- Favored force/smart_str() over force/smart_text().Aymeric Augustin
2019-02-04Refs #27753 -- Deprecated django.utils.http urllib aliases.Tim Graham
generated by cgit v1.3 (git 2.53.0) at 2026-07-07 21:03:28 +0000