| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-02-01 | [3.1.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via ↵ | Mariusz Felisiak | |
| archive.extract(). Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews. Thanks Wang Baohua for the report. Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master. | |||
| 2020-11-19 | [3.1.x] Fixed #32202 -- Fixed autoreloader argument generation for Windows ↵ | Carlton Gibson | |
| with Python 3.7-. Backport of ead37dfb580136cc27dbd487a1f1ad90c9235d15 from master | |||
| 2020-07-20 | [3.1.x] Used temporary directory in RestartWithReloaderTests.test_manage_py(). | Tom Forbes | |
| Using the current directory can cause a PermissionError. Backport of 730711e8282893723f993f55d3e3b0c823cfdb9a from master | |||
| 2020-06-29 | [3.1.x] Fixed #30807 -- Fixed TestArchive.test_extract_file_permissions() ↵ | Ad Timmering | |
| when umask is 0o000. Fixed test that checks permissions on files extracted from archives with no permissions set, to not assume a default umask of 0o002. Test regression in c95d063e776e849cf1a0bf616c654165cb89c706. Backport of ec5aa2161d8015a3fe57dcbbfe14200cd18f0a16 from master | |||
| 2020-06-18 | [3.1.x] Fixed #31716 -- Fixed detection of console scripts in autoreloader ↵ | Tom Forbes | |
| on Windows. Backport of 8a902b7ee622ada258d15fb122092c1f02b82698 from master | |||
| 2020-05-12 | Fixed E128, E741 flake8 warnings. | Mariusz Felisiak | |
| 2020-05-04 | Refs #30573 -- Rephrased "Of Course" and "Obvious(ly)" in documentation and ↵ | Adam Johnson | |
| comments. | |||
| 2020-05-04 | Corrected opts argument of colorize in ↵ | Rasmus Wriedt Larsen | |
| TermColorTests.test_colorize_empty_text(). | |||
| 2020-04-30 | Fixed #31521 -- Skipped test_parsing_rfc850 test on 32-bit systems. | Hasan Ramezani | |
| 2020-04-20 | Capitalized Unicode in docs, strings, and comments. | Jon Dufresne | |
| 2020-03-11 | Fixed #31359 -- Deprecated get_random_string() calls without an explicit length. | Claude Paroz | |
| 2020-02-26 | Fixed #28280 -- Prevented numberformat.format() from formatting large/tiny ↵ | Hasan Ramezani | |
| floats in scientific notation. | |||
| 2020-02-18 | Refs #26601 -- Deprecated passing None as get_response arg to middleware ↵ | Claude Paroz | |
| classes. This is the new contract since middleware refactoring in Django 1.10. Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es> Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2020-02-07 | Used assertRaisesMessage() in various tests. | Hasan Ramezani | |
| 2020-01-27 | Refs #27468 -- Added algorithm parameter to django.utils.crypto.salted_hmac(). | Claude Paroz | |
| 2020-01-15 | Refs #27468 -- Added explicit tests for django.utils.crypto.salted_hmac() | Claude Paroz | |
| 2019-12-30 | Fixed #30892 -- Fixed slugify() and admin's URLify.js for "İ". | Sjbrgsn | |
| Thanks Luis Nell for the implementation idea and very detailed report. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> | |||
| 2019-12-27 | Increased test coverage of django.utils.inspect. | Mads Jensen | |
| 2019-12-11 | Fixed #31080 -- Removed redundant type="text/javascript" attribute from ↵ | Jon Dufresne | |
| <script> tags. | |||
| 2019-11-27 | Fixed #30803 -- Allowed comma separators for milliseconds in ↵ | Farhaan Bukhsh | |
| django.utils.dateparse functions. Co-Authored-By: Ben Wilber <benwilber@gmail.com> | |||
| 2019-11-27 | Refs #30803 -- Allowed comma separators for decimal fractions in ↵ | Farhaan Bukhsh | |
| parse_duration(). | |||
| 2019-11-22 | Fixed #9762 -- Made DateFormat.r() locale-independent. | Baptiste Mispelon | |
| Thanks to Antonio Melé for the original report all those years ago and to all the contributors who helped along the way. | |||
| 2019-11-22 | Refs #26281 -- Added a helpful error message for an invalid "r" specifier to ↵ | Baptiste Mispelon | |
| dateformat.format(). | |||
| 2019-11-18 | Refs #30990 -- Added test for 'z' date format with a leap year. | Baptiste Mispelon | |
| 2019-11-05 | Passed strict=True to Path.resolve() to enforce that the path must exist. | Jon Dufresne | |
| 2019-10-30 | Refs #28428 -- Made filepath_to_uri() support pathlib.Path. | Hasan Ramezani | |
| 2019-10-29 | Used more specific unittest assertions in tests. | Nick Pope | |
| * assertIsNone()/assertIsNotNone() instead of comparing to None. * assertLess() for < comparisons. * assertIs() for 'is' expressions. * assertIsInstance() for isinstance() expressions. * rounding of assertAlmostEqual() for round() expressions. * assertIs(..., True/False) instead of comparing to True/False. * assertIs()/assertIsNot() for ==/!= comparisons. * assertNotEqual() for == comparisons. * assertTrue()/assertFalse() instead of comparing to True/False. | |||
| 2019-10-28 | Fixed #30918 -- Made timesince()/timeuntil() respect custom time strings for ↵ | Hasan Ramezani | |
| future and the same datetimes. | |||
| 2019-10-21 | Fixed #30876 -- Moved classproperty() decorator to the django.utils.functional. | André Ericson | |
| 2019-09-30 | Fixed #28690 -- Fixed handling of two-digit years in parse_http_date(). | Ad Timmering | |
| Due to RFC7231 ayear that appears to be more than 50 years in the future are interpreted as representing the past. | |||
| 2019-09-30 | Refs #28690 -- Added more tests for parse_http_date(). | Ad Timmering | |
| 2019-09-27 | Fixed #30810 -- Fixed ↵ | Pablo García | |
| WatchmanReloaderTests.test_setting_timeout_from_environment_variable test. client_timeout is an instance attribute. | |||
| 2019-09-10 | Refs #29546 -- Removed django.utils.timezone.FixedOffset per deprecation ↵ | Mariusz Felisiak | |
| timeline. | |||
| 2019-09-02 | Fixed #30747 -- Renamed is_safe_url() to url_has_allowed_host_and_scheme(). | Carlton Gibson | |
| 2019-08-26 | Refs #27804 -- Used subTest() in utils_tests/test_encoding.py. | Jon Dufresne | |
| 2019-08-23 | Replaced subprocess commands by run() wherever possible. | Claude Paroz | |
| 2019-08-13 | Refs #30461 -- Added django.utils._os.to_path(). | Claude Paroz | |
| 2019-08-11 | Fixed #30677 -- Improved error message for urlencode() and Client when None ↵ | swatantra | |
| is passed as data. | |||
| 2019-08-01 | Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in ↵ | Florian Apolloner | |
| django.utils.encoding.uri_to_iri(). Thanks to Guido Vranken for initial report. | |||
| 2019-08-01 | Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in ↵ | Florian Apolloner | |
| strip_tags() when handling incomplete HTML entities. Thanks to Guido Vranken for initial report. | |||
| 2019-08-01 | Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when ↵ | Florian Apolloner | |
| truncating HTML. Thanks to Guido Vranken for initial report. | |||
| 2019-07-31 | Fixed #30160 -- Added support for LZMA and XZ templates to ↵ | Nick Pope | |
| startapp/startproject management commands. | |||
| 2019-07-31 | Refs #30160 -- Simplified and improved tests for django.utils.archive. | Nick Pope | |
| The file executable should have 0o775 permission not only u=x. The file no_permissions should have 0o644 u=r. | |||
| 2019-07-30 | Removed redundant ArchiveTest.test_extract_method() test. | Nick Pope | |
| The extract() function has the same code as used in the test method for Archive.extract(). | |||
| 2019-07-30 | Refs #30160 -- Made destination path a required argument of extract(). | Nick Pope | |
| 2019-07-24 | Fixed #30647 -- Fixed crash of autoreloader when extra directory cannot be ↵ | Tom Forbes | |
| resolved. | |||
| 2019-07-24 | Removed unused BaseReloader.watch_file(). | Mariusz Felisiak | |
| Unused since its introduction in c8720e7696ca41f3262d5369365cc1bd72a216ca. | |||
| 2019-07-23 | Fixed #30506 -- Fixed crash of autoreloader when path contains null characters. | Tom Forbes | |
| 2019-07-19 | Fixed typos in comments and a test name. | Min ho Kim | |
| 2019-06-28 | Fixed #30400 -- Improved typography of user facing strings. | Jon Dufresne | |
| Thanks Claude Paroz for assistance with translations. | |||
