| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-05-06 | [2.2.x] Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs ↵ | Mariusz Felisiak | |
| from being accepted in URLValidator on Python 3.9.5+. In Python 3.9.5+ urllib.parse() automatically removes ASCII newlines and tabs from URLs [1, 2]. Unfortunately it created an issue in the URLValidator. URLValidator uses urllib.urlsplit() and urllib.urlunsplit() for creating a URL variant with Punycode which no longer contains newlines and tabs in Python 3.9.5+. As a consequence, the regular expression matched the URL (without unsafe characters) and the source value (with unsafe characters) was considered valid. [1] https://bugs.python.org/issue43882 and [2] https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4 Backport of e1e81aa1c4427411e3c68facdd761229ffea6f6f from main. | |||
| 2018-10-22 | Fixed #29860 -- Allowed BaseValidator to accept a callable limit_value. | buzzi | |
| 2018-08-18 | Refactored validators tests to use subtests. | Tom Forbes | |
| 2018-01-10 | Fixed #29007 -- Fixed DecimalValidator crash on NaN, SNan, Inf, and Infinity ↵ | Fabio Bonelli | |
| values. | |||
| 2017-09-27 | Fixed #28562 -- Fixed DecimalValidator handling of positive exponent ↵ | Josh Schneier | |
| scientific notation. | |||
| 2017-09-11 | Added tests for DecimalValidator. | Josh Schneier | |
| 2017-08-12 | Fixed #28201 -- Added ProhibitNullCharactersValidator and used it on ↵ | Alejandro Zamora | |
| CharField form field. | |||
| 2017-07-29 | Used assertRaisesMessage() to test Django's error messages. | Mads Jensen | |
| 2017-06-07 | Fixed #28165 -- Ignored case in FileExtensionValidator's allowed_extensions. | Arne de Laat | |
| 2017-06-07 | Added FileExtensionValidator tests for uppercase and missing file extensions. | Arne de Laat | |
| 2017-01-20 | Refs #23919 -- Removed str_prefix usage | Claude Paroz | |
| 2017-01-20 | Refs #23919 -- Removed django.utils._os.upath()/npath()/abspathu() usage. | Tim Graham | |
| These functions do nothing on Python 3. | |||
| 2017-01-18 | Refs #23919 -- Replaced io.open() with open(). | Aymeric Augustin | |
| io.open() is an alias for open() on Python 3. | |||
| 2017-01-18 | Refs #23919 -- Removed encoding preambles and future imports | Claude Paroz | |
| 2016-11-14 | Fixed E305 flake8 warnings. | Ramin Farajpour Cami | |
| 2016-11-10 | Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings. | za | |
| 2016-10-28 | Fixed #26578 -- Prohibited non-ASCII digits in validate_ipv4_address. | wim glenn | |
| 2016-07-02 | Refs #21548 -- Skipped tests that rely on pillow when it's not installed | Baptiste Mispelon | |
| 2016-06-30 | Fixed #21548 -- Added FileExtensionValidator and validate_image_file_extension. | Berker Peksag | |
| 2016-06-28 | Replaced use of TestCase.fail() with assertRaises(). | Tim Graham | |
| Also removed try/except/fail antipattern that hides exceptions. | |||
| 2016-02-18 | Fixed #26107 -- Added option to int_list_validator() to allow negative integers. | Akshesh | |
| 2015-10-31 | Fixed #25635 -- Made URLValidator allow '+' in scheme. | Dheerendra Rathor | |
| 2015-09-18 | Fixed #24636 -- Added model field validation for decimal places and max digits. | Iulia Chiriac | |
| 2015-07-17 | Fixed #16501 -- Added an allow_unicode parameter to SlugField. | Edward Henderson | |
| Thanks Flavio Curella and Berker Peksag for the initial patch. | |||
| 2015-07-08 | Fixed catastrophic backtracking in URLValidator. | Shai Berger | |
| Thanks João Silva for reporting the problem and Tim Graham for finding the problematic RE and for review. This is a security fix; disclosure to follow shortly. | |||
| 2015-07-08 | Prevented newlines from being accepted in some validators. | Tim Graham | |
| This is a security fix; disclosure to follow shortly. Thanks to Sjoerd Job Postmus for the report and draft patch. | |||
| 2015-04-17 | Fixed #24349 -- Limited domain name labels to 63 characters in EmailValidator | Anoop Thomas Mathew | |
| 2015-03-25 | Fixed #24531 -- Improved CommaSeparatedIntegerField validation. | Bertrand Bordage | |
| `','`, `'1,,1'`, `',1'` etc. are no longer considered as valid comma-separated integer lists. | |||
| 2015-02-06 | Sorted imports with isort; refs #23860. | Tim Graham | |
| 2014-11-03 | Refactored URLValidator tests by moving URLs to text files. | Danilo Bargen | |
| 2014-07-26 | Fixed #16617 -- Added 'value' to BaseValidator params. | Anubhav Joshi | |
| Also allowed overriding the default messages in subclasses of BaseValidator. Thanks sperrygrove for initial patch. | |||
| 2014-07-04 | Corrected domain max length for EmailValidator; refs #20631. | Tim Graham | |
| Thanks MarkusH for the report. | |||
| 2014-07-04 | Fixed #20631 -- Increased the default EmailField max_length to 254. | Tim Graham | |
| Thanks pmartin for the report. | |||
| 2014-05-16 | Fixed #22579 -- Corrected validation for email to reject trailing slash | Erik Romijn | |
| Thanks to Claude Paroz for the report and patch and Tomasz Paczkowski for the review. | |||
| 2014-05-08 | Fixed #22588 -- Fix RegexValidator __eq__ | David Szotten | |
| Compare parameters instead of re.pattern instances, and add the other parameters to the comparison. Also add a __ne__ to make assertNotEqual work properly. | |||
| 2014-04-26 | Fix many many typos in comments throughout the codebase | Alex Gaynor | |
| 2014-03-21 | Fixed #22255 -- Added support for specifying re flags in RegexValidator | Dejan Noveski | |
| 2014-02-22 | Fixed #22123 -- EmailValidator now also accepts IPv6 literals in addresses | Erik Romijn | |
| 2014-02-10 | Fixed #20784 -- Added inverse_match parameter to RegexValidator. | Si Feng | |
| 2014-01-19 | Fixed #21638: Validators are now comparable, stops infinite user mig'ns | Andrew Godwin | |
| 2013-12-28 | Fixed #21242 -- Allowed more IANA schemes in URLValidator | Claude Paroz | |
| Thanks Sascha Peilicke for the report and initial patch, and Tim Graham for the review. | |||
| 2013-11-02 | Fixing E302 Errors | Jason Myers | |
| Signed-off-by: Jason Myers <jason@jasonamyers.com> | |||
| 2013-10-23 | Fixed #12027 -- Fixed EmailValidator to reject a trailing dot. | Tim Graham | |
| Thanks Klas H for the report and claudep for the patch. | |||
| 2013-10-23 | Fixed #21298 -- Fixed E301 pep8 warnings | Alasdair Nicol | |
| 2013-10-22 | Removed import * in tests. | Tim Graham | |
| Thanks to flake8 path/to/file.py | awk -F ' ' '{ print $5 }' | sort | uniq | |||
| 2013-10-11 | Fixed errors in 848101bf1736d1c01eb86968e85a14c7466bb376 | Tim Graham | |
| 2013-10-11 | Added tests for URLValidator schemes. | Sascha Peilicke | |
| 2013-07-21 | Fixed an email validation regression | Claude Paroz | |
| Thanks Vincent Wagelaar for the report. | |||
| 2013-07-01 | Stopped using django.utils.unittest in the test suite. | Aymeric Augustin | |
| Refs #20680. | |||
| 2013-06-18 | Fixed #20199 -- Allow ModelForm fields to override error_messages from model ↵ | Loic Bistuer | |
| fields | |||
 |
index : chango.git | |
| django |
| summaryrefslogtreecommitdiff |