| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2021-05-06 | [3.2.x] Fixed #32713, Fixed CVE-2021-32052 -- Prevented newlines and tabs ↵ | Mariusz Felisiak | |
| from being accepted in URLValidator on Python 3.9.5+. In Python 3.9.5+ urllib.parse() automatically removes ASCII newlines and tabs from URLs [1, 2]. Unfortunately it created an issue in the URLValidator. URLValidator uses urllib.urlsplit() and urllib.urlunsplit() for creating a URL variant with Punycode which no longer contains newlines and tabs in Python 3.9.5+. As a consequence, the regular expression matched the URL (without unsafe characters) and the source value (with unsafe characters) was considered valid. [1] https://bugs.python.org/issue43882 and [2] https://github.com/python/cpython/commit/76cd81d60310d65d01f9d7b48a8985d8ab89c8b4 Backport of e1e81aa1c4427411e3c68facdd761229ffea6f6f from main. | |||
| 2020-07-16 | Fixed typo in DecimalValidator tests. | Claudio Catterina | |
| This replaces redundant test for -Infinity with +Infinity. | |||
| 2020-06-18 | Refs #31670 -- Renamed whitelist argument and attribute of EmailValidator. | David Smith | |
| 2020-05-08 | Fixed #31548 -- Fixed URLValidator crash on non-strings. | Yash Saini | |
| 2020-05-08 | Added URLValidator test for missing scheme. | Yash Saini | |
| 2019-10-01 | Fixed #30651 -- Made __eq__() methods return NotImplemented for not ↵ | ElizabethU | |
| implemented comparisons. Changed __eq__ to return NotImplemented instead of False if compared to an object of the same type, as is recommended by the Python data model reference. Now these models can be compared to ANY (or other objects with __eq__ overwritten) without returning False automatically. | |||
| 2018-10-22 | Fixed #29860 -- Allowed BaseValidator to accept a callable limit_value. | buzzi | |
| 2018-08-18 | Refactored validators tests to use subtests. | Tom Forbes | |
| 2018-01-10 | Fixed #29007 -- Fixed DecimalValidator crash on NaN, SNan, Inf, and Infinity ↵ | Fabio Bonelli | |
| values. | |||
| 2017-09-27 | Fixed #28562 -- Fixed DecimalValidator handling of positive exponent ↵ | Josh Schneier | |
| scientific notation. | |||
| 2017-09-11 | Added tests for DecimalValidator. | Josh Schneier | |
| 2017-08-12 | Fixed #28201 -- Added ProhibitNullCharactersValidator and used it on ↵ | Alejandro Zamora | |
| CharField form field. | |||
| 2017-07-29 | Used assertRaisesMessage() to test Django's error messages. | Mads Jensen | |
| 2017-06-07 | Fixed #28165 -- Ignored case in FileExtensionValidator's allowed_extensions. | Arne de Laat | |
| 2017-06-07 | Added FileExtensionValidator tests for uppercase and missing file extensions. | Arne de Laat | |
| 2017-01-20 | Refs #23919 -- Removed str_prefix usage | Claude Paroz | |
| 2017-01-20 | Refs #23919 -- Removed django.utils._os.upath()/npath()/abspathu() usage. | Tim Graham | |
| These functions do nothing on Python 3. | |||
| 2017-01-18 | Refs #23919 -- Replaced io.open() with open(). | Aymeric Augustin | |
| io.open() is an alias for open() on Python 3. | |||
| 2017-01-18 | Refs #23919 -- Removed encoding preambles and future imports | Claude Paroz | |
| 2016-11-14 | Fixed E305 flake8 warnings. | Ramin Farajpour Cami | |
| 2016-11-10 | Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings. | za | |
| 2016-10-28 | Fixed #26578 -- Prohibited non-ASCII digits in validate_ipv4_address. | wim glenn | |
| 2016-07-02 | Refs #21548 -- Skipped tests that rely on pillow when it's not installed | Baptiste Mispelon | |
| 2016-06-30 | Fixed #21548 -- Added FileExtensionValidator and validate_image_file_extension. | Berker Peksag | |
| 2016-06-28 | Replaced use of TestCase.fail() with assertRaises(). | Tim Graham | |
| Also removed try/except/fail antipattern that hides exceptions. | |||
| 2016-02-18 | Fixed #26107 -- Added option to int_list_validator() to allow negative integers. | Akshesh | |
| 2015-10-31 | Fixed #25635 -- Made URLValidator allow '+' in scheme. | Dheerendra Rathor | |
| 2015-09-18 | Fixed #24636 -- Added model field validation for decimal places and max digits. | Iulia Chiriac | |
| 2015-07-17 | Fixed #16501 -- Added an allow_unicode parameter to SlugField. | Edward Henderson | |
| Thanks Flavio Curella and Berker Peksag for the initial patch. | |||
| 2015-07-08 | Fixed catastrophic backtracking in URLValidator. | Shai Berger | |
| Thanks João Silva for reporting the problem and Tim Graham for finding the problematic RE and for review. This is a security fix; disclosure to follow shortly. | |||
| 2015-07-08 | Prevented newlines from being accepted in some validators. | Tim Graham | |
| This is a security fix; disclosure to follow shortly. Thanks to Sjoerd Job Postmus for the report and draft patch. | |||
| 2015-04-17 | Fixed #24349 -- Limited domain name labels to 63 characters in EmailValidator | Anoop Thomas Mathew | |
| 2015-03-25 | Fixed #24531 -- Improved CommaSeparatedIntegerField validation. | Bertrand Bordage | |
| `','`, `'1,,1'`, `',1'` etc. are no longer considered as valid comma-separated integer lists. | |||
| 2015-02-06 | Sorted imports with isort; refs #23860. | Tim Graham | |
| 2014-11-03 | Refactored URLValidator tests by moving URLs to text files. | Danilo Bargen | |
| 2014-07-26 | Fixed #16617 -- Added 'value' to BaseValidator params. | Anubhav Joshi | |
| Also allowed overriding the default messages in subclasses of BaseValidator. Thanks sperrygrove for initial patch. | |||
| 2014-07-04 | Corrected domain max length for EmailValidator; refs #20631. | Tim Graham | |
| Thanks MarkusH for the report. | |||
| 2014-07-04 | Fixed #20631 -- Increased the default EmailField max_length to 254. | Tim Graham | |
| Thanks pmartin for the report. | |||
| 2014-05-16 | Fixed #22579 -- Corrected validation for email to reject trailing slash | Erik Romijn | |
| Thanks to Claude Paroz for the report and patch and Tomasz Paczkowski for the review. | |||
| 2014-05-08 | Fixed #22588 -- Fix RegexValidator __eq__ | David Szotten | |
| Compare parameters instead of re.pattern instances, and add the other parameters to the comparison. Also add a __ne__ to make assertNotEqual work properly. | |||
| 2014-04-26 | Fix many many typos in comments throughout the codebase | Alex Gaynor | |
| 2014-03-21 | Fixed #22255 -- Added support for specifying re flags in RegexValidator | Dejan Noveski | |
| 2014-02-22 | Fixed #22123 -- EmailValidator now also accepts IPv6 literals in addresses | Erik Romijn | |
| 2014-02-10 | Fixed #20784 -- Added inverse_match parameter to RegexValidator. | Si Feng | |
| 2014-01-19 | Fixed #21638: Validators are now comparable, stops infinite user mig'ns | Andrew Godwin | |
| 2013-12-28 | Fixed #21242 -- Allowed more IANA schemes in URLValidator | Claude Paroz | |
| Thanks Sascha Peilicke for the report and initial patch, and Tim Graham for the review. | |||
| 2013-11-02 | Fixing E302 Errors | Jason Myers | |
| Signed-off-by: Jason Myers <jason@jasonamyers.com> | |||
| 2013-10-23 | Fixed #12027 -- Fixed EmailValidator to reject a trailing dot. | Tim Graham | |
| Thanks Klas H for the report and claudep for the patch. | |||
| 2013-10-23 | Fixed #21298 -- Fixed E301 pep8 warnings | Alasdair Nicol | |
| 2013-10-22 | Removed import * in tests. | Tim Graham | |
| Thanks to flake8 path/to/file.py | awk -F ' ' '{ print $5 }' | sort | uniq | |||
