| Age | Commit message (Collapse) | Author |
|
Certain email addresses/URLs could trigger a catastrophic backtracking
situation, causing 100% CPU and server overload. If deliberately triggered, this
could be the basis of a denial-of-service attack.
This security vulnerability was disclosed in public, so we're skipping our
normal security release process to get the fix out as soon as possible.
This is a security related update. A full announcement will follow.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11605 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
correctly.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11476 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
that could lead to the exposure of system files. Thanks to Gary Wilson for the patch.
This is a security-related backport of r11351. A full announcement, as well as a backport 0.96.X will be forthcoming.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11353 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
hung up on 32/64 bit differences. Thanks to Richard Davies for the report.
Merge of r11328 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11329 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
prevent an encoding bug that occurs in some installations. Backport of [11285] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11286 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
m2m fields with an intermediate model. Thanks to J Clifford Dyer for the report and fix.
Merge of r11215 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11216 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
won't ever return None. Thanks to Chris Cahoon for the patch.
Merge of r11120 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11122 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
test cases. Thanks to Nathan Auch for the report and patch.
Merge of r11119 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11121 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
of very long cache keys. Thanks to 235 for the report and patch.
Merge of r11068 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11070 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks to steveire for the report.
Merge of r11067 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11069 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
would cause a delete to cascade to a related object even when the relationship had been set to None. Thanks to TheShark for the report and test case, and to juriejan and Jacob for their work on the patch.
Merge of r11009 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11010 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
caused problems with m2m relations between models that had non-integer primary keys. Thanks to Ronny for the report and test case.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@11008 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
attachments.
Thanks to Loek Engels for the bulk of the patch.
Backport of r10983 from trunk
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10984 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
related object is a custom primary key. Thanks to Alex Gaynor for the patch.
Merge of r10952 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10953 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
could cause an infinite loop when using MySQL InnoDB.
Merge of 10913-10914 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10915 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
failures.
Backport of [10863] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10864 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
processing no longer mess things up for other handlers. Thanks, Honza Kral. Backport of [10831] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10832 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
reliable. Thanks to Alex Gaynor and Tom Tobin for the report via IRC.
Merge of r10828 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10829 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
when deleting objects. Thanks to Bob Thomas for the fix, and markshep for the improvements on the test case.
Merge of r10822 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10823 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
comments. Thanks kaikuehne.
Merge of applicable parts of r10801 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10802 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10790 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
classes, broken by r10756. Thanks to George Song and Michael Strickland for the simultaneous reports.
Merge of r10787 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10788 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
provided by `ModelAdmin.queryset()`. Backport of [10782] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10783 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
fields. Thanks, Zain. Backport of [10777] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10779 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks, Armin Ronacher. Backport of [10723] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10765 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
create a new object instead of modifying the old one. Thanks, bastih. Backport of [10713] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10764 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
ForeignKey that uses to_field, and by extension, fixed the admin for handling fields of that type. Thanks to apollo13 for the initial patch.
Merge of r10756 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10758 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
when a custom date/time format is in use. Thanks to Koen Biermans for the report and patch.
Merge of r10641 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10757 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
empty option when the underlying field has blank=False and there is a default value available. Thanks to carljm for the report and patch.
Merge of r10729 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10733 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
to jsmullyan for the report, and mir for helpful triage work. Patch includes regression test for #8093, and a commented out test for #10992.
Merge of r10725 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10726 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
as a field name. Refs #4140 and #10422.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10722 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
contain useful descriptions. Thanks to Jeremy Dunck for the patch.
Merge of r10686 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10720 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
definition contains multiple fields on the same base model. Thanks to Zain Memon
Merge of r10684 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10719 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
unique constraints across the component forms. Thanks to Alex Gaynor for the patch.
Merge of r10682 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10718 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10710 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10709 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
opens, and leaves open the ones it doesn't. Thanks, mitsuhiko.
While I was at it, I converted the file_storage doctests to unit tests.
Backport of [10707] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10708 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
directory contained a dot and file didn't. Based on patches from fadlytabrani and adurdin.
Backport of r10701 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10702 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
smaller than 255. If we use max_length > 255 the test suite can't be run on MySQL 4. Backport of [10697] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10698 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Thanks, mitsuhiko. Backport of [10690] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10691 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
a contenttype of None. Thanks to Jarek Zgoda for the report, and Peter Bengtsson for the patch
Merge of r10675 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10676 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
exclude the foreign key that provides the link to the parent model. Thanks to david for the report and patch.
Merge of r10668 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10672 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
content_type_id attribute on objets being inlined. Thanks to carljm for the report and patch.
Merge of r10667 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10671 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
and '0' as valid inputs. Thanks to psagers for the patch.
This is required to support the use of non-default form widgets such as RadioSelect when the data comes from MySQL, which uses 1/0 to represent booleans.
Merge of r10660 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10662 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
values to be callables. Thanks to fas for the report and patch.
Merge of r10652 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10653 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
ModelForm handling. Thanks to Alex Gaynor for the patch.
Merge of r10646 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10647 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
when the formset is empty. Thanks to Petr Marhoun for the report and test case, and bmathieu for the fix.
Merge of r10643 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10644 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
In particular, it was failing on newer versions of PostgreSQL after [10586]. Backport of [10626] from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10627 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
atributes of custom `ModelForm`s. Thanks, Alex Gaynor. Backport of r10619 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10620 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|
|
Mnewman.
Backport of r10353 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.0.X@10612 bcc190cf-cafb-0310-a4f2-bffc1f526a37
|