summaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)Author
2011-09-10[1.2.X] Altered the behavior of URLField to avoid a potential DOS vector, ↵Russell Keith-Magee
and to avoid potential leakage of local filesystem data. A security announcement will be made shortly. Backport of r16760 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16766 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-09-10[1.2.X] Added protection against spoofing of X_FORWARDED_HOST headers. A ↵Russell Keith-Magee
security announcement will be made shortly. Backport of r16758 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@16764 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-19[1.2.X] Fixed #13686 -- Ensure that memcache handling of unicode values in ↵Russell Keith-Magee
add() and set_many() is consistent with the handling provided by get() and set(). Thanks to nedbatchelder for the report, and to jbalogh, accuser and Jacob Burch for their work ont the patch. Backport of r15880 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15881 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-15[1.2.X] Fixed #15617 - CSRF referer checking too strictLuke Plant
Thanks to adam for the report. Backport of [15840] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15844 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-10[1.2.X] Fixed #15559 - distinct queries introduced by [15607] cause errors ↵Luke Plant
with some custom model fields This patch just reverts [15607] until a more satisfying solution can be found. Refs #11707 Backport of [15791] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15792 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-10[1.2.X] Fixed a bunch more tests that were failing in Oracle due to false ↵Ian Kelly
assumptions about the primary keys of objects. Backport of r15789 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15790 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-09[1.2.X] Fixed a test that was failing in Oracle due to default ordering ↵Ian Kelly
assumptions. Backport of r15783 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15784 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-09[1.2.X] Fixed a number of tests that were failing in Oracle due to false ↵Ian Kelly
assumptions about the primary keys of objects. Backport of r15779 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15780 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-08[1.2.X] Added a skip for a test that fails in Oracle. Unlike other ↵Ian Kelly
backends, Oracle does not allow duplicate rows where there is a unique_together constraint for which some but not all of the columns are NULL. Backport of r15777 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15778 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-08[1.2.X] Fixed field names that were preventing the tests from running in ↵Ian Kelly
Oracle. Backport of r15774 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15775 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-04[1.2.X] Refs #15550 -- Corrected another primary-key ordering problem in the ↵Russell Keith-Magee
modelforms tests. Thanks to bberes for the report. Backport of r15753 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15754 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-04[1.2.X] Fixed #15550 -- Corrected an ordering dependency in the model_forms ↵Russell Keith-Magee
doctests. Thanks to bberes for the report. Backport of r15745 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15748 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-04[1.2.X] Fixed #15549 -- Removed dependency on specific primary keys. Thanks ↵Russell Keith-Magee
to bberes for the report. Backport of r15744 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15747 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-04[1.2.X] Fixed #15548 -- Added an ordering clause to prevent test failures ↵Russell Keith-Magee
under Postgres. Thanks to bberes for the report. Backport of r15743 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15746 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #11206 -- Ensure that the floatformat template filter doesn't ↵Ramiro Morales
switch to scientific notation when asked to format a zero value with more than six decimal places. Thanks Tai Lee for the report and fix and Facundo Batista for his help when Decimal module expertise was needed. Backport of [15736] from trunk git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15738 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #12252 -- Ensure that queryset unions are commutative. Thanks ↵Russell Keith-Magee
to benreynwar for the report, and draft patch, and to Karen and Ramiro for the review eyeballs and patch updates. Backport of r15726 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15727 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed wrong import introduced in r15697.Jannis Leidel
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15725 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #12475 -- Fixed an edge case with hidden fields in ModelAdmin ↵Jannis Leidel
changelists when used in conjunction with list_display_links or list_editable. Thanks, Simon Meers, Julien Phalip, Karen and master. Backport from trunk (r15722). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15724 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #13411 -- Made sure URL fragments are correctly handled by the ↵Jannis Leidel
next_redirect utility of the comments apps. Thanks, timesong, dpn and Julien Phalip. Backport from trunk (r15720). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15721 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-03[1.2.X] Fixed #15502 -- Ensure that nested TemplateDoesNotExist errors are ↵Russell Keith-Magee
propegated with a meaningful error message when loaded using select_template. Thanks to jaylett for the report, and GDorn for the patch. Backport of r15717 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15718 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-02Fixed typo in r15710.Jannis Leidel
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15711 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-02[1.2.X] Fixed #15535 -- Stopped the blocktrans template tag from raising a ↵Jannis Leidel
KeyError if an included variable can't be found in the context. Thanks, melinath. Backport from trunk (r15709). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15710 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-01[1.2.X] Added file missing from [15696], sorry for breakage.Luke Plant
Thanks to Ramiro for letting me know. Refs #717. Backport of [15699] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15700 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-03-01[1.2.X] Fixed #717 - If-Modified-Since handling should compare dates ↵Luke Plant
according to RFC 2616 Thanks to Maniac for the report, julienb for the initial patch, and especially to aaugustin for the final patch and tests. Backport of [15696] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15697 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-28[1.2.X] Fixed #13433 -- Changed default behavior of Django email message ↵Ramiro Morales
wrappers to not mangle lines starting with 'From '. Thanks Leo for the report and patch. Backport of [15669] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15670 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-27[1.2.X] Fixed #15368 - test failures due to regression with RequestContextLuke Plant
Thanks to cyberdelia for the reports on this. Backport of [15660] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15661 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-26[1.2.X] Fixed #10918 -- Ensure that the search widget on a raw_id_admin uses ↵Russell Keith-Magee
the right field name when the ForeignKey has a to_field definition. Thanks to David Cramer for the report, Collin Anderson for the fix, and Julien Phalip for the test. Backport of r15657 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15659 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-26[1.2.X] Fixed #11447 -- Ensured that ForeignKey widgets in a list-editable ↵Russell Keith-Magee
admin changelist won't wrap split the widget. Thanks to patrick@vonautomatisch.at for the report, and Julien Phalip for the patch. Backport of r15656 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15658 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-26[1.2.X] Fixed #15424 -- Corrected lookup of callables listed in admin ↵Ramiro Morales
inlines' `readonly_fields` by passing the right ModelAdmin (sub)class instance when instantiating inline forms admin wrappers. Also, added early validation of its elements. Thanks kmike for the report and Karen for the patch fixing the issue. Backport of [15650] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15651 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-24[1.2.X] Prevented non-admin users from accessing the admin redirect shortcut.Jacob Kaplan-Moss
If the admin shortcut view (e.g. /admin/r/<content-type>/<pk>/) is publically-accessible, and if a public users can guess a content-type ID (which isn't hard given that they're sequential), then the redirect view could possibly leak data by redirecting to pages a user shouldn't "know about." So the redirect view needs the same protection as the rest of the admin site. Thanks to Jason Royes for pointing this out. Backport of [15639] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15640 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-24[1.2.X] Fixed #14012 (again) -- Admin app: Don't show the full user edition ↵Ramiro Morales
view after adding a user in a FK popup. Thanks dburke for reporting this regression introduced in r14628. Backport of [15637] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15638 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-22[1.2.X] Fixed #13510 -- Corrected colspan of non-field-specific error ↵Ramiro Morales
messages in admin app tabular inlines so it isn't greater than the actual number of field cells. Thanks KyleMac for the report and Julien Phalip for the patch fixing the issue. Backport of [15626] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15627 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #11058 - list_display_links doesn't allow callables not ↵Luke Plant
defined in the model Thanks to dvine for the report and julien for the patch. Backport of [15619] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15621 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #15349 - Bound FormSet produces bound empty_formLuke Plant
Thanks to hidde-jan for the report and patch. Backport of [15614] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15615 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #14099 - BaseModelFormSet should use _should_delete_formLuke Plant
Thanks to kenth for the report and patch. Backport of [15612] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15613 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #11707 - limit_choices_to on a ForeignKey can render duplicate ↵Luke Plant
options in formfield Thanks to Chris Wesseling for the report and patch. Backport of [15607] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15610 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #15359 -- Ensure that the -h option is always honored by ↵Russell Keith-Magee
django-admin.py. Thanks to teubank for the report. Backport of r15605 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15609 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #15364 -- Ensure files are closed correctly during file tests. ↵Russell Keith-Magee
Thanks to Mila for the report and patch. Backport of r15604 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15608 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-21[1.2.X] Fixed #15362: Added explicit deletion of file to test, needed now ↵Karen Tracey
since files are no longer auto-deleted when a referencing object is deleted. Thanks mila. r15602 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15603 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-20[1.2.X] Fixed #14529 -- Fixed representation of model names in admin ↵Ramiro Morales
messages after model object changes when the ModelAdmin queryset() uses defer() or only(). Thanks rlaager for report and initial patch, to rasca an julien for help in tracking the problem. Backport of [15596] from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15597 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-20[1.2.X] Ensure render_to_string leaves the context instance stack in the ↵Chris Beaven
state it was originally passed in. Backport of r15591 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15592 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19[1.2.X] Fixed #9161 -- Ensure that ModelMultipleChoiceField respects ↵Russell Keith-Magee
to_field_name in validation. Thanks to Honza for the report, and Gregor Müllegger for the patch. Backport of r15587 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15588 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19[1.2.X] Fixed #11513 -- Ensure that the redirect at the end of an object ↵Russell Keith-Magee
change won't redirect to a page for which the user doesn't have permission. Thanks to rlaager for the report and draft patch, and to Julien Phalip for the final patch. Backport of r15584 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15586 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19[1.2.X] Fixed #14355 -- Ensure that help_text is displayed for readonly ↵Russell Keith-Magee
fields in the admin. Thanks to jester for the report, and to alexbmeng, subsume, wamberg and Julien Phalip for ther work on the patch. Backport of r15582 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15583 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19[1.2.X] Fixed #13126 -- Ensured that individual form errors are displayed ↵Russell Keith-Magee
when errors occur on a list-editable changelist. Thanks to slafs for the report, and to Julien Phalip for the patch. Backport of r15580 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15581 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19[1.2.X] Fixed #12893 -- Added tests to validate that the right queryset is ↵Russell Keith-Magee
always used in model admins. Thanks to mk and Julien Phalip for their work on the patch. Backport of r15578 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15579 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-19[1.2.X] Fixed #15291 -- Corrected alignment issue when actions are disabled ↵Russell Keith-Magee
in a ModelAdmin. Thanks to Julien Phalip for the report and patch. Backport of r15573 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15577 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-17[1.2.X] Fixed #15260 -- Ensured that CACHE_MIDDLEWARE_ANONYMOUS_ONLY is ↵Carl Meyer
effective with the cache_page decorator, not only the middleware. Thanks to brodie for report and draft patch. Backport of r15559 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15560 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-17[1.2.X] Improved CACHE_MIDDLEWARE_ANONYMOUS_ONLY test.Carl Meyer
Backport of r15557 from trunk. (Backported in order to simplify backport of upcoming test addition). git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15558 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2011-02-15[1.2.X] Moved the test added in r15511 to a different test where it doesn't ↵Jannis Leidel
actually verify the existence of the URL by calling urlopen but only validates it. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15542 bcc190cf-cafb-0310-a4f2-bffc1f526a37
generated by cgit v1.3 (git 2.53.0) at 2026-07-07 11:28:53 +0000