summaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)Author
2016-03-04[1.9.x] Added safety to URL decoding in is_safe_url() on Python 2Claude Paroz
The errors='replace' parameter to force_text altered the URL before checking it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef. Backport of 552f03869e from master.
2016-03-04[1.9.x] Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()Claude Paroz
This fixes a regression introduced by c5544d28923. Thanks John Eskew for the reporti and Tim Graham for the review. Backport of ada7a4aef from master.
2016-03-01[1.9.x] Fixed #26303 -- Updated links to mod_wsgi docs.Alasdair Nicol
Backport of 8c42cf0cbd87f344748423f235938dd6ade03f55 from master
2016-03-01[1.9.x] Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during ↵Florian Apolloner
login. This is a security fix.
2016-03-01[1.9.x] Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth.Mark Striemer
This is a security fix.
2016-02-29[1.9.x] Fixed #26186 -- Documented how app relative relationships of ↵Simon Charette
abstract models behave. This partially reverts commit bc7d201bdbaeac14a49f51a9ef292d6312b4c45e. Thanks Tim for the review. Refs #25858. Backport of 0223e213dd690b6b6e0669f836a20efb10998c83 from master
2016-02-26[1.9.x] Fixed #26286 -- Prevented content type managers from sharing their ↵Simon Charette
cache. This should prevent managers methods from returning content type instances registered to foreign apps now that these managers are also attached to models created during migration phases. Thanks Tim for the review. Refs #23822. Backport of 3938b3ccaa85f1c366909a4839696007726a09da from master
2016-02-26[1.9.x] Fixed #26280 -- Fixed cached template loader crash when loading ↵Ivan Tsouvarev
nonexistent template. Backport of 8890c533e0b53cb0021bd5faf15668430cd3075a from master
2016-02-24[1.9.x] Fixed #26267 -- Fixed BoundField to reallow slices of subwidgets.Jon Dufresne
Backport of b41268135995cef46d40e550f9301fab20cf330d from master
2016-02-22[1.9.x] Fixed #26253 -- Fixed crashing deprecation shims in ↵Tim Graham
SimpleTemplateResponse. Thanks David Reitter for the report and initial patch.
2016-02-18[1.9.x] Fixed #26204 -- Reallowed dashes in top-level domains for URLValidator.Tim Graham
Thanks Shai Berger for the review. Backport of b1afebf882db5296cd9dcea26ee66d5250922e53 from master
2016-02-17[1.9.x] Fixed #26219 -- Fixed crash when filtering by Decimal in RawQuery.Akshesh
Backport of fdccc02576ae5a524338f65e629948604d80b4c8 from master
2016-02-17[1.9.x] Refs #19353 -- Added tests for using custom user models with ↵Berker Peksag
built-in auth forms. Also updated topics/auth/customizing.txt to reflect that subclasses of UserCreationForm and UserChangeForm can be used with custom user models. Thanks Baptiste Mispelon for the initial documentation. Backport of f0425c72601f466c6a71518749c6d15b94945514 from master
2016-02-16[1.9.x] Fixed #26215 -- Fixed RangeField/ArrayField serialization with None ↵Claude Paroz
values Also added tests for HStoreField and JSONField. Thanks Aleksey Bukin for the report and Tim Graham for the initial patch and the review. Backport of 928c12eb1 from master.
2016-02-15[1.9.x] Fixed #26212 -- Made forms.FileField and translation.lazy_number() ↵Alexey Kotlyarov
picklable. Backport of b59f963ad2a49322725b20fac71661bd49643443 from master
2016-02-15[1.9.x] Fixed #26126 -- Fixed transient failure of test_max_age_expirationBerker Peksag
Backport of b17a9150a0c3a132e82b53755ede62a45f897875 from master
2016-02-11[1.9.x] Fixed #26196 -- Made sure __in lookups use to_field as default.Anssi Kääriäinen
Thanks Simon Charette for the test. Backport of 46ecfb9b3a11a360724e3375ba78c33c46d6a992 from master
2016-02-11[1.9.x] Fixed #26153 -- Reallowed Q-objects in ↵Anssi Kääriäinen
ForeignObject.get_extra_descriptor_filter(). Backport of 353aecbf8c1a8cc6f3985149e2895d49e53dfc1c from master
2016-02-08Fixed #26162 -- Checked query name clashes of hidden relationships.Simon Charette
Although reverse accessor clashes should be skipped query name can't be hidden. Thanks to Ian Foote and Tim Graham for the review.
2016-02-08[1.9.x] Fixed #26177 -- Fixed a PostgreSQL crash with TIME_ZONE=None and ↵Tim Graham
USE_TZ=False. Backport of 97eb3356b2a7488c8d0ca0e47ef3e538852d44a2 from master
2016-02-03[1.9.x] Changed gypsy to manouche in docs and tests.Blake Griffith
"Gypsy" is considered a slur by the Romani people whom it refers to. "manouche jazz" is used in place of "gypsy jazz" and is an accepted term for the same genre of music. Backport of 5fdbd9e36c861cb9f2cdb255a1bf693de8876f6b from master
2016-02-01[1.9.x] Fixed #26155 -- Skipped URL checks if no ROOTURL_CONF setting.Buddy Lindsey, Jr
Backport of 731bdfe68ae8dd332702b1838db44f0efe433e2e from master
2016-02-01[1.9.x] Fixed incorrect permissions check for admin's "Save as new".Myk Willis
This is a security fix.
2016-01-29[1.9.x] Fixed #26129 -- Made invalid forms display initial values of ↵Tim Graham
disabled fields. Backport of 04564eb74d2d92eaf88b22ab8cec7ef45978111e from master
2016-01-28[1.9.x] Fixed #20415 -- Ensured srid isn't localized in OpenLayers JavaScript.Tim Graham
Backport of 19d1cb14519186902d7e27813bf2643fe3f7cfa3 from master
2016-01-28[1.9.x] Fixed #26147 -- Relaxed expected values in GIS tests to account for ↵Tim Graham
database/library differences. Backport of 5aa53286758fbb1fb864a5efda38718a2ca96759 from master
2016-01-28[1.9.x] Added a missing test method in tests/migrations/test_writer.py.Yoong Kang Lim
Backport of 5453aa66cfdf228f40dc1997d811ca986de405a3 from master
2016-01-28[1.9.x] Fixed #26138 -- Ensured geometry_field's geometry is always serializedClaude Paroz
Thanks Bernd Schlapsi for the report. Backport of 54236a2c1c from master.
2016-01-26[1.9.x] Fixed #26122 -- Fixed copying a LazyObjectBen Kraft
Shallow copying of `django.utils.functional.LazyObject` or its subclasses has been broken in a couple of different ways in the past, most recently due to 35355a4. Backport of 13023ba86746980aace2341ba32a9419e7567751 from master
2016-01-26[1.9.x] Fixed #25848 -- Set template origin on each node.Preston Timmons
Prior to 55f12f8709, the template origin was available on each node via `self.token.source[0]`. This behavior was removed when debug handling was simplified, but 3rd-party debugging tools still depend on its presence. This updates the Parser to set origin on individual nodes. This enables the source template to be determined even when template extending or including is used. Backport of cfda1fa3f8d95f0f4a369da9021dbd770e5fa44a from master
2016-01-25[1.9.x] Refs #24919 -- Used the documented way of disabling migrations per app.Simon Charette
Backport of 477274acb46b2f07666e9f84dea2e65ea6b63ad3 from master
2016-01-25[1.9.x] Fixed #26135 -- Adjusted the migration questioner's handling of ↵Simon Charette
disabled apps. This was causing an issue when calling the `migrate` command in a test case with the `available_apps` attribute pointing to an application with migrations disabled using the `MIGRATION_MODULES` setting. Thanks to Tim Graham for the review. Refs #24919 Backport of 4dcaa5871b70859952c6f9c437dfe1b5f10509f2 from master
2016-01-25[1.9.x] Fixed #25968 -- Changed project/app templates to use a "py-tpl" suffix.Chris Lamb
Debian packages unconditionally byte-compile .py files on installation and do not silence errors by design. Therefore, we need a way of shipping these invalid .py files without a .py extension but ensuring that when we template them, they end up as .py. We don't special-case .py files so that the all the TemplateCommand command-line options (eg. extra_files and extensions) still work entirely as expected and it may even be useful for other formats too. Backport of abc0777b63057e2ff97eee2ff184356051e14c47 from master
2016-01-23[1.9.x] Fixed typos in test comments.Mingun Pak
Backport of 4c912d184d5ba2ae7355fd8dacb70a0366b8f23b from master
2016-01-22[1.9.x] Fixed #26116 -- Corrected schema's test_alter_implicit_id_to_explicit.Tim Graham
AUTOINCREMENT is dropped converting an AutoField to IntegerField which isn't the point of this test. MySQL would warn or error about this. Backport of b49cc8664306f8b44e9e12ebb9e43791d508ec74 from master
2016-01-21[1.9.x] Changed `action="."` to `action=""` in tests and docs.Luke Plant
`action="."` strips query parameters from the URL which is not usually what you want. Copy-paste coding of these examples could lead to difficult to track down bugs or even data loss if the query parameter was meant to alter the scope of a form's POST request. Backport of 77974a684a2e874bccd8bd9e0939ddcb367a8ed2 from master
2016-01-21[1.9.x] Fixed #26060 -- Fixed crash with reverse OneToOneField in ↵Alexander Gaevsky
ModelAdmin.readonly_fields. Backport of 9a33d3d76497d9e198de942ee1236c452231262f from master
2016-01-21[1.9.x] Refs #26092 -- Added @skipUnlessDBFeature to a test.Tim Graham
Backport of fb4272f0e6bbdaa3e19ed5fde59fdb5ab5a33baf from master
2016-01-21[1.9.x] Fixed #26063 -- Crash when passing > 2000 params.Aymeric Augustin
If SQLITE_MAX_VARIABLE_NUMBER (default = 999) is changed at compile time to be greater than SQLITE_MAX_COLUMN (default = 2000), which Debian does by setting the former to 250000, Django raised an exception on queries containing more than 2000 parameters when DEBUG = True. Backport of f91b5a7e4b from master
2016-01-20[1.9.x] Fixed #26092 -- Fixed QuerySet.order_by() regression with an M2M ↵Anssi Kääriäinen
through model. Backport of ee596888e1149864e7828f5cf63c0eda395744c3 from master
2016-01-20[1.9.x] Fixed #26094 -- Fixed CSRF behind a proxy ↵chemary
(settings.USE_X_FORWARDED_PORT=True). Backport of 2d28144c9519f4e4397c70f045c2b1d31437bf69 from master
2016-01-13[1.9.x] Refs #26071 -- Added test for __in lookup in a Case expression.Alberto Avila
Forwardport of 5b3c66d8b64add684489f5010e43de73e7acdd04 from stable/1.8.x
2016-01-11[1.9.x] Added missing period to "etc.".pp
Backport of b34ff66e5bae3760273255fa5b2525eb21a5eb63 from master
2016-01-11[1.9.x] Fixed #25858 -- Bound abstract model application relative relationships.Simon Charette
Thanks to Karl Hobley for the report and Markus, Shai, Aymeric for their input and Tim for the review. Backport of bc7d201bdbaeac14a49f51a9ef292d6312b4c45e from master
2016-01-08[1.9.x] Added a test for adding a UUID pk object using the "Add related" ↵Alexander Gaevsky
admin popup. Follow up to refs #25997 but this case wasn't broken. Backport of 5052f79df45d843d1e44dcc47152ed503220098f from master
2016-01-08[1.9.x] Fixed #26034 -- Fixed incorrect index handling on PostgreSQL on ↵Tim Graham
Char/TextField with unique=True and db_index=True. Thanks Simon Charette for review. Backport of 56aaae58a746eb39d5e92ba60f59f4c750a8e1a8 from master
2016-01-08[1.9.x] Added a helper function in schema tests.Tim Graham
Backport of 54d3ba84066301b9cdbbd657620c0f1e5c2422c0 from master
2016-01-08[1.9.x] Fixed #25997 -- Removed redundant escaping in admin's edit related ↵Alexander Gaevsky
model popup.
2016-01-06[1.9.x] Fixed #26046 -- Fixed a crash with translations and Django-unknown ↵Claude Paroz
language code Thanks Jens Lundstrom for the report and Tim Graham for the review. Backport of 632a9f21bc from master.
2016-01-06[1.9.x] Fixed #26035 -- Prevented user-tools from appearing on admin logout ↵Scott Pashley
page. Backport of 7cc2efc2d6916c05a0a5cb0c0e67f5405d8f6a03 from master
generated by cgit v1.3 (git 2.53.0) at 2026-07-09 18:43:44 +0000