summaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)Author
2022-02-01[4.0.x] Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads.Mariusz Felisiak
Thanks Alan Ryan for the report and initial patch. Backport of fc18f36c4ab94399366ca2f2007b3692559a6f23 from main.
2022-02-01[4.0.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag.Markus Holtermann
Thanks Keryn Knight for the report. Backport of 394517f07886495efcf79f95c7ee402a9437bd68 from main. Co-authored-by: Adam Johnson <me@adamj.eu>
2022-02-01[4.0.x] Fixed #33480 -- Fixed makemigrations crash when renaming field of ↵Kirill Safronov
renamed model. Regression in aa4acc164d1247c0de515c959f7b09648b57dc42. Backport of 97a72744681d0993b50dee952cf32cdf9650ad9f from main
2022-01-31[4.0.x] Fixed #33468 -- Fixed QuerySet.aggregate() after annotate() crash on ↵Mariusz Felisiak
aggregates with default. Thanks Adam Johnson for the report. Backport of 71e7c8e73712419626f1c2b6ec036e8559a2d667 from main
2022-01-27[4.0.x] Fixed #33462 -- Fixed migration crash when altering type of primary ↵Mariusz Felisiak
key with MTI and foreign key. This prevents duplicated operations when altering type of primary key with MTI and foreign key. Previously, a foreign key to the base model was added twice, once directly and once by the inheritance model. Thanks bcail for the report. Regression in 325d7710ce9f6155bb55610ad6b4580d31263557. Backport of e972620ada4f9ed7bc57f28e133e85c85b0a7b20 from main
2022-01-21[4.0.x] Fixed #33449 -- Fixed makemigrations crash on models without ↵Fabian Büchler
Meta.order_with_respect_to but with _order field. Regression in aa4acc164d1247c0de515c959f7b09648b57dc42. Backport of eeff1787b0aa23016e4844c0f537d5093a95a356 from main
2022-01-10[4.0.x] Fixed #33426 -- Fixed ResolverMatch.__repr_() for class-based views.Keryn Knight
Regression in 7c08f26bf0439c1ed593b51b51ad847f7e262bc1. Backport of f4b06a3cc1e54888ff86f36a1f9a3ddf21292314 from main
2022-01-08[4.0.x] Fixed #33425 -- Fixed view name for CBVs on technical 404 debug page.Keryn Knight
Regression in 0c0b87725bbcffca3bc3a7a2c649995695a5ae3b. Backport of 2a66c102d9c674fadab252a28d8def32a8b626ec from main
2022-01-07[4.0.x] Fixed #33419 -- Restored marking forms.Field.help_text as HTML safe.David
Regression in 456466d932830b096d39806e291fe23ec5ed38d5. Thanks Matt Westcott for the report. Backport of 4c60c3edff4312303e1021fca47ed52c2152d285 from main
2022-01-07[4.0.x] Fixed #33410 -- Fixed recursive capturing of callbacks by ↵Petter Friberg
TestCase.captureOnCommitCallbacks(). Regression in d89f976bddb49fb168334960acc8979c3de991fa. Backport of bc174e6ea0ce676c5a7f467bda9739e6ef6b6186 from main
2022-01-04[4.0.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage ↵Florian Apolloner
subsystem. Thanks to Dennis Brinkrolf for the report.
2022-01-04[4.0.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in ↵Florian Apolloner
dictsort template filter. Thanks to Dennis Brinkrolf for the report. Co-authored-by: Adam Johnson <me@adamj.eu>
2022-01-04[4.0.x] Fixed CVE-2021-45115 -- Prevented DoS vector in ↵Florian Apolloner
UserAttributeSimilarityValidator. Thanks Chris Bailey for the report. Co-authored-by: Adam Johnson <me@adamj.eu>
2021-12-22[4.0.x] Refs #32355 -- Bumped required psycopg2 version to 2.8.4.Mariusz Felisiak
psycopg2 2.8.4 is the first release to support Python 3.8. Backport of ca04659b4b3f042c1bc7e557c25ed91e3c56c745 from main
2021-12-17[4.0.x] Fixed #33366 -- Fixed case handling with swappable setting detection ↵Simon Charette
in migrations autodetector. The migration framework uniquely identifies models by case insensitive labels composed of their app label and model names and so does the app registry in most of its methods (e.g. AppConfig.get_model) but it wasn't the case for get_swappable_settings_name() until this change. This likely slipped under the radar for so long and only regressed in b9df2b74b98b4d63933e8061d3cfc1f6f39eb747 because prior to the changes related to the usage of model states instead of rendered models in the auto-detector the exact value settings value was never going through a case folding hoop. Thanks Andrew Chen Wang for the report and Keryn Knight for the investigation. Backport of 43289707809c814a70f0db38ca4f82f35f43dbfd from main
2021-12-16[4.0.x] Fixed #33350 -- Reallowed using cache decorators with duck-typed ↵Mariusz Felisiak
HttpRequest. Regression in 3fd82a62415e748002435e7bad06b5017507777c. Thanks Terence Honles for the report. Backport of 40165eecc40f9e223702a41a0cb0958515bb1f82 from main
2021-12-14[4.0.x] Fixed #33361 -- Fixed Redis cache backend crash on booleans.Jeremy Lainé
Backport of 2f33217ea2cad688040dd6044cdda946c62e5b65 from main
2021-12-08[4.0.x] Fixed #33346 -- Fixed SimpleTestCase.assertFormsetError() crash on a ↵Baptiste Mispelon
formset named "form". Thanks OutOfFocus4 for the report. Regression in 456466d932830b096d39806e291fe23ec5ed38d5. Backport of cb383753c0e0eb52306e1024d32a782549c27e61 from main.
2021-12-07[4.0.x] Updated asgiref dependency for 4.0 release series.Mariusz Felisiak
Backport of 513441240f874dd0b6187c0c6aaa3e8eccd8ddbe from main
2021-12-07[4.0.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an ↵Florian Apolloner
upstream access control based on URL paths. Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports. Backport of d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6 from main.
2021-12-06[4.0.x] Updated translations from Transifex.Mariusz Felisiak
This also fixes related i18n tests. Co-authored-by: Claude Paroz <claude@2xlibre.net>
2021-12-06[4.0.x] Fixed #33335 -- Made model validation ignore functional unique ↵Hannes Ljungberg
constraints. Regression in 3aa545281e0c0f9fac93753e3769df9e0334dbaa. Thanks Hervé Le Roy for the report. Backport of 1eaf38fa87384fe26d1abf6e389d6df1600d4d8c from main
2021-12-04[4.0.x] Refs #33333 -- Fixed ↵Mariusz Felisiak
PickleabilityTestCase.test_annotation_with_callable_default() crash on Oracle. Grouping by LOBs is not allowed on Oracle. This moves a binary field to a separate model. Backport of d3a64bea51676fcf8a0ae593cf7b103939e12c87 from main
2021-12-03[4.0.x] Fixed #33333 -- Fixed setUpTestData() crash with models.BinaryField ↵Mariusz Felisiak
on PostgreSQL. This makes models.BinaryField pickleable on PostgreSQL. Regression in 3cf80d3fcf7446afdde16a2be515c423f720e54d. Thanks Adam Zimmerman for the report. Backport of 2c7846d992ca512d36a73f518205015c88ed088c from main.
2021-11-12[4.0.x] Fixed #33279 -- Fixed handling time zones with "-" sign in names.Can Sarigol
Thanks yakimka for the report. Regression in fde9b7d35e4e185903cc14aa587ca870037941b1. Backport of 661316b066923493ff91d6d2aa92e463f595a6b1 from main.
2021-11-09[4.0.x] Refs #33263 -- Added warning to BaseDeleteView when delete() method ↵Mariusz Felisiak
is overridden. Follow up to 3a45fea0832c5910acee6e0d29f230f347a50462. Backport of 6bc437c0d82675ebe6aa92c8e249892205c316ef from main
2021-11-05[4.0.x] Fixed #33253 -- Reverted "Fixed #32319 -- Added ES module support to ↵Mariusz Felisiak
ManifestStaticFilesStorage." This reverts commit 91e21836f667c784a8a63ab1f18d81f553e679cb. `export` and `import` directives have several syntax variants and not all of them were properly covered. Thanks Hervé Le Roy for the report. Backport of ba9ced3e9a643a05bc521f0a2e6d02e3569de374 from main
2021-11-04[4.0.x] Fixed #33237 -- Fixed detecting source maps in ↵Carlton Gibson
ManifestStaticFilesStorage for multiline files. Switched regex to multiline mode in order to match per-line, rather than against the whole file. Thanks to Joseph Abrahams for the report. Regression in 781b44240a06f0c868254f40f36ce46c927f56d1. Backport of 4816dc942860caf076c7c85ea9dbfa8bfab212ff from main
2021-11-02[4.0.x] Fixed #33234 -- Fixed autodetector crash for proxy models inheriting ↵Mariusz Felisiak
from non-model class. Regression in aa4acc164d1247c0de515c959f7b09648b57dc42. Thanks Kevin Marsh for the report. Backport of dab48b7482295956973879d15bfd4d3bb0718772 from main
2021-10-25[4.0.x] Fixed #31503 -- Made autodetector remove unique/index_together ↵David Wobrock
before altering fields. Backport of 0314593fe8e7dc685bbb6585eee40e755588864e from main
2021-10-25[4.0.x] Fixed #33205 -- Made call_command() raise TypeError when dest with ↵Hasan Ramezani
multiple arguments is passed. Backport of c1e4111c74ee9d9f48cbee5a5b7c40289203c93d from main
2021-10-21[4.0.x] Fixed #33215 -- Confirmed support for GEOS 3.10.Mariusz Felisiak
Backport of 9231526af4b9825583b0d3cb943f88109fd30551 from main
2021-10-20[4.0.x] Fixed #33043 -- Made method_decorator() preserve wrapper assignments.Vinay Karanam
Regression in f434f5b84f7fcea9a76a551621ecce70786e2899. Backport of 8806e8809e023017e6958b9fa0bbd960938e0a91 from main
2021-10-20[4.0.x] Refs #32956 -- Capitalized HTTP/HTTPS in comments, docs, and docstrings.David Smith
Backport of 7ef0bc922c0a78667ed8cbf5f85845b627ccbdf8 from main
2021-10-19[4.0.x] Refs #32956 -- Changed docs to treat the acronym HTTP phonetically.David Smith
Backport of 69b0736fad1d1f0197409ca025b7bcdf5666ae62 from main
2021-10-18[4.0.x] Fixed #33194 -- Fixed migrations when altering a field with ↵Hannes Ljungberg
functional indexes/unique constraints on SQLite. This adjusts Expressions.rename_table_references() to only update alias when needed. Regression in 83fcfc9ec8610540948815e127101f1206562ead. Co-authored-by: Simon Charette <charettes@users.noreply.github.com> Backport of 86971c40909430a798e4e55b140004c4b1fb02ff from main
2021-10-15[4.0.x] Refs #32074 -- Removed usage of deprecated asyncore and smtpd modules.Mariusz Felisiak
asyncore and smtpd modules were deprecated in Python 3.10. Backport of 569a33579c3cca5f801c544d9b52a34e3c779424 from main
2021-10-14[4.0.x] Fixed #33008 -- Fixed prefetch_related() for deleted GenericForeignKeys.Martin Svoboda
Thanks Simon Charette for the implementation idea. Backport of cc4cb95beff0b75ec169add7e94cc481624a41e6 from main
2021-10-14[4.0.x] Refs #27131 -- Removed SMTPBackendTests.test_server_login().Mariusz Felisiak
test_server_login() was a regression test for a crash when passing Unicode strings to SMTP server using CRAM-MD5 method on Python 2. Python 2 is no longer supported and test_server_login() passes even without FakeSMTPChannel.smtp_AUTH() because smtplib.SMTPAuthenticationError is raised when AUTH is not implemented. Backport of cdad96e6330cd31185f7496aaf8eb316f2773d6d from main
2021-10-12[4.0.x] Fixed #33178 -- Made createsuperuser validate required fields passed ↵Christophe Henry
in options in interactive mode. Backport of b1b26b37aff0c80d6abdf15c5ffdf0440a9a1d6a from main.
2021-10-12[4.0.x] Refs #21755 -- Fixed createsuperuser crash for required foreign keys ↵Christophe Henry
passed in options in interactive mode. Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com> Backport of 4ff500f2948bfc332b3f4159021cad06e91943d3 from main
2021-10-12[4.0.x] Refs #29628, Refs #33178 -- Made createsuperuser validate password ↵Mariusz Felisiak
against required fields passed in options. Backport of da266b3c5ca4bb7581d7a3cc51bc820e78cf64f0 from main
2021-10-07[4.0.x] Fixed #33151 -- Fixed createsuperuser crash for many-to-many ↵Christophe Henry
required fields in non-interactive mode. Backport of df2d2bc95c451c6366fd522a5a1e6ed84f459f31 from main
2021-10-06[4.0.x] Fixed #33156 -- Used sessionStorage to preserve quick filter for ↵Maxim Milovanov
admin's navigation sidebar. Backport of 1c802ca2a9d3c66fb723695fe7ea597fb4802402 from main
2021-10-01[4.0.x] Fixed SpGistIndex tests on PostgreSQL 14+.Nick Pope
Backport of dd26362f6312e7ba7b04099b5285d8e1d2900e63 from main
2021-10-01[4.0.x] Fixed #33160 -- Avoided suppressing query errors in _nodb_cursor() ↵Daniel Hahler
on PostgreSQL. Backport of 98c8bf1ceeab5c68751c83555f82cff1a9120a67 from main
2021-09-30[4.0.x] Fixed #33155 -- Made ModelChoiceIteratorValue instances hashable.Aljaž Košir
Backport of 7b8beeee3d45cafd7bec7ff3ee0e4371e142c36d from main
2021-09-30[4.0.x] Fixed #33159 -- Reverted "Fixed #32970 -- Changed WhereNode.clone() ↵Mariusz Felisiak
to create a shallow copy of children." This reverts commit e441847ecae99dd1ccd0d9ce76dbcff51afa863c. A shallow copy is not enough because querysets can be reused and evaluated in nested nodes, which shouldn't mutate JOIN aliases. Thanks Michal Čihař for the report. Backport of 903aaa35e5ceaa33bfc9b19b7f6da65ce5a91dd4 from main
2021-09-29[4.0.x] Fixed #33018 -- Fixed annotations with empty queryset.David Wobrock
Thanks Simon Charette for the review and implementation idea. Backport of dd1fa3a31b4680c0d3712e6ae122b878138580c7 from main
2021-09-29[4.0.x] Fixed #33141 -- Renamed Expression.empty_aggregate_value to ↵David Wobrock
empty_result_set_value. Backport of ad36a198a12df4dff65992191b3eb0a474e2daac from main
generated by cgit v1.3 (git 2.53.0) at 2026-07-06 10:09:08 +0000