summaryrefslogtreecommitdiff
path: root/tests
AgeCommit message (Collapse)Author
2022-08-03Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.Carlton Gibson
Thanks to Motoyasu Saburi for the report.
2022-08-03Updated translations from Transifex.Mariusz Felisiak
This also fixes related i18n tests. Forwardport of a3bab9332416f655c6ae0fa306c94f7f52e7398d from stable/4.1.x. Co-authored-by: Claude Paroz <claude@2xlibre.net>
2022-08-02Fixed #33881 -- Added support for database collations to ↵Mariusz Felisiak
ArrayField(Char/TextFields).
2022-08-02Fixed #33876, Refs #32229 -- Made management forms render with div.html ↵Carlton Gibson
template. Thanks to Claude Paroz for the report.
2022-08-01Refs #25706 -- Removed inline CSS in the openlayers widget template.Claude Paroz
2022-07-31Fixed warnings per flake8 5.0.0.Mariusz Felisiak
2022-07-28Fixed #33726 -- Added skip-link to admin for keyboard navigation.Marcelo Galigniana
2022-07-27Refs #32948, Refs #32946 -- Used Q.create() internally for dynamic Q() objects.Nick Pope
Node.create() which has a compatible signature with Node.__init__() takes in a single `children` argument rather than relying in unpacking *args in Q.__init__() which calls Node.__init__(). In addition, we were often needing to unpack iterables into *args and can instead pass a list direct to Node.create().
2022-07-27Refs #32948 -- Renamed Node._new_instance() to Node.create().Nick Pope
Node._new_instance() was added in 6dd2b5468fa275d53aa60fdcaff8c28bdc5e9c25 to work around Q.__init__() having an incompatible signature with Node.__init__(). It was intended as a hook that could be overridden if subclasses needed to change the behaviour of instantiation of their specialised form of Node. In practice this doesn't ever seem to have been used for this purpose and there are very few calls to Node._new_instance() with other code, e.g. Node.__deepcopy__() calling Node and overriding __class__ as required. Rename this to Node.create() to make it a more "official" piece of private API that we can use to simplify a lot of other areas internally. The docstring and nearby comment have been reworded to read more clearly.
2022-07-27Refs #32948 -- Added more tests for django.utils.tree.Node.Nick Pope
The tests for creating new instances or copying instances of Node and its subclasses didn't fully capture the behaviour of the implementation, particularly around whether the `children` list or is contents were the same as the source.
2022-07-27Used AND, OR, XOR constants instead of hard-coded values.Nick Pope
2022-07-26Refs #27236 -- Reverted "Refs #27236 -- Added generic mechanism to handle ↵Mariusz Felisiak
the deprecation of migration operations." This reverts commit 41019e48bbf082c985e6ba3bad34d118b903bff1.
2022-07-26Refs #27236 -- Reverted AlterIndexTogether deprecation.Mariusz Felisiak
This partly reverts a6385b382e05a614a99e5a5913d8e631823159a2.
2022-07-26Fixed BasicExtractorTests.test_makemessages_find_files() test.Claude Paroz
2022-07-25Fixed #33866 -- Added pathlib.Path support to GDALRaster constructor.Claude Paroz
2022-07-25Fixed #33863 -- Fixed JavaScriptCatalog with more than 1 level of fallback ↵Claude Paroz
translations. Co-authored-by: Carlos Mermingas <cmermingas@gmail.com>
2022-07-23Refs #33691 -- Deprecated insecure password hashers.Claude Paroz
SHA1PasswordHasher, UnsaltedSHA1PasswordHasher, and UnsaltedMD5PasswordHasher are now deprecated.
2022-07-23Removed unneeded test suite creation for GIS measure tests.Claude Paroz
2022-07-23Fixed #33864 -- Deprecated length_is template filter.Nick Pope
2022-07-21Refs #27236 -- Made cosmetic edits to Meta.index_together deprecation.Mariusz Felisiak
This should make it more straightforward to move forward when deprecation ends.
2022-07-19Fixed #33855 -- Removed unnecessary system check calls from test worker ↵Mariusz Felisiak
initialization. Regression in 3b3f38b3b09b0f2373e51406ecb8c9c45d36aebc.
2022-07-18Fixed #33854 -- Corrected the order of parameters in dbshell on PostgreSQL.Jarrett Keifer
2022-07-14Fixed #33631 -- Marked {% blocktranslate asvar %} result as HTML safe.cheng
2022-07-12Fixed #27236 -- Deprecated Meta.index_together in favor of Meta.indexes.David Wobrock
This also deprecates AlterIndexTogether migration operation.
2022-07-12Refs #27236 -- Split RenameField() tests with unique/index_together.David Wobrock
2022-07-11Refs #27236 -- Removed usage of Meta.index_together from ↵David Wobrock
indexes/introspection test models.
2022-07-11Fixed typo in tests/sitemaps_tests/test_http.py.Ikko Ashimine
2022-07-08Fixed #33718 -- Dropped support for MySQL 5.7.Mariusz Felisiak
2022-07-08Fixed #33829 -- Made BaseConstraint.deconstruct() and equality handle ↵Stéphane "Twidi" Angel
violation_error_message. Regression in 667105877e6723c6985399803a364848891513cc.
2022-07-08Refs #27236 -- Added generic mechanism to handle the deprecation of ↵David Wobrock
migration operations.
2022-07-06Fixed #33826 -- Fixed RedisCache.set_many()/delete_many() crash with an ↵Christos Kopanos
empty list.
2022-07-06Fixed #33823 -- Made inspectdb generate unique related_name when reverse ↵Vladimir Kochetkov
accessor clashes.
2022-07-06Refs CVE-2022-34265 -- Properly escaped Extract() and Trunc() parameters.Simon Charette
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2022-07-05Fixed RelatedGeoModelTest.test08_defer_only() on MySQL 8+ with MyISAM ↵Mariusz Felisiak
storage engine.
2022-07-05Fixed #33822 -- Fixed save() crash on model formsets when not created by ↵Shawn Dong
modelformset_factory(). Thanks Claude Paroz for the report. Regression in e87f57fdb8dcdabc452bd15abd015bf6c9b1f7a8.
2022-07-05Fixed #33815 -- Fixed last_executed_query() on Oracle when parameter names ↵Mariusz Felisiak
overlap.
2022-07-04Fixed CVE-2022-34265 -- Protected Trunc(kind)/Extract(lookup_name) against ↵Mariusz Felisiak
SQL injection. Thanks Takuto Yoshikai (Aeye Security Lab) for the report.
2022-07-04Fixed #33816 -- Fixed QuerySet.only() after select_related() crash on proxy ↵Ipakeev
models.
2022-07-01Fixed GEOSTest.test_emptyCollections() on GEOS 3.8.0.Mariusz Felisiak
It's a regression in GEOS 3.8.0 fixed in GEOS 3.8.1.
2022-07-01Updated vendored _urlsplit() to strip newline and tabs.Michael Manfre
Refs Python CVE-2022-0391. Django is not affected, but others who incorrectly use internal function url_has_allowed_host_and_scheme() with unsanitized input could be at risk.
2022-06-28Fixed #33779 -- Allowed customizing encoder class in ↵Hrushikesh Vaidya
django.utils.html.json_script().
2022-06-28Refs #33697 -- Used django.utils.http.parse_header_parameters() for parsing ↵Mehrdad
boundary streams. This also removes unused parse_header() and _parse_header_params() helpers in django.http.multipartparser.
2022-06-28Fixed #33805 -- Made admin's many-to-many widgets do not display help text ↵Ankur
for selecting values when allow_multiple_selected is False.
2022-06-27Fixed #33796 -- Fixed ordered combined queryset crash when used in subquery ↵Mariusz Felisiak
on PostgreSQL and MySQL. Thanks Shai Berger for the report. Regression in 30a01441347d5a2146af2944b29778fa0834d4be.
2022-06-23Fixed #33800 -- Fixed system check for the same template tag module in ↵Mariusz Felisiak
installed apps and template tag libraries. Thanks Claude Paroz for the report. Regression in 004b4620f6f4ad87261e149898940f2dcd5757ef.
2022-06-23Fixed #33799, Refs #31685 -- Added parameters for updating conflicts to ↵DhruvaPatil98
QuerySeta.abulk_create().
2022-06-23Made HashedFilesMixin ignore URLs without a path.Florian Apolloner
2022-06-22Fixed #33028 -- Used ModelAdmin's opts attribute instead of model._meta.Marcelo Galigniana
2022-06-21Fixed #33794 -- Fixed string-casting of GIS queries on PostgreSQL.Claude Paroz
Regression in 64c3f049ea3bcb1c82f35ae09f1dd5349a826a5c.
2022-06-20Fixed #33657 -- Allowed customizing formatter class of argument parsers.Abhinav Yadav