From c76ab45fc650ac4fbcf2dba02231776d7b23f1e2 Mon Sep 17 00:00:00 2001 From: Russell Keith-Magee Date: Mon, 3 Jan 2011 14:01:44 +0000 Subject: [1.2.X] Fixed #14999 -- Ensure that filters on local fields are allowed, and aren't caught as a security problem. Thanks to medhat for the report. Backport of r15139 from trunk. git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.2.X@15140 bcc190cf-cafb-0310-a4f2-bffc1f526a37 --- django/contrib/admin/options.py | 2 ++ 1 file changed, 2 insertions(+) (limited to 'django') diff --git a/django/contrib/admin/options.py b/django/contrib/admin/options.py index f85efe4b98..41b50b426e 100644 --- a/django/contrib/admin/options.py +++ b/django/contrib/admin/options.py @@ -206,6 +206,8 @@ class BaseModelAdmin(object): # later. return True else: + if len(parts) == 1: + return True clean_lookup = LOOKUP_SEP.join(parts) return clean_lookup in self.list_filter or clean_lookup == self.date_hierarchy -- cgit v1.3