| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2013-09-10 | [1.4.x] Bump version numbers for 1.4.7 security release.1.4.7 | James Bennett | |
| 2013-09-10 | Added 1.4.7 release notes | Tim Graham | |
| Backport of baec6a26dd from master | |||
| 2013-09-10 | [1.4.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative ↵ | Tim Graham | |
| paths. Thanks Rainer Koirikivi for the report and draft patch. This is a security fix; disclosure to follow shortly. Backport of 7fe5b656c9 from master | |||
| 2013-09-09 | [1.4.x] Fixed #20707 -- Added explicit quota assignment to Oracle test user | Садовский Николай | |
| To enable testing on Oracle 12c | |||
| 2013-08-18 | [1.4.x] Fixed #20907 - Test failure on Oracle | Shai Berger | |
| Backport of the Oracle-specific part of commit a18e43c5bb8cb7c82 from master. This commit made get_indexes more consistent across backends. Thanks Tim Graham for pointer to the commit, akaariai and ikelly for the original commit. | |||
| 2013-08-17 | [1.4.x] Fixed #20904: Test failure on Oracle | Shai Berger | |
| Just skip the failing test, the failure isn't really relevant; also, both the test and the reason for its failure were removed in 1.5. Thanks Tim Graham for advice on 1.5. | |||
| 2013-08-16 | [1.4.x] Fixed #20906 -- Fixed a dependence on set-ordering in tests | Luke Plant | |
| Backport of 1ae64e96c1 from master | |||
| 2013-08-16 | [1.4.x] Fixed #20905 -- Fixed an Oracle-specific test case failure | Anssi Kääriäinen | |
| Made a test checking ORM-generated query string case-insensitive. Backport of ee0a7c741e from master | |||
| 2013-08-13 | Fixed regression in validation tests since example.com is available via ↵ | Florian Apolloner | |
| https now. | |||
| 2013-08-13 | Bump version post-release. | Jacob Kaplan-Moss | |
| 2013-08-13 | [1.4.x] Removed 1.5.2 release notes | Tim Graham | |
| 2013-08-13 | Stole the Makefile for building packages from master. | Jacob Kaplan-Moss | |
| 2013-08-13 | Added 1.4.6/1.5.2 release notes.1.4.6 | Tim Graham | |
| 2013-08-13 | Bumped version numbers for 1.4.6. | Jacob Kaplan-Moss | |
| 2013-08-13 | Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S. | Jacob Kaplan-Moss | |
| This is a security fix; disclosure to follow shortly. | |||
| 2013-08-12 | [1.4.x] Added missing release notes for older versions of Django | Tim Graham | |
| Backport of 3f6cc33cff from master | |||
| 2013-07-31 | [1.4.x] Added a bugfix in docutils 0.11 -- docs will now build properly. | Tim Graham | |
| Backport of a3a59a3197 from master | |||
| 2013-07-31 | [1.4.x] Fixed #20779 -- Documented AdminSite.app_index_template; refs #8498. | SusanTan | |
| Thanks CollinAnderson for the report. Backport of 7de35a9ef3 from master | |||
| 2013-07-25 | [1.4.x] Fixed #18315 -- Documented QueryDict.popitem and QueryDict.pop | mark hellewell | |
| Thanks gcbirzan for the report. Backport of 8c9240222f from master | |||
| 2013-07-25 | [1.4.x] Fixed #20792 -- Corrected DISALLOWED_USER_AGENTS docs. | Brenton Cleeland | |
| Thanks simonb for the report. Backport of dab52d99fc from master | |||
| 2013-07-18 | [1.4.x] Atom specification URL updated | Matt Deacalion Stevens | |
| Changed to the URL of the official RFC for Atom, since Atomenabled.org is just a holding page. Backport of beefc97171 from master | |||
| 2013-07-17 | [1.4.x] Fixed #20756 -- Typo in uWSGI docs. | Tim Graham | |
| Backport of a3242dc9fe from master | |||
| 2013-07-11 | [1.4.x] Fixed #20730 -- Fixed "Programmatically creating permissions" error. | Tim Graham | |
| Thanks glarrain for the report. Backport of 684a606a4e from master | |||
| 2013-07-10 | [1.4.x] Fixed #19196 -- Added test/requirements | Tim Graham | |
| Backport of 4d92a0bd86 from master | |||
| 2013-07-08 | [1.4.x] Fixed #18944 -- Documented PasswordResetForm's from_email argument ↵ | Tim Graham | |
| as a backwards incompatible change for 1.3 Thanks DrMeers for the report. Backport of dab921751d from master | |||
| 2013-06-27 | [1.4.x] Fixed #20665 -- Missing backslash in sitemaps documentation | Baptiste Mispelon | |
| Backport of 5005303ae7919eef26dab9f8ba279696966ebf1d from master. | |||
| 2013-06-24 | [1.4.x] Fixed oversight in e3b6fed3. Refs #20636. | Aymeric Augustin | |
| 2013-06-24 | [1.4.x] Fixed #20636 -- Stopped stuffing values in the settings. | Aymeric Augustin | |
| In Django < 1.6, override_settings restores the settings module that was active when the override_settings call was executed, not when it was run. This can make a difference when override_settings is applied to a class, since it's executed when the module is imported, not when the test case is run. In addition, if the settings module for tests is stored alongside the tests themselves, importing the settings module can trigger an import of the tests. Since the settings module isn't fully imported yet, class-level override_settings statements may store a reference to an incorrect settings module. Eventually this will result in a crash during test teardown because the settings module restored by override_settings won't the one that was active during test setup. While Django should prevent this situation in the future by failing loudly in such dubious import sequences, that change won't be backported to 1.5 and 1.4. However, these versions received the "allowed hosts" patch and they're prone to "AttributeError: 'Settings' object has no attribute '_original_allowed_hosts'". To mitigate this regression, this commits stuffs _original_allowed_hosts on a random module instead of the settings module. This problem shouldn't occur in Django 1.6, see #20290, but this patch will be forward-ported for extra safety. Also tweaked backup variable names for consistency. Backport of 0261922 from stable/1.5.x. Conflicts: django/test/utils.py | |||
| 2013-05-31 | [1.4.x] Fixed #20326 - Corrected form wizard get_form() example. | Tim Graham | |
| Thanks tris@ for the report. Backport of 646a2216e9 from master | |||
| 2013-05-29 | [1.4.x] Fixed regroup example. | Gavin Wahl | |
| Chicago was missing. Backport of e6ff238 from master. | |||
| 2013-05-28 | [1.4.x] Fixed #20523 - Incorrect form field for FilePathField. | Tim Graham | |
| Thanks sane4ka.sh@ for the report. Backport of 1fdc3d256d from master | |||
| 2013-05-24 | [1.5.x] Fixed #20492 - Removed a broken link in GIS docs. | Tim Graham | |
| Backport of fbab3209fc from master | |||
| 2013-05-24 | [1.4.x] Updated link to jQuery Cookie plugin site | Alasdair Nicol | |
| Backport of 81f454a322 from master | |||
| 2013-05-14 | [1.4.x] Fixed a minor spelling mistake in the queryset documentation | Wilfred Hughes | |
| Backport of d258cce482 from master | |||
| 2013-05-13 | [1.5.X] Fixed #18883 -- added a missing self parameter in the docs | Alex Gaynor | |
| Backport of 17d57275f9 from master | |||
| 2013-03-30 | [1.4.X] Fixed #18277 - Clarified startproject documentation. | Tim Graham | |
| Backport of 33503600b5 from master | |||
| 2013-03-29 | [1.4.x] Fixed #20150 -- Fixed an error in manager doc example | Nimesh Ghelani | |
| Backport of 485c024567 from master | |||
| 2013-03-28 | [1.4.x] Bump version to no longer claim to be 1.4.5 final. | Carl Meyer | |
| 2013-03-26 | Merge pull request #962 from dstufft/document-bcrypt-truncation-1.4.x | Donald Stufft | |
| Document password truncation with BCryptPasswordHasher | |||
| 2013-03-26 | Document password truncation with BCryptPasswordHasher | Donald Stufft | |
| 2013-03-02 | [1.4.x] Fixed #19926 -- Fixed a link to code example in queries docs | Claude Paroz | |
| Thanks Randy Salvo for the report. | |||
| 2013-02-25 | [1.4.x] Fixed #18144 -- Restored compatibility with SHA1 hashes with empty salt. | Aymeric Augustin | |
| Thanks dahool for the report and initial version of the patch. Backport of 633d8de from master. | |||
| 2013-02-25 | [1.4.x] Fixed #19911 - Updated generic view links. | Tim Graham | |
| Thanks marc@ for the report. | |||
| 2013-02-25 | [1.4.x] Fixed #19728 - Updated API stability doc to reflect current meaning ↵ | Tim Graham | |
| of "stable". Backport of 132d5822b0 from master. | |||
| 2013-02-23 | [1.4.x] Fixed #19902 -- backport of as_view docs | Preston Holmes | |
| 2013-02-21 | [1.4.x] Made a couple of selenium tests wait for page loaded | Anssi Kääriäinen | |
| The admin_widgets tests were issuing click() to the browser but didn't wait for the effects of those clicks. This caused the resulting request to be processed concurrently with the test case. When using in-memory SQLite this caused weird failures. Also added wait_page_loaded() to admin selenium tests for code reuse. Fixed #19856, cherry-pick of 50677b29af39ca670274fb45087415c883c78b04 | |||
| 2013-02-20 | [1.4.x] Bump version numbers to roll a clean package.1.4.5 | James Bennett | |
| 2013-02-20 | [1.4.x] Note that ALLOWED_HOSTS default changes in Django 1.5. | Carl Meyer | |
| 2013-02-19 | [1.4.x] Fixed #19857 -- Fixed broken docs link in project template. | Carl Meyer | |
| 2013-02-19 | [1.4.x] Don't characterize XML vulnerabilities as DoS-only. | Carl Meyer | |
