summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2013-02-19[1.5.x] Bump version numbers for security release.1.5c2James Bennett
2013-02-19[1.5.x] Update 1.5 release notes for XML and formset fixes.Carl Meyer
2013-02-19[1.5.x] Added a default limit to the maximum number of forms in a formset.Aymeric Augustin
This is a security fix. Disclosure and advisory coming shortly.
2013-02-19[1.5.x] Checked object permissions on admin history view.Carl Meyer
This is a security fix. Disclosure and advisory coming shortly. Patch by Russell Keith-Magee.
2013-02-19[1.5.x] Restricted the XML deserializer to prevent DoS attacks.Carl Meyer
This is a security fix. Disclosure and advisory coming shortly.
2013-02-19[1.5.x] Added a new required ALLOWED_HOSTS setting for HTTP host header ↵Carl Meyer
validation. This is a security fix; disclosure and advisory coming shortly.
2013-02-18[1.5.X] Fixed #19717 - Removed mentions of "root QuerySet" in docs.Tim Graham
Thanks julien.aubert.mail@ for the report and James Pic for the patch. Backport of 64d0f89ab1 from master
2013-02-18[1.5.x] Corrected INSTALLED_APPS syntax in 1.5 release notes.Simon Meers
Backport of 9c2066d5 from master.
2013-02-16[1.5.x] Fixed #19824 - Corrected the class described for Field.primary_key ↵Tim Graham
from IntegerField to AutoField. Thanks Keryn Knight. Backport of 218bbef0c4 from master
2013-02-16[1.5.x] Fixed #19812 - Removed a duplicate phrase in the widget docs.Tim Graham
Thanks diegueus9 for the report and itsallvoodoo for the draft patch. Backport of 7a80904b00 from master
2013-02-16[1.5.x] Fixed #19719 - Removed misleading example from ModelForm documentationAlex Hunley
Backport of 976dc07baf from master
2013-02-16[1.5.x] Fixed #19833 -- Fixed import parameter encoding in get_runnerClaude Paroz
Thanks Danilo Bargen for the report. Backport of 63236161 from master.
2013-02-16[1.5.x] Refs #14881 -- Document that User models need to have an integer ↵Russell Keith-Magee
primary key. Thanks to Kaloian Minkov for the reminder about this undocumented requirement. (cherry picked from commit 91c26eadc9b4efa5399ec0f6c84b56a3f8eb84f4)
2013-02-15[1.5.x] Fixed geos test to prevent random failureClaude Paroz
Points in the test fixtures have 20 as max coordinate. Backport of 87854b0bdf3 from master.
2013-02-15[1.5.x] Avoided unneeded assertion on Python 3Claude Paroz
Fixes failure introduced in 02e5909f7a.
2013-02-15[1.5.x] Fixed #19807 -- Sanitized getpass input in createsuperuserClaude Paroz
Python 2 getpass on Windows doesn't accept unicode, even when containing only ascii chars. Thanks Semmel for the report and tests. Backport of 02e5909f7a from master.
2013-02-15[1.5.x] Fixed #19829 -- Fixed index lookups for NumPy arrays in templates.Julien Phalip
Backport of 7d5e35cdb46124e2471
2013-02-15[1.5.x] Fixed #19822 -- Added validation for uniqueness on USERNAME_FIELD on ↵Russell Keith-Magee
custom User models. Thanks to Claude Peroz for the draft patch. (cherry picked from commit f5e4a699ca0f58818acbdf9081164060cee910fa)
2013-02-14[1.5.x] Fix filtering during collection of paths in setup.pyRamiro Morales
Thanks Marek Brzóska for the report. f179a5198e05e1be8ba8be87c1f0e1a8924cf005 from master.
2013-02-14[1.5.x] Mention backward relationships in aggregate docs.Ramiro Morales
Thanks Anssi and Marc Tamlyn for reviewing. Fixes #19803. 0560bfb705687c831e2769b1202706e2ceb1f7a7 from master.
2013-02-14[1.5.x] Typo in i18n docs.Ramiro Morales
112c6e987dbe789c8eb1889852f6056131c8d4d6 from master.
2013-02-14[1.5.x] Fixed #19729 -- Removed leftover refactoring helper variables.Ramiro Morales
Thanks chrismedrela for the report. Refs #6262, 44b9076 and 4d94c0c. 826d9de00e74a53d7cc65fcb2aaa5ccdf33674ab from master.
2013-02-14[1.5.x] Fixed #19823 -- Fixed memcached code example in cache docsClaude Paroz
Backport of 668d0b8d from master.
2013-02-12[1.5.x] Fix admindocs on Python 3, where None cannot be sorted with strings.Carl Meyer
This fixes two tests in admin_views which were failing on Python 3, but only if the tests were run with docutils installed.
2013-02-13[1.5.x] Removed try-except in django.db.close_connection()Anssi Kääriäinen
The reason was that the except clause needed to remove a connection from the django.db.connections dict, but other parts of Django do not expect this to happen. In addition the except clause was silently swallowing the exception messages. Refs #19707, special thanks to Carl Meyer for pointing out that this approach should be taken.
2013-02-10[1.5.x] Made custom m2m fields without through easier to useAnssi Kääriäinen
The change in f105fbe52b21da206bfbaedf0e92326667d7b2d4 made through=None m2m fields fail in cases where they worked before. It isn't possible to create such fields using public APIs. The fix is trivial, so it seems worth adding it. This is not a backport from master. Master has gotten enough other changes to related fields internal API that this fix alone isn't enough to do any good.
2013-02-10[1.5.x] Emphasized MyISAM pseudo-requirement for GeoDjango over MySQLClaude Paroz
Refs #15295. Backport of 8fbc20b24 from master.
2013-02-10[1.5.x] Fixed #19112 -- Reduced the amount of query params in a testAnssi Kääriäinen
Backpatch of 604d8763dc2c901a3557e15880895d88af5c4127.
2013-02-10[1.5.x] Fixed #19720 -- Oracle ordering related delete regressionAnssi Kääriäinen
When a query had a complex where condition (a condition targeting more than the base table) a subquery was used for deletion. However, the query had default ordering from the model's meta and Oracle doesn't work with ordered subqueries. The regression was caused by fast-path deletion code introduced in 1cd6e04cd4f768bcd4385b75de433d497d938f82 for fixing #18676. Thanks to Dylan Klomparens for the report. Backpatch of 8ef3235034a1a7616714a5d61486dc68536f74ee
2013-02-10[1.5.x] Fixed #19638 -- Skipped tx support testing for some DBsAnssi Kääriäinen
PostgreSQL and Oracle always support transactions, so the create table and rollback test is non-necessary on those DBs. Thanks to shai for report. Backpatch of 0478780b8efdfcbc0d2c17f1459cac45701e1d86
2013-02-10[1.5.x] Fixed #19707 -- Reset transaction state after requestsAnssi Kääriäinen
Backpatch of a4e97cf315142e61bb4bc3ed8259b95d8586d09c
2013-02-10[1.5.x] Fixed #19645 -- Added tests for TransactionMiddlewareAnssi Kääriäinen
Backpatch of f556df90be995a83b979cf875705d98521ab4dc7. Backpatching these tests so that it will be easier to backpatch the fix for #19707.
2013-02-09[1.5.x] Made modwsgi groups_for_user consistent with check_passwordPreston Holmes
2b5f848207b1dab35afd6f63d0107629c76d4d9a based its changes on #19061 that made the is_active attribute mandatory for user models. The try/except was not removed for the groups_for_user function. refs #19780
2013-02-09[1.5.x] Fixed #19699 - Removed "Please see the release notes" from ↵Tim Graham
versionadded/changed directives Thanks Aymeric for the patch. Backport of d93edffa89 from master.
2013-02-09[1.5.x] Fixed #19749 -- Documented ending param to command's self.stdout/errClaude Paroz
Thanks xian at mintchaos.com for the report. Backport of 0201b9d6d from master
2013-02-08[1.5.x] Cleaned up some lingering signals in the test suite that were ↵Julien Phalip
causing spurious failures with Pypy and Postgres. Backport of db09a2de6e1bc7121
2013-02-08[1.5.x] Fixed #19779 -- Checked contrib.sites presence in ↵Claude Paroz
RedirectFallbackMiddleware Thanks Aymeric Augustin for the report and directions for the patch. Backport of 2ed90eac from master.
2013-02-08[1.5.x] Fixed #19776 -- Added missing import for backportPreston Holmes
line was present on master from 1520748dac95a7f114e4bb2feeee04d46c720494
2013-02-07[1.5.x] Fixed #19662 -- alter auth modelbackend to accept custom username fieldsPreston Holmes
Thanks to Aymeric and Carl for the review.
2013-02-07[1.5.x] Fixed #19772 -- Handled APPEND_SLASH correctly in the redirects app.Aymeric Augustin
Backport of 64623a2.
2013-02-07[1.5.x] Fixed #19706 - Tweaks to the tutorial.Tim Graham
Thanks Daniele Procida. Backport of aa85ccf8ce from master.
2013-02-07[1.5.x] Fixed #19756 - Corrected a ManyToMany example and added some links ↵Tim Graham
and markup. Backport of 43efefae69 from master
2013-02-06[1.5.x] Fixed a typo in the test suite that was causing some spurious ↵Julien Phalip
failures with pypy. Backport of 6afc85af47f7d9f44
2013-02-06Partially revert 9efe1a721, strip_tags improvementsClaude Paroz
The new regex seems not stable enough for being released. Stripping with regex might need reevaluation for the next release. Refs #19237.
2013-02-06[1.5.x] Fixed #19743 - Documented some limitations of contrib.auth.Tim Graham
Thanks Aymeric for the suggestion. Backport of afa3e16334 from master
2013-02-06[1.5.x] Fixed #19745 -- Forced resolution of verbose names in createsupersuserClaude Paroz
Thanks Baptiste Mispelon for the report and Preston Holmes for the review. Backport of 2390fe3f4 from master.
2013-02-04[1.5.x] Fixed #19734 -- Missing values in `DATETIME_INPUT_FORMATS` doc.Simon Charette
Also changed formating of `DATE_INPUT_FORMATS` and `TIME_INPUT_FORMATS` for readability. Thanks minddust for the report! Backport of 5c70299a71 from master.
2013-02-04[1.5.x] Updated translations (bn/es/eu/lb/mn)Claude Paroz
2013-02-04[1.5.x] Fixed #19725 -- Made createsuperuser handle non-ascii promptsClaude Paroz
Thanks Michisu for the report. Backport of 55c585f1c from master.
2013-02-03[1.5.x] Fixed a typo in docs/topics/auth/customizing.txtTim Graham
Backport of 2c173ff3b4 from master