summaryrefslogtreecommitdiff
path: root/django/http
AgeCommit message (Expand)Author
9 daysFixed #36991 -- Raised BadRequest for invalid encodings in Content-Type headers.Dinesh
2026-04-07Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body size in ...Natalia
2026-04-07Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.Natalia
2026-02-24Fixed #36931 -- Handled LookupError in multipart parser for invalid RFC 2231 ...sammiee5311
2026-02-10Fixed #36841 -- Made multipart parser class pluggable on HttpRequest.farhan
2025-11-26Fixed #36743 -- Increased URL max length enforced in HttpResponseRedirectBase.varunkasyap
2025-11-05Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedirect/HttpR...Jacob Walls
2025-08-28Refs #36520 -- Ensured only the header value is passed to parse_header_parame...Jake Howard
2025-07-23Refs #36500 -- Rewrapped long docstrings and block comments via a script.django-bot
2025-07-23Refs #36500 -- Shortened some long docstrings and comments.Mike Edmunds
2025-07-23Removed double spaces after periods and within phrases.Sarah Boyce
2025-06-16Fixed #36447 -- Selected preferred media type based on quality.Jake Howard
2025-06-09Fixed #36446 -- Restored "q" in internal MediaType.params property.Natalia
2025-06-03Fixed #36411 -- Made HttpRequest.get_preferred_type() consider media type par...Jake Howard
2025-03-31Refs #28909 -- Simplified code using unpacking generalizations.Aarni Koskela
2025-02-18Refs #36005 -- Used datetime.UTC alias instead of datetime.timezone.utc.Mariusz Felisiak
2024-11-14Fixed #35784 -- Added support for preserving the HTTP request method in HttpR...Lorenzo Peña
2024-10-16Fixed #35727 -- Added HttpResponse.text property.SaJH
2024-09-09Fixed #35631 -- Added HttpRequest.get_preferred_type().Jake Howard
2024-08-28Refs #33735 -- Adjusted warning stacklevel in StreamingHttpResponse.__iter__(...Simon Charette
2024-05-29Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.Jake Howard
2024-01-26Applied Black's 2024 stable style.Mariusz Felisiak
2023-11-24Fixed #34968 -- Made multipart parsing of headers raise an error on too long ...Standa Opichal
2023-08-25Fixed #34709 -- Raised BadRequest for non-UTF-8 requests with the application...Mariusz Felisiak
2023-08-02Simplified django.http.request.split_domain_port().Nick Pope
2023-04-12Refs #34482 -- Reverted "Fixed #32969 -- Fixed pickling HttpResponse and subc...Mariusz Felisiak
2023-04-12Fixed #34484, Refs #34482 -- Reverted "Fixed #29186 -- Fixed pickling HttpReq...Mariusz Felisiak
2023-03-14Fixed #34405 -- Fixed setting Content-Type header in FileResponse for compres...Mariusz Felisiak
2023-02-14Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files.Markus Holtermann
2023-01-18Refs #34233 -- Used str.removeprefix()/removesuffix().Mariusz Felisiak
2023-01-18Refs #34233 -- Used aiter() and anext().Nick Pope
2022-12-22Fixed #33735 -- Added async support to StreamingHttpResponse.Carlton Gibson
2022-12-05Fixed #34194 -- Added django.utils.http.content_disposition_header().Alex Vandiver
2022-11-14Fixed #34074 -- Added headers argument to RequestFactory and Client classes.David Wobrock
2022-11-10Updated documentation and comments for RFC updates.Nick Pope
2022-10-31Used more augmented assignment statements.Nick Pope
2022-09-14Fixed #29186 -- Fixed pickling HttpRequest and subclasses.Anvesh Mishra
2022-08-03Fixed CVE-2022-36359 -- Escaped filename in Content-Disposition header.Carlton Gibson
2022-06-28Refs #33697 -- Used django.utils.http.parse_header_parameters() for parsing b...Mehrdad
2022-06-28Removed unnecessary _parse_header() from MultiPartParser.Mariusz Felisiak
2022-06-28Refs #33697 -- Made MediaType use django.utils.http.parse_header_parameters().Mehrdad
2022-06-20Fixed #32969 -- Fixed pickling HttpResponse and subclasses.Anv3sh
2022-06-09Fixed #33755 -- Moved ASGI body-file cleanup into request class.Jonas Lundberg
2022-06-03Refs #33697 -- Made MultiPartParser use django.utils.http.parse_header_parame...Mehrdad
2022-06-01Refs #33697 -- Fixed multipart parsing of headers with double quotes and semi...Mehrdad
2022-05-17Fixed #33683 -- Document HttpResponseBase and allow import from django.httpCollin Anderson
2022-05-11Refs #33173 -- Removed use of deprecated cgi module.Carlton Gibson
2022-03-24Refs #32365 -- Removed internal uses of utils.timezone.utc alias.Carlton Gibson
2022-03-23Fixed #33569 -- Added SECURE_PROXY_SSL_HEADER support for list of protocols i...Thomas Schmidt
2022-03-07Refs #33562 -- Made HttpResponse.set_cookie() raise ValueError when both "exp...Luke Plant