index
:
django.git
fix-31295
main
stable/5.2.x
stable/6.0.x
django
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
django
/
utils
/
http.py
Age
Commit message (
Expand
)
Author
2016-09-10
Fixed #27083 -- Added support for weak ETags.
Kevin Christopher Henry
2016-09-07
Refs #26956 -- Allowed is_safe_url() to validate against multiple hosts
Jon Dufresne
2016-08-19
Fixed #26902 -- Allowed is_safe_url() to require an https URL.
Przemysław Suliga
2016-05-12
Fixed #21231 -- Enforced a max size for GET/POST values read into memory.
Andre Cruz
2016-05-03
Fixed #26567 -- Updated references to obsolete RFC2616.
Vasiliy Faronov
2016-04-06
Removed unused django.utils.http.PROTOCOL_TO_PORT.
Tim Graham
2016-03-04
Added safety to URL decoding in is_safe_url() on Python 2
Claude Paroz
2016-03-04
Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()
Claude Paroz
2016-03-01
Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth.
Mark Striemer
2016-01-05
Fixed #26024 -- Fixed regression in ConditionalGetMiddleware ETag support.
Denis Cornehl
2015-12-12
Fixed #20223 -- Added keep_lazy() as a replacement for allow_lazy().
Iacopo Spalletti
2015-09-16
Fixed #24496 -- Added CSRF Referer checking against CSRF_COOKIE_DOMAIN.
Matt Robenolt
2015-03-18
Made is_safe_url() reject URLs that start with control characters.
Tim Graham
2015-02-12
Fixed #24321 -- Improved `utils.http.same_origin` compliance with RFC6454
Lukas Klein
2015-02-06
Sorted imports with isort; refs #23860.
Tim Graham
2015-01-13
Fixed is_safe_url() to handle leading whitespace.
Tim Graham
2014-09-08
Fixed #23399 -- Optimized django.utils.http.int_to_bas36()
Tim Graham
2014-08-22
Fixed #23333 -- Made urlsafe_base64_decode() return proper type on Python 3.
Ian Foote
2014-07-09
Fixed #22223 -- Prevented over-escaping URLs in reverse()
Claude Paroz
2014-05-14
typo: urlaprse -> urlparse
Collin Anderson
2014-05-14
Added additional checks in is_safe_url to account for flexible parsing.
Erik Romijn
2013-11-02
Correct flake8 E302 violations
Ray Ashman Jr
2013-11-02
Correct flake8 violation E261
Ray Ashman Jr
2013-10-26
Fixed up some more flake8 violations (this particular violation still has man...
Alex Gaynor
2013-10-21
Fixed #21288 -- Fixed E126 pep8 warnings
Alasdair Nicol
2013-09-22
Removed a few trailing backslashes.
Aymeric Augustin
2013-09-05
Took advantage of django.utils.six.moves.urllib.*.
Aymeric Augustin
2013-09-02
Replaced "not PY3" by "PY2", new in six 1.4.0.
Aymeric Augustin
2013-08-13
Fixed is_safe_url() to reject URLs that use a scheme other than HTTP/S.
Jacob Kaplan-Moss
2013-08-07
Use `usegmt` flag in formatdate
David Evans
2013-06-26
Fixed #14881 -- Modified password reset to work with a non-integer UserModel.pk.
Tim Graham
2013-05-19
Fix a typo in a comment.
Marc Tamlyn
2013-05-18
Fixed #20411 -- Don't let invalid referers blow up CSRF same origin checks.
Florian Apolloner
2013-03-28
Fixed spelling errors
Gavin Wahl
2013-03-19
Fixed #18003 -- Preserved tracebacks when re-raising errors.
konarkmodi
2012-12-10
Fixed #18856 -- Ensured that redirects can't be poisoned by malicious users.
Florian Apolloner
2012-09-26
Fixed parse_http_date docstring and moved related tests
Claude Paroz
2012-08-30
Replaced some smart_xxx by force_xxx equivalent
Claude Paroz
2012-08-14
[py3] Fixed conditional_processing tests
Claude Paroz
2012-08-07
[py3] Ported django.utils.encoding.
Aymeric Augustin
2012-08-03
[py3] Removed uses of sys.maxint under Python 3.
Aymeric Augustin
2012-07-22
[py3] Updated urllib/urllib2/urlparse imports.
Aymeric Augustin
2012-07-22
[py3] Replaced unicode/str by six.text_type/bytes.
Aymeric Augustin
2012-06-14
Fixed #12140 -- Fixed http.urlencode result for empty lists
Claude Paroz
2012-03-30
Removed some Python < 2.6 compatibility code. Refs #17965.
Aymeric Augustin
2012-02-16
Use Python's changed comparisons, which makes this a bit more readable.
Alex Gaynor
2012-02-16
Fixed #17693. Input validation and tests for base36 conversion utils. Thanks ...
Paul McMillan
2012-01-29
Fixed #5964 -- Added unicode-aware versions of urlunquote and urlunquote_plus.
Aymeric Augustin
2011-09-09
Switch to using explicit new-style division behavior, rather than relying on ...
Alex Gaynor
2011-09-09
Fixed a bunch of imports of the email stdlib module now that we are on Python...
Jannis Leidel
[next]