| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2016-10-25 | [1.9.x] Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True. | Tim Graham | |
| This is a security fix. | |||
| 2016-10-25 | [1.9.x] Fixed CVE-2016-9013 -- Generated a random database user password ↵ | Marti Raudsepp | |
| when running tests on Oracle. This is a security fix. | |||
| 2016-05-08 | [1.9.x] Fixed #26483 -- Updated docs.python.org links to use Intersphinx. | Tim Graham | |
| Backport of f5ff5010cd74500785a707ac70b51d292403cddc from master | |||
| 2016-04-07 | [1.9.x] Fixed #26037 -- Documented precedence of USE_X_FORWARDED_HOST/PORT ↵ | Arnaud Limbourg | |
| settings. Backport of 5cda4677b3df1be971000ef27470d3efc308d3be from master | |||
| 2016-04-04 | [1.9.x] Fixed #26419 -- Added a link in ALLOWED_HOSTS docs. | Joshua Pereyda | |
| Backport of f8b31dfdfc0cf6a516bcbc10c4e2f696ce3a9bda from master | |||
| 2016-03-31 | [1.9.x] Removed some docs that should have been removed along with ↵ | Tim Graham | |
| PROFANITIES_LIST. Backport of 12dee89d9c1fbe6b47984c544505aa8ff77e92bc from master | |||
| 2016-03-03 | [1.9.x] Fixed #26309 -- Documented that login URL settings no longer support ↵ | Alasdair Nicol | |
| dotted paths. Backport of 2404d209a5e8c4573927e14587735562b79e13ed from master | |||
| 2016-02-02 | [1.9.x] Made identation of default setting docs more consistenct. | Tim Graham | |
| Backport of 67907ed84569729f5b95d1ea265a5de402fdf012 from master | |||
| 2016-02-01 | [1.9.x] Fixed #26124 -- Added missing code formatting to docs headers. | Tim Graham | |
| Backport of a6ef025dfb2a1d1bd23893408eef6d066fb506d9 from master | |||
| 2016-02-01 | [1.9.x] Fixed #23868 -- Added support for non-unique django-admin-options in ↵ | Tim Graham | |
| docs. Also documented missing short command line options to fix #24134. This bumps the minimum sphinx version required to build the docs to 1.3.4. Thanks Simon Charette for review. Backport of e519aab43a419589e92fe284e4ce2f2e034aec6a from master | |||
| 2016-01-29 | [1.9.x] Made formatting of docs for settings defaults more consistent. | Tim Graham | |
| Backport of 2436b83dfd8ebccd71ce57c21c0a885f5ace81d4 from master | |||
| 2016-01-11 | [1.9.x] Refs #25755 -- Unified a couple more spellings of 'website'. | pp | |
| Backport of c8d970a548cb5cbdad80dbb1b5b4e44ff08662b5 from master | |||
| 2016-01-07 | [1.9.x] Fixed #25928 -- Clarified precendence of USE_THOUSAND_SEPARATOR and ↵ | wingston sharon | |
| locale formats. Backport of 7f218d98915ef3e76a98ef72075a6bde907dfe41 from master | |||
| 2016-01-06 | [1.9.x] Refs #25878 -- Added the expected return type of CSRF_FAILURE_VIEW. | Tim Graham | |
| Backport of 62e83c71d2086b91d58c313e46933ef7aa8b6db1 from master | |||
| 2015-12-01 | [1.9.x] Fixed #25778 -- Updated docs links to use https when available. | Jon Dufresne | |
| Backport of 7aabd6238028f4bb78d0687bbccc97bcf634e28b from master | |||
| 2015-11-17 | [1.9.x] Fixed #25710 -- Clarified the docs about what INTERNAL_IPS does. | Alex Morozov | |
| Backport of 5abed864ee1cd31a0b920768b4abe85b26b43a4d from master | |||
| 2015-10-29 | [1.9.x] Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't ↵ | Tim Graham | |
| create empty sessions. Backport of abf5ccc29c45d53ec17541179bb5f0a75b28915d from master | |||
| 2015-09-16 | Fixed #24496 -- Added CSRF Referer checking against CSRF_COOKIE_DOMAIN. | Matt Robenolt | |
| Thanks Seth Gottlieb for help with the documentation and Carl Meyer and Joshua Kehn for reviews. | |||
| 2015-09-12 | Refs #25386 -- Added links to the OPTIONS of the built-in template backends. | Tim Graham | |
| 2015-09-12 | Cleaned up surrounding documentation | Markus Holtermann | |
| 2015-09-12 | Fixed #24919 -- Allowed disabling of migrations on a per app basis | Markus Holtermann | |
| 2015-09-11 | Fixed #25351 -- Added example for database test settings to docs. | Jose Carlos Menezes | |
| 2015-09-07 | Fixed #25356 -- Removed default_app_config from startapp template. | Tim Graham | |
| Also discouraged its use outside the intended use case. | |||
| 2015-09-05 | Fixed #25334 -- Provided a way to allow cross-origin unsafe requests over HTTPS. | Joshua Kehn | |
| Added the CSRF_TRUSTED_ORIGINS setting which contains a list of other domains that are included during the CSRF Referer header verification for secure (HTTPS) requests. | |||
| 2015-08-28 | Fixed #25318 -- Made SILENCED_SYSTEM_CHECKS suppress all messages. | Tim Graham | |
| Previously, messages of ERROR level or higher were printed to the console. | |||
| 2015-08-25 | Fixed #25309 -- Corrected that ATOMIC_REQUESTS applies per view not per request. | Tim Graham | |
| 2015-08-08 | Updated Wikipedia links to use https | Claude Paroz | |
| 2015-08-07 | Fixed #25175 -- Renamed the postgresql_psycopg2 database backend to postgresql. | Caio Ariede | |
| 2015-08-04 | Fixed #25211 -- Added HttpRequest.get_port() and USE_X_FORWARDED_PORT setting. | Matt Robenolt | |
| 2015-07-17 | Fixed #25125 -- Updated docs on cookie naming conventions. | Konrad Świat | |
| Thanks Tim Graham for the review and kezabelle for the report. | |||
| 2015-06-24 | Renamed RemovedInDjangoXYWarnings for new roadmap. | Tim Graham | |
| Forwardport of ae1d663b7913f6da233c55409c4973248372d302 from stable/1.8.x plus more. | |||
| 2015-06-20 | Fixed #25010 -- Documented APP_DIRS default in startproject's settings.py | Tim Graham | |
| 2015-06-10 | Refs #16860 -- Minor edits and fixes to password validation. | Tim Graham | |
| 2015-06-07 | Fixed #16860 -- Added password validation to django.contrib.auth. | Erik Romijn | |
| 2015-05-21 | Cosmetic edits and minor corrections to docs/ref/settings.txt. | garwoodpr | |
| 2015-05-17 | Fixed #23820 -- Supported per-database time zone. | Aymeric Augustin | |
| The primary use case is to interact with a third-party database (not primarily managed by Django) that doesn't support time zones and where datetimes are stored in local time when USE_TZ is True. Configuring a PostgreSQL database with the TIME_ZONE option while USE_TZ is False used to result in silent data corruption. Now this is an error. | |||
| 2015-05-13 | Fixed broken link in settings docs | Piotr Jakimiak | |
| 2015-05-01 | Updated capitalization in the word "JavaScript" for consistency | Dave Hodder | |
| 2015-03-25 | Fixed #23814 -- Documented apps refactored out of Django. | Fabio Natali | |
| 2015-03-20 | Fixed #24503 -- Added docs on LANGUAGE_CODE fallback change in 1.8. | Tim Graham | |
| Thanks Pakal and Claude. | |||
| 2015-03-05 | Fixed #21495 -- Added settings.CSRF_HEADER_NAME | Grzegorz Slusarek | |
| 2015-02-15 | Deprecated TEMPLATE_DEBUG setting. | Aymeric Augustin | |
| 2015-02-03 | Fixed #24149 -- Normalized tuple settings to lists. | darkryder | |
| 2015-02-01 | Removed versionadded/changed notes for 1.7. | Tim Graham | |
| 2015-01-18 | Removed support for syncing apps without migrations per deprecation timeline. | Tim Graham | |
| Kept support for creating models without migrations when running tests (especially for Django's test suite). | |||
| 2015-01-17 | Removed support for old-style test database settings per deprecation timeline. | Tim Graham | |
| 2015-01-12 | Fixed #24124 -- Changed context_processors in the default settings.py | Collin Anderson | |
| 2015-01-10 | Moved doc on the DTL's syntax to the ref/ section. | Aymeric Augustin | |
| This makes room for a more general introduction about templating. Updated some links to point to the new location, but kept those that didn't talk specifically about the DTL. | |||
| 2015-01-05 | Fixed #24022 -- Deprecated the ssi tag. | Preston Timmons | |
| 2014-12-28 | Deprecated TEMPLATE_CONTEXT_PROCESSORS. | Aymeric Augustin | |
