Commit Graph

2526 Commits

Author SHA1 Message Date
Tim Graham 001ff50808 [1.11.x] Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
This is a security fix.
2017-04-04 10:46:50 -04:00
Tim Graham 839159b67e [1.11.x] Added stub release notes for security releases. 2017-04-04 10:46:48 -04:00
heathervm ff0c6b83e5 [1.11.x] Fixed #27993 -- Fixed model form default fallback for SelectMultiple.
Backport of 7d1e237753 from master
2017-03-31 10:10:30 -04:00
Claude Paroz 28cf32b2cb [1.11.x] Fixed #27981 -- Doc'd date/time filter l10n changes in refs #25758.
Backport of 6585ebebaa from master
2017-03-27 12:53:17 -04:00
Mariusz Felisiak b06855facd [1.11.x] Fixed #27966 -- Bumped required psycopg2 version to 2.5.4.
Thanks Tim Graham for the review.

Backport of 43380e9110 from master
2017-03-21 17:40:04 +01:00
Tim Graham 5310106ee3 [1.11.x] Fixed #27949 -- Doc'd how OpenLayers 3 widgets work.
Backport of 4224ecb74e from master
2017-03-21 10:51:01 -04:00
Tim Graham 4b57fa3746 [1.11.x] Updated postgis.net and gaia-gis.it links to https.
Backport of 5bd7ffc313 from master
2017-03-16 14:03:52 -04:00
Mariusz Felisiak 9924c8a8b0 [1.11.x] Fixed #27924 -- Added support for cx_Oracle 5.3.
- Fixed Oracle backend due to cx_Oracle 5.3 change in the
Cursor.description behavior i.e. "Use None instead of 0 for items in
the Cursor.description attribute that do not have any validity.".
- Used cx_Oracle.Object.size() instead of len().
Thanks Tim Graham for the review.

Backport of 75503a823f from master
2017-03-10 23:07:50 +01:00
Camilo Nova 33d2c53fb1 [1.11.x] Fixed #27891 -- Added PasswordResetConfirmView.post_reset_login_backend.
Backport of 5db465d5a6 from master
2017-03-07 19:54:23 -05:00
Raphael Merx 89b31b312e [1.11.x] Fixed #27905 – Added RelatedFieldWidgetWrapper.value_omitted_from_data().
Backport of fd75c8f2b7 from master
2017-03-07 13:56:45 -05:00
Tim Graham 679560b7d8 [1.11.x] Added stub release notes for 1.10.7.
Backport of 6c5348b9d2 from master
2017-03-07 13:05:56 -05:00
Adam Johnson 6382a60f28 [1.11.x] Fixed typo in docs/releases/1.10.6.txt.
Backport of c1d652c62f from master
2017-03-01 10:11:51 -05:00
Tim Graham bb049268c6 [1.11.x] Added release date for 1.10.6.
Backport of 4f22505a9f from master
2017-03-01 08:27:46 -05:00
Tim Graham 53f5dc10cd [1.11.x] Refs #25187 -- Fixed AuthBackend.authenticate() compatibility for signatures that accept a request kwarg.
Backport of c31e7ab5a4 from master
2017-02-24 13:59:34 -05:00
Claude Paroz a86ec78fe6 [1.11.x] Completed 1.10.6 release note 2017-02-23 10:27:28 +01:00
Vytis Banaitis d03153e3b0 [1.11.x] Fixed #27856 -- Improved accuracy of date subtraction on PostgreSQL.
Accuracy was incorrect when dates differ by a month or more.

Backport of 4045fd56cb from master
2017-02-21 12:49:31 -05:00
Vytis Banaitis eedf276ed1 [1.11.x] Fixed #27828 -- Fixed a crash when subtracting Integer/DurationField from DateField on Oracle/PostgreSQL.
Backport of d5088f838d from master
2017-02-16 12:35:40 -05:00
amalia b54fff2938 [1.11.x] Fixed #27820 -- Fixed RequestDataTooBig/TooManyFieldsSent crash.
Backport of 2f10216f84 from master
2017-02-13 16:43:23 -05:00
Mads Jensen ded0632d94 [1.11.x] Refs #26610 -- Added CIText mixin and CIChar/Email/TextField.
Backport of fb5bd38e3b from master
2017-02-11 07:16:58 -05:00
Atul Varma 8a60e3d3fd [1.11.x] Fixed typo in docs/releases/1.11.txt.
Backport of 10c47f7b47 from master
2017-02-07 07:50:02 -05:00
Tim Graham 2b17e4770b [1.11.x] Fixed #27805 -- Fixed ClearableFileInput's "Clear" checkbox on model fields with a default.
Backport of 4353640ea9 from master
2017-02-06 20:55:47 -05:00
Tim Graham f01ad1cb6a Refs #27683 -- Allowed setting isolation level in DATABASES ['OPTIONS'] on MySQL. 2017-01-17 11:16:15 -05:00
Markus Holtermann 45ded053b1 Fixed #27666 -- Delayed rendering of recursivly related models in migration operations. 2017-01-17 08:12:52 -05:00
Tim Graham 0f46bc67e2 Fixed #27735 -- Doc'd form widget l10n change (refs #15667). 2017-01-16 12:58:21 -05:00
Tim Graham f2d2f17896 Removed empty sections from 1.11 release notes. 2017-01-16 09:58:26 -05:00
Mads Jensen e585c43be9 Fixed #25809 -- Added BrinIndex support in django.contrib.postgres.
Thanks Tim Graham and Markus Holtermann for review.
2017-01-15 13:37:18 +01:00
Matthew Schinckel 236ebe94bf Fixed #27149 -- Added Subquery and Exists database expressions.
Thanks Josh Smeaton for Oracle fixes.
2017-01-14 09:12:24 -05:00
Florian Apolloner 84c1826ded Fixed #27718 -- Added QuerySet.union(), intersection(), difference().
Thanks Mariusz Felisiak for review and Oracle assistance.
Thanks Tim Graham for review and writing docs.
2017-01-14 08:32:07 -05:00
Romain Garrigues ede59ef6f3 Fixed #27518 -- Prevented possibie password reset token leak via HTTP Referer header.
Thanks Florian Apolloner for contributing to this patch and
Collin Anderson, Markus Holtermann, and Tim Graham for review.
2017-01-13 09:17:54 -05:00
François Freitag f3b7c05936 Refs #16614 -- Made QuerySet.iterator() use server-side cursors on PostgreSQL.
Thanks to Josh Smeaton for the idea of implementing server-side cursors
in PostgreSQL from the iterator method, and Anssi Kääriäinen and Kevin
Turner for their previous work. Also Simon Charette and Tim Graham for
review.
2017-01-11 09:25:37 -05:00
David Sanders 53bffe8d03 Fixed #24452 -- Fixed HashedFilesMixin correctness with nested paths. 2017-01-11 09:21:29 -05:00
Tim Graham 823af53bf6 Fixed #27707 -- Removed shell support for IPython < 1.0. 2017-01-09 12:02:43 -05:00
Sebastian Spiegel 8b734d2f99 Fixed #27432 -- Made app_label arguments limit showmigrations --plan output. 2017-01-06 19:50:31 -05:00
Tim Graham a50926ede2 Added stub release notes for 1.10.6. 2017-01-04 14:33:18 -05:00
Tim Graham 32b3961943 Added release date for 1.10.5. 2017-01-04 13:20:01 -05:00
Tim Graham c85831e4b7 Fixed #27658 -- Prevented collectstatic from overwriting newer files in remote storages.
Thanks revimi for the initial patch.
2017-01-04 12:50:31 -05:00
anabelensc 1c12df4aa6 Fixed #25912 -- Added binary left/right shift operators to F expressions.
Thanks Mariusz Felisiak for review and MySQL advice.
2017-01-03 14:15:46 -05:00
Claude Paroz 2ebfda38e6 Fixed #25004 -- Updated OpenLayers-based widget to OpenLayers 3
Thanks Tim Graham for the review.
2017-01-02 19:45:52 +01:00
vinay karanam 6128c1736d Refs #27637 -- Fixed timesince, timeuntil on New Year's Eve in a leap year. 2017-01-02 08:40:44 -05:00
Tim Graham fae56427e1 Fixed #27649 -- Bumped required cx_Oracle to 5.2.
Removed obsolete workarounds from 1aa4889808
and dcf3be7a62.
2016-12-29 12:45:25 -05:00
Adam Chainz 5eff8a7783 Fixed #25415 -- Made DiscoverRunner run system checks. 2016-12-29 12:33:24 -05:00
Shivang Bharadwaj 6a74950513 Fixed #27258 -- Prohibited django.Template.render() with non-dict context.
Thanks Shivang Bharadwaj for the initial patch.
2016-12-28 16:03:20 -05:00
Preston Timmons b52c73008a Fixed #15667 -- Added template-based widget rendering.
Thanks Carl Meyer and Tim Graham for contributing to the patch.
2016-12-27 17:50:10 -05:00
Tim Graham 51cde873d9 Fixed #27648 -- Deprecated (iLmsu) regex groups in url() patterns. 2016-12-27 15:59:13 -05:00
Tim Graham 4701abd56e Refs #27025 -- Documented Python 3.6 compatibility for Django 1.11. 2016-12-27 12:01:24 -05:00
Mariusz Felisiak 3e5c5e6754 Fixed #27637 -- Fixed timesince, timeuntil in leap year edge case. 2016-12-27 09:29:11 -05:00
Sergey Fedoseev 986c7d522a Fixed #27497 -- Improved support of geodetic coordinates on SpatiaLite.
Area function, Distance function, and distance lookups now work with
geodetic coordinates on SpatiaLite.
2016-12-15 15:31:07 -05:00
Sergey Fedoseev 38a6df555f Fixed #27602 -- Added Oracle support for BoundingCircle GIS function. 2016-12-15 14:16:09 -05:00
Sergey Fedoseev 5a23cc00f5 Fixed #27607 -- Added Oracle support for AsGML GIS function. 2016-12-15 14:00:08 -05:00
David Hoffman bf84d042e0 Fixed #27582 -- Allowed HStoreField to store null values. 2016-12-15 10:35:44 -05:00