innov
/
django1
1
0
Fork 0
Code Issues Pull Requests 1 Projects Releases Wiki Activity
7,454 Commits 25 Branches 361 Tags 501 MiB
Commit Graph

2582 Commits

Author SHA1 Message Date
Luke Plant 5a0aab41ee Allow CsrfResponseMiddleware to be used if templates cannot be updated. 
For the case where someone is using contrib views with custom templates that
they cannot update to use the template tag, it should be possible to use
CsrfResponseMiddleware.  This requires that 'csrf_response_exempt' is not
used for the admin views.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11683 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-30 00:17:29 +00:00
Jannis Leidel 7440fca145 Added bio for myself 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11678 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-28 10:01:16 +00:00
Luke Plant e6f0c10e77 Fixed typo in docs 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11677 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 22:26:54 +00:00
Luke Plant 9dc9770736 Documented the presence of {% csrf_token %} in Django 1.1.2 in trunk docs. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11675 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 21:52:25 +00:00
Luke Plant b32a187296 Fixed some typos 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11668 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 13:13:40 +00:00
Luke Plant f00ad4168e Added explicit notes about the need to update any customised templates for contrib apps for CSRF changes 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11667 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 12:11:56 +00:00
Luke Plant 2ddf1364c4 Added 'version added' info to CSRF_* settings. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11665 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 01:10:20 +00:00
Luke Plant 64b4ab18b4 Use decorator syntax for csrf_exempt example. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11663 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 00:43:16 +00:00
Luke Plant 7230a995ce Moved contrib.csrf.* to core code. 
There is stub code for backwards compatiblity with Django 1.1 imports.

The documentation has been updated, but has been left in
docs/contrib/csrf.txt for now, in order to avoid dead links to
documentation on the website.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11661 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-27 00:36:34 +00:00
Luke Plant 8e70cef9b6 Fixed #9977 - CsrfMiddleware gets template tag added, session dependency removed, and turned on by default. 
This is a large change to CSRF protection for Django.  It includes:

 * removing the dependency on the session framework.
 * deprecating CsrfResponseMiddleware, and replacing with a core template tag.
 * turning on CSRF protection by default by adding CsrfViewMiddleware to
   the default value of MIDDLEWARE_CLASSES.
 * protecting all contrib apps (whatever is in settings.py)
   using a decorator.

For existing users of the CSRF functionality, it should be a seamless update,
but please note that it includes DEPRECATION of features in Django 1.1,
and there are upgrade steps which are detailed in the docs.

Many thanks to 'Glenn' and 'bthomas', who did a lot of the thinking and work
on the patch, and to lots of other people including Simon Willison and
Russell Keith-Magee who refined the ideas.

Details of the rationale for these changes is found here:

http://code.djangoproject.com/wiki/CsrfProtection

As of this commit, the CSRF code is mainly in 'contrib'.  The code will be
moved to core in a separate commit, to make the changeset as readable as
possible.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11660 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-26 23:23:07 +00:00
Luke Plant 92090253fe Fixed small error in deprecation policy. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11652 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-24 14:10:00 +00:00
Luke Plant a02a6fab66 Fixed #9163 - CsrfMiddleware needs to reset ETag header 
Thanks to carljm for report and patch.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@11650 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-24 10:45:58 +00:00
Jacob Kaplan-Moss b79702b2de Fixed #11402: added a `QuerySet.exists()` method. Thanks, Alex Gaynor. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11646 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-24 00:28:39 +00:00
Jacob Kaplan-Moss fa6ca072a3 Clarified faq/install w.r.t. the various Python versions available. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11642 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-23 19:52:15 +00:00
Jacob Kaplan-Moss 7770c70007 Fixed a silly typo left over from removing Python 2.3 references. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11641 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-23 19:43:58 +00:00
Jacob Kaplan-Moss 7098664940 Removed mentions of Python 2.3 support from the docs -- Django 1.2 drops support for Python 2.3 -- and added a quick FAQ about that dropping of support. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11640 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-23 19:30:23 +00:00
Luke Plant c6e8e5d9f0 Fixed non-standard introspection support in LazyObject. 
LazyObject called a public method ``get_all_members`` on wrapped objects in
order to allow introspection.  This could easily cause name clashes with
existing methods on wrapped objects, and so has been changed to use the
standard methods.  This could be slightly backwards-incompatible, in obscure
cases, if the undocumented LazyObject has been used externally.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11636 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-19 21:48:06 +00:00
Russell Keith-Magee f14833ee67 Fixed #11959 -- Updated the tutorial to ensure that the admin site continues to work after URLpatterns are introduced. Thanks to carljm for the report and draft patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11621 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-14 13:38:31 +00:00
Luke Plant c46ddbf1fc Fixed #8274 - allow custom forms for auth 'login' and 'password_change' views 
Thanks to julien for the suggestion and patch, and SmileyChris for work on the patch.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@11618 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-10-12 15:32:24 +00:00
James Bennett ca9d0136df Fixed #11961: Corrected a few typos in docs/testing.txt. Thanks to timo for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11599 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-30 06:40:34 +00:00
Luke Plant 055efb2530 Fixed #9674 - documented app_label. 
Thanks to andymckay for the report and jpaulett for the patch.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@11596 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-28 21:58:21 +00:00
Luke Plant 6e3a72585a Added 'key_prefix' keyword argument to cache_page() 
This was available before r11586, but undocumented.  It has now been
re-added with documentation and explicit support, as it seems like a useful
feature and people were using it before.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11595 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-28 21:54:54 +00:00
James Bennett 4a2a0b0e21 Fixed #11931: Removed mention of nonexistent get_sql() method for arguments to limit_choices_to. Since the correct reference involves undocumented ORM internals, this simply removes the reference entirely in favor of publicly-documented use of Q objects. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11591 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-23 23:40:12 +00:00
James Bennett 724c926b82 The 1.1.X branch has been created, so that needs to be past tense. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11588 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-22 21:20:51 +00:00
Luke Plant f3af2d9883 Fixed some ReST markup in admin installation docs. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11580 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-14 22:49:03 +00:00
Luke Plant 95d5e450ec Fixed counting error in admin installation overview docs. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11579 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-14 22:36:20 +00:00
Russell Keith-Magee dbd6f512ee Corrected spaces for tabs from r11540. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11554 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 06:18:16 +00:00
Russell Keith-Magee f8077919b5 Fixed #11755 -- Added documentation for an edge case of FormSet usage. Thanks to ffualo for the suggestion. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11549 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 03:01:04 +00:00
Russell Keith-Magee 38e78da95e Fixed #11740 -- Added extra detail on the behavior of ModelForms. Thanks to severian for the suggestion. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11548 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 01:35:18 +00:00
Russell Keith-Magee 0e07f80cf4 Fixed #9414 -- Clarified the documentation on the permission decorators. Thanks to timo for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11547 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 01:13:40 +00:00
Russell Keith-Magee d0c6e9cf63 Fixed #11873 -- Corrected typo in generic views docs. Thanks to Brett Cannon for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11546 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 00:25:53 +00:00
Russell Keith-Magee 8b6a2c11e4 Fixed #11073 -- Added documentation for SESSION_COOKIE_PATH. Thanks to liling for the report, and gsong for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11545 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 00:17:35 +00:00
Russell Keith-Magee 7dfd7cb836 Fixed #10864 -- Clarified the role played by redirect_to_field in the login_required auth decorator. Thanks to trigeek38 for the suggestion, and SmileyChris for the draft. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11544 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-13 00:12:26 +00:00
Russell Keith-Magee ec6b9d6e63 Fixed #9236 -- Added documentation on the dependencies of the admin. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11543 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 23:56:45 +00:00
Russell Keith-Magee 27c68216c2 Added the SVN internal docs to the internal docs index. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11542 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 23:37:19 +00:00
Russell Keith-Magee 423b5c1e14 Fixed #6047 -- Minor correction to the documentation regarding regex field lookups. Thanks to Richard D. Worth for the suggestion, and Steve Holden for the text. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11541 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 23:36:00 +00:00
Russell Keith-Magee 7cbc232909 Fixed #11359 -- Added a link to the signals topic guide in the signals reference. Thanks to tyson for the suggestion. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11540 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 23:06:22 +00:00
Russell Keith-Magee 9aef7dd9e7 Fixed #11592 -- Corrected the grammar in the queryset docs. Thanks to Shannon Bradshaw for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11539 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:59:41 +00:00
Russell Keith-Magee 77c64c69cf Fixed #11628 -- Corrected the tutorial, removing instructions to update the year where that isn't required. Thanks to tommstein for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11538 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:57:58 +00:00
Russell Keith-Magee b8b9411ffc Fixed #11659 -- Corrected a minor typo in the v1.1 release notes. Thanks to agabel for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11537 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:52:25 +00:00
Russell Keith-Magee baf7d3e074 Fixed #11728 -- Corrected a typo in a class name in the request/response docs. Thanks to Tommstein for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11536 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:51:16 +00:00
Russell Keith-Magee 94d8da31da Fixed #11780 -- Corrected a typo in the static file serving docs. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11535 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:48:20 +00:00
Russell Keith-Magee 94885bac7b Fixed #11808 -- Corrected typo in admin docs. Thanks to kratorius for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11534 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:44:51 +00:00
Russell Keith-Magee fc7ef1c86c Fixed #11831 -- Corrected typo in comments docs. Thanks to gsf for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11533 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:43:20 +00:00
Russell Keith-Magee 1ed9d29db8 Modified r11531 to use the original suggested text from the patch (which was better). 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11532 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:41:12 +00:00
Russell Keith-Magee 15f3610747 Fixed #11589 -- Corrected an argument in the shortcuts documentation. Thanks to tsaylor for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11531 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-12 22:32:07 +00:00
James Bennett a53601c674 Document the fact that we now put dead branches in the attic. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11523 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-11 21:59:29 +00:00
Luke Plant 8da58e51ff Fixed #11554: Several errors in Generic Views Documentation. 
Thanks Ramiro. 
Refs #11477 - that ticket should have been marked a duplicate of #11554



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11499 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-11 13:46:56 +00:00
Luke Plant 49b9470dca Fixed #11071 - update is_ajax() docs. 
Thanks timo.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@11490 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-10 16:17:56 +00:00
Luke Plant 1387b17026 Fixed #7437: SelectDateWidget is not documented. 
Thanks timo.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@11488 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-09-10 15:45:15 +00:00