a656a68127
Fixed CVE-2018-14574 -- Fixed open redirect possibility in CommonMiddleware.
2018-08-01 09:28:42 -04:00
2ac7cd52b4
Refs #29600 -- Removed datetime_safe usage in feedgenerator.
...
The only effect would be if items in Atom feeds had a published date
year of < 1000 (ensuring those years are padded with leading zeros).
2018-07-26 16:49:15 -04:00
b004bd62e8
Fixed #29412 -- Stopped marking slugify() result as HTML safe.
2018-07-20 10:44:30 -04:00
0adfba968e
Fixed #29578 -- Made numberformat.format() honor forced l10n usage.
...
Thanks Sassan Haradji for the report.
2018-07-19 16:44:40 -04:00
a73cf8110e
Removed duplicate words in various comments.
2018-07-18 11:54:15 -04:00
338f741c5e
Fixed #29546 -- Deprecated django.utils.timezone.FixedOffset.
2018-07-09 16:33:36 -04:00
7d6fe18dde
Simplified force_bytes().
2018-07-09 12:25:55 -04:00
857f860d56
Removed unneded str() calls prior to mark_safe(); simplified mark_safe().
2018-07-09 11:25:11 -04:00
d22b90b4ea
Fixed #29525 -- Allowed is_safe_url()'s allowed_hosts arg to be a string.
2018-06-29 10:17:52 -04:00
2ec151e35d
Fixed #29514 -- Reverted "Used datetime.timezone.utc instead of pytz.utc for better performance."
...
This reverts commit 27ca5ce19f
2018-06-28 11:14:26 -04:00
f434f5b84f
Refs #29253 -- Fixed method_decorator() crash if decorator sets a new attribute.
...
Regression in fdc936c913
2018-06-27 11:46:07 -04:00
b9dd8512f2
Advanced deprecation warnings for Django 2.2.
2018-05-17 11:05:45 -04:00
1e0cbc72e5
Moved to_language() to django.utils.translation.
...
Follow up to 1b7d524cfa
2018-05-12 15:03:38 -04:00
1b7d524cfa
Consolidated duplicate to_locale() implementations.
...
Follow up to ac59ec8f1a
2018-05-12 12:58:21 -04:00
ac59ec8f1a
Aliased trans_null.to_locale() to trans_real.to_locale().
...
The implementations have unintentionally diverged.
2018-05-12 10:54:22 -04:00
9c4ea63e87
Replaced TOKEN_* constants by TokenType enums.
...
Thanks Tim Graham for the review.
2018-05-10 17:51:51 +02:00
78912ccd0e
Fixed #21408 — German Translation for “3 days ago”
...
The problem:
“3 days ago” should translate to “vor 3 Tagen” in German, while “3 days” translates to “3 Tage”. #21408 describes that django always translated to “Tage”, even when the dative “Tagen” was correct. The same applies to months (“Monate”/“Monaten”) and years (“Jahre”/“Jahren”).
The solution:
Let `timesince` caller provide the string dict to use for the time-related strings.
2018-05-10 15:53:33 +02:00
10b44e4525
Fixed #26688 -- Fixed HTTP request logging inconsistencies.
...
* Added logging of 500 responses for instantiated responses.
* Added logging of all 4xx and 5xx responses.
2018-05-04 20:55:03 -04:00
64b74804c5
Fixed #29334 -- Updated pypi.python.org URLs to pypi.org.
2018-04-17 20:24:27 -04:00
fdc936c913
Fixed #29253 -- Made method_decorator(list) copy attributes.
2018-04-16 13:38:37 -04:00
27ca5ce19f
Used datetime.timezone.utc instead of pytz.utc for better performance.
2018-03-20 15:24:16 -04:00
362813d628
Fixed hanging indentation in various code.
2018-03-16 10:54:34 +01:00
97b7dd59bb
Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
...
Thanks James Davis for suggesting the fix.
2018-03-06 08:30:40 -05:00
8618271caa
Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
...
Thanks Florian Apolloner for assisting with the patch.
2018-03-06 08:30:40 -05:00
4ff29a53e6
Refs #17476 -- Removed obsolete simplification of timezone names in cache key generation.
2018-03-03 14:56:39 -05:00
a20aae414e
Fixed #29144 -- Made untranslated strings for territorial language variants use translations from the generic language variant.
2018-03-03 12:08:24 -05:00
074a2f7f58
Refs #28909 -- Simplifed code using unpacking generalizations.
2018-02-26 18:23:31 +01:00
7905815510
Fixed #27449 -- Added django.utils.translation.get_supported_language_variant().
2018-02-23 14:49:00 -05:00
5c4c87e55c
Changed "language-code" to the more commonly used "language code".
2018-02-21 09:31:05 -05:00
e8e0cfa9e5
Fixed #28755 -- Made check_for_language() include apps' locale directories.
2018-02-20 21:34:40 -05:00
968329b5c2
Refs #27795 -- Replaced force_text() calls with str() in django.utils.html.
2018-02-09 16:47:45 -08:00
8c709d79cb
Fixed #17419 -- Added json_tag template filter.
2018-02-07 18:38:12 -05:00
d38a3169a4
Fixed #28977 -- Changed local-memory cache to use LRU culling.
...
LRU culling turns every read into a kind of write to the cache: cache keys
are moved to the first position in the OrderedDict when they are retrieved.
The RWLock which permitted multiple readers while prioritizing a single
writer is obsolete since all accesses are now writes.
2018-01-24 12:26:19 -05:00
ff05de760c
Fixed #29038 -- Removed closing slash from HTML void tags.
2018-01-21 02:09:10 -05:00
a38ae914d8
Fixed #28996 -- Simplified some boolean constructs and removed trivial continue statements.
2018-01-12 12:44:50 -05:00
1e81a4b897
Fixed #28638 -- Made allowed_hosts a required argument of is_safe_url().
2018-01-11 07:03:50 -05:00
acd3baf2ae
Improved readability of utils.datetime_safe._findall().
2018-01-08 14:49:43 -05:00
44c5b239e0
Simplified django.utils.feedgenerator.rfc2822_date().
2018-01-05 10:37:21 -05:00
c794b56811
Simplified django.utils.feedgenerator.rfc3339_date().
2018-01-05 10:36:33 -05:00
d7b2aa24f7
Fixed #28982 -- Simplified code with and/or.
2018-01-03 20:12:23 -05:00
acc8dd4142
Fixed #28984 -- Made assorted code simplifications.
2018-01-03 13:24:02 -05:00
ab7f4c3306
Refs #28965 -- Deprecated unused django.utils.http.cookie_date().
2018-01-02 11:23:04 -05:00
ae6fa914aa
Fixed #28926 -- Fixed loss of precision of big DurationField values on SQLite and MySQL.
2017-12-28 17:35:41 -05:00
4c599ece57
Fixed #28930 -- Simplified code with any() and all().
2017-12-26 17:11:15 -05:00
23b21db31b
Fixed #28594 -- Removed Jython docs and specific code
...
Thanks Andrey Martyanov for the reporti, and Tim Graham for the review.
2017-12-23 10:26:32 +01:00
f3a98224e6
Refs #28909 -- Simplifed code using unpacking generalizations.
2017-12-21 21:05:23 -05:00
d13a9e44de
Fixed #28909 -- Simplified code using tuple/list/set/dict unpacking.
2017-12-11 07:08:45 -05:00
2b81faab25
Fixed #28906 -- Removed unnecessary bool() calls.
2017-12-07 17:13:07 -05:00
c68f66e014
Refs #23919 -- Replaced super() calls for old-style classes.
2017-12-07 09:10:32 -05:00
d2afa5eb23
Fixed #28860 -- Removed unnecessary len() calls.
2017-12-04 10:35:23 -05:00
3d94ee8500
Simplified django.utils.cache.get_max_age().
2017-12-04 08:57:55 -05:00
746caf3ef8
Fixed #28837 -- Fixed test client crash if an exception with more than one arg is raised.
...
Also removed usage of the problematic pattern elsewhere.
Regression in 6e55e1d88a
2017-11-28 18:55:23 -05:00
3af305e8b8
Fixed #28810 -- Replaced '%' style logging formatting with str.format() style.
2017-11-18 19:15:08 -05:00
648957b707
Fixed #28798 -- Removed unused django.utils.dates.WEEKDAYS_REV, MONTHS_3_REV.
2017-11-17 15:37:58 -05:00
c69e4bc691
Fixed #28769 -- Replaced 'x if x else y' with 'x or y'.
2017-11-07 09:08:46 -05:00
278d66b94b
Fixed #28501 -- Fixed "python -m django runserver" crash.
2017-11-06 09:58:15 -05:00
23e551ce6c
Refs #23919 -- Updated references to urllib.quote() to Python 3 location.
2017-10-31 12:05:54 -04:00
d1317edad0
Fixed #28739 -- Fixed get_fixed_timezone() for negative timedeltas.
2017-10-24 21:27:53 -04:00
68407e3545
Refs #14807 -- Removed unneeded mark_safe call
2017-10-22 12:10:27 +02:00
45d5d2dcaa
Removed unnecessary tuple()/list() calls.
2017-10-21 09:42:25 -04:00
f2868f9739
Updated email.Util (Python 2) references to email.utils (Python 3).
2017-10-13 15:36:09 -04:00
941b0a5b33
Fixed #28708 -- Added constants to detect the Python version.
2017-10-13 10:11:15 -04:00
abb636c1af
Improved performance of utils.html.escape().
2017-10-13 09:20:13 -04:00
41be85862d
Fixed #28679 -- Fixed urlencode()'s handling of bytes.
...
Regression in fee42fd99e
2017-10-12 09:08:33 -04:00
f1c007bbf2
Fixed #28642 -- Added caching to parse_accept_lang_header().
2017-10-02 14:07:28 -04:00
3fa0a824c2
Refs #27067 -- Removed string_concat in django.utils.translation.__all__.
...
Undefined since 87d2240e6c
2017-09-29 10:32:32 -04:00
fc6528b25a
Fixed #28629 -- Made tree.Node instances hashable.
...
Regression in 508b5debfb
2017-09-28 12:07:19 -04:00
4508fafe16
Simplified various __eq__() methods.
2017-09-28 09:18:37 -04:00
cfff2af02b
Fixed #27857 -- Dropped support for Python 3.4.
2017-09-25 17:11:03 -04:00
4a461d49c7
Advanced deprecation warnings for Django 2.1.
2017-09-22 12:51:19 -04:00
ba42456c2e
Refs #27648 -- Removed support for (iLmsu) regex groups in url() patterns.
...
Per deprecation timeline.
2017-09-22 12:51:18 -04:00
48d57788ee
Refs #26447 -- Removed the USE_ETAGS setting per deprecation timeline.
2017-09-22 12:51:18 -04:00
96107e2844
Refs #26956 -- Removed the host parameter of django.utils.http.is_safe_url().
...
Per deprecation timeline.
2017-09-22 12:51:18 -04:00
87d2240e6c
Refs #27067 -- Removed django.utils.translation.string_concat() per deprecation timeline.
2017-09-22 12:51:17 -04:00
0ec0e5029c
Removed unnecessary parens in various code.
2017-09-13 21:20:29 -04:00
0c4ac12a7b
Fixed #28546 -- Fixed translation's to_locale() with langauge subtags.
...
Thanks Brent Hand for the initial patch.
2017-09-08 13:46:00 -04:00
22a5b8891c
Removed to_lower parameter for translation's to_locale().
...
Unused since 2bab9d6d9e
2017-09-08 13:12:43 -04:00
6e4c6281db
Reverted "Fixed #27818 -- Replaced try/except/pass with contextlib.suppress()."
...
This reverts commit 550cb3a365
2017-09-07 08:16:21 -04:00
fac74b84a3
Used OrderedDict.fromkeys() to initialize OrderedDict with None values.
2017-08-23 11:40:17 -04:00
59a4b12a23
Refs #23919 -- Removed LazyObject.__getstate__() needed only on Python 2.
2017-07-12 13:14:49 +05:00
493f7e9e1e
Fixed #28076 -- Added support for PostgreSQL's interval format to parse_duration().
2017-07-03 19:53:19 -04:00
550cb3a365
Fixed #27818 -- Replaced try/except/pass with contextlib.suppress().
2017-06-28 14:07:55 -04:00
bdf20c383f
Fixed #28323 -- Removed unneeded normalize() in timezone.localtime() and make_naive().
2017-06-20 07:12:41 -04:00
d0f59054d0
Fixed #28324 -- Made feedgenerators write feeds with deterministically ordered attributes.
2017-06-20 05:38:41 -04:00
ceca221b31
Fixed #28304 -- Kept SafeData type for pgettext-translated strings
2017-06-15 21:00:50 +02:00
08bda82c23
Fixed #27830 -- Used distutils.version.LooseVersion for version parsing.
2017-06-13 10:53:39 -04:00
f6bd00131e
Fixed #28241 -- Allowed module_has_submodule()'s module_name arg to be a dotted path.
2017-06-08 14:34:20 -04:00
2c69824e5a
Refs #23968 -- Removed unnecessary lists, generators, and tuple calls.
2017-06-01 19:08:59 -04:00
21046e7773
Fixed #28249 -- Removed unnecessary dict.keys() calls.
...
iter(dict) is equivalent to iter(dict.keys()).
2017-05-27 19:08:46 -04:00
f0d47ab3b6
Corrected cached_property.__get__() docstring.
2017-05-15 09:25:14 -04:00
f9bae845ea
Added a docstring to cached_property.__get__().
2017-05-15 09:05:42 -04:00
856072dd4a
Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.
2017-05-10 09:02:20 -04:00
620e9dd31a
Replaced django.utils.inspect.getargspec() with inspect.getfullargspec().
2017-04-27 20:42:49 -04:00
a8343fe7bf
Refs #27795 -- Replaced force_text() with str() in feed generators
2017-04-27 09:31:08 +02:00
301de774c2
Refs #27795 -- Replaced many force_text() with str()
...
Thanks Tim Graham for the review.
2017-04-27 09:10:02 +02:00
14671affc3
Fixed #28064 -- Removed double-quoting of key names in MultiValueDictKeyError.
2017-04-11 12:44:52 -04:00
b906c3db63
Removed duplicate lines in slugify().
2017-04-10 08:12:37 -04:00
5d3b322dce
Made MultiValueDict.__deepcopy__()'s memo kwarg an arg.
...
It's always provided.
2017-04-07 09:13:57 -04:00
bde814142a
Fixed #22654 -- Broken decimal validation
2017-04-07 12:45:08 +02:00
5ea48a70af
Fixed #27912 , CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
...
This is a security fix.
2017-04-04 10:42:06 -04:00
8346680e1c
Refs #27795 -- Removed unneeded force_text calls
...
Thanks Tim Graham for the review.
2017-03-04 18:18:21 +01:00
6ae1b04fb5
Fixed #27900 -- Made escapejs escape backticks for use in ES6 template literals.
2017-03-04 09:04:16 -05:00
b6fbf3e8e5
Fixed #27879 -- Fixed crash if enclosures aren't provided to Atom1Feed.add_item().
...
Regression in 75cf9b5ac0
2017-02-24 09:46:31 -05:00
508b5debfb
Refs #11964 -- Made Q objects deconstructible.
2017-02-23 20:47:48 -05:00
9718fa2e8a
Refs #27656 -- Updated django.utils docstring verbs according to PEP 257.
2017-02-11 16:11:08 -05:00
03281d8fe7
Fixed #26005 -- Fixed some percent decoding cases in uri_to_iri().
2017-02-09 09:22:00 -05:00
500532c95d
Refs #23919 -- Removed default 'utf-8' argument for str.encode()/decode().
2017-02-09 09:03:47 -05:00
3a148f958d
Refs #27795 -- Removed force_text from the template layer
...
Thanks Tim Graham for the review.
2017-02-07 17:14:02 +01:00
c651331b34
Converted usage of ugettext* functions to their gettext* aliases
...
Thanks Tim Graham for the review.
2017-02-07 09:04:04 +01:00
2757209c9d
Refs #27795 -- Removed force_text from templatize function
2017-02-06 17:35:03 +01:00
2d899ce16b
Refs #23919 -- Removed a Python 2 code path in force_text().
...
Reverted the obsolete fix and tests for refs #12302 .
2017-02-03 19:38:33 -05:00
26619ad7b0
Removed an untested and broken branch in force_bytes() (refs #6353 ).
...
The new test crashed in the removed branch. It's unclear if the branch has
value since c6a2bd9b96
2017-02-03 19:36:53 -05:00
4ee877a7b0
Used super() in DjangoUnicodeDecodeError.
2017-02-03 19:16:14 -05:00
a21ec12409
Fixed #27803 -- Kept safe status of lazy safe strings in conditional_escape
2017-02-02 21:01:39 +01:00
8838d4dd49
Refs #23919 -- Replaced kwargs.pop() with keyword-only arguments.
2017-02-01 11:41:56 -05:00
84126f2789
Refs #23919 -- Removed unneeded code in force_text().
...
Unneeded since 7b2f2e74ad
2017-01-31 18:31:17 -05:00
ccfd1295f9
Refs #27795 -- Prevented SafeText from losing safe status on str()
...
This will allow to replace force_text() by str() in several places (as one of
the features of force_text is to keep the safe status).
2017-01-30 21:10:32 +01:00
52138b1fd0
Refs #23919 -- Removed usage of obsolete SafeBytes class
...
The class will be removed as part of #27753 .
Thanks Tim Graham for the review.
2017-01-30 15:04:45 +01:00
277a4dd4b4
Fixed #27793 -- Used stdlib's ipaddress module to validate IP addresses
...
Thanks Tim Graham for the review.
2017-01-30 14:22:18 +01:00
e34f4e6f87
Made ugettext* functions aliases of gettext*
...
Thanks Tim Graham for the review.
2017-01-28 12:01:30 +01:00
6478e07a62
Refs #23919 -- Replaced tempfile.mkdtemp() with TemporaryDirectory() context manager.
2017-01-26 13:54:16 -05:00
fee42fd99e
Refs #23919 -- Replaced usage of django.utils.http utilities with Python equivalents
...
Thanks Tim Graham for the review.
2017-01-26 19:49:03 +01:00
d1bab24e01
Refs #23919 , #27778 -- Removed obsolete mentions of unicode.
2017-01-26 08:19:27 -05:00
d6eaf7c018
Refs #23919 -- Replaced super(ClassName, self) with super().
2017-01-25 12:23:46 -05:00
ebf34c3cdc
Removed unused variables that are overwritten.
2017-01-25 09:14:05 -05:00
d2e7d15b4c
Assumed iri_to_uri always returns a string
...
Thanks Tim Graham for the review.
2017-01-23 19:59:33 +01:00
6e55e1d88a
Refs #23919 -- Replaced six.reraise by raise
2017-01-22 20:08:04 +01:00
d170c63351
Refs #23919 -- Removed misc references to Python 2.
2017-01-21 20:02:00 -05:00
c22212220a
Refs #23919 -- Removed re.U and re.UNICODE (default on Python 3).
2017-01-21 14:28:16 -05:00
9e6e32bf5d
Refs #23919 -- Removed django.utils.decorators.available_attrs() usage.
...
It's only needed to workaround a bug on Python 2.
2017-01-21 13:20:17 -05:00
042b7350a0
Refs #23919 -- Removed unneeded str() calls
2017-01-20 14:13:55 +01:00
4e729feaa6
Refs #23919 -- Removed django.utils._os.upath()/npath()/abspathu() usage.
...
These functions do nothing on Python 3.
2017-01-20 08:01:02 -05:00
dc8834cad4
Refs #23919 -- Removed unneeded force_str calls
2017-01-20 08:44:31 +01:00
d29fd3f9a6
Fixed django/utils/http.py comment typo.
2017-01-19 13:21:54 -05:00
d4bb37593e
Refs #23919 -- Removed obsolete compare_digest() and pbkdf2() implementations.
2017-01-19 11:55:23 -05:00
41e0033caf
Refs #23919 -- Removed usage of django.utils.decorators.ContextDecorator.
2017-01-19 11:28:30 -05:00
4c5ed3e683
Refs #23919 -- Removed __nonzero__() methods (for Python 2).
...
Thanks Tim for the review.
2017-01-19 11:26:26 -05:00
cecc079168
Refs #23919 -- Stopped inheriting from object to define new style classes.
2017-01-19 08:39:46 +01:00
eb422e476f
Refs #23919 -- Removed obsolete __ne__() methods.
...
__ne__() defaults to the opposite of __eq__() on Python 3
when it doesn't return NotImplemented.
2017-01-18 21:44:00 -05:00
3cc5f01d9b
Refs #23919 -- Stopped using django.utils.lru_cache().
2017-01-18 21:42:40 -05:00
2b281cc35e
Refs #23919 -- Removed most of remaining six usage
...
Thanks Tim Graham for the review.
2017-01-18 21:33:28 +01:00
7b2f2e74ad
Refs #23919 -- Removed six.<various>_types usage
...
Thanks Tim Graham and Simon Charette for the reviews.
2017-01-18 20:18:46 +01:00
c716fe8782
Refs #23919 -- Removed six.PY2/PY3 usage
...
Thanks Tim Graham for the review.
2017-01-18 16:21:28 +01:00
d7b9aaa366
Refs #23919 -- Removed encoding preambles and future imports
2017-01-18 09:55:19 +01:00
f847308200
Advanced deprecation warnings for Django 2.0.
2017-01-17 20:52:05 -05:00
60ca37d2e5
Refs #24046 -- Removed mark_for_escaping() per deprecation timeline.
2017-01-17 20:52:04 -05:00
eba093e8b0
Refs #25847 -- Removed support for User.is_(anonymous|authenticated) as methods.
...
Per deprecation timeline.
2017-01-17 20:52:03 -05:00
9d304b26cf
Refs #20223 -- Removed deprecated django.utils.functional.allow_lazy().
2017-01-17 20:52:02 -05:00
75cf9b5ac0
Refs #13110 -- Removed SyndicationFeed.add_item()'s enclosure argument.
...
Per deprecation timeline.
2017-01-17 20:52:01 -05:00
c6de8cca20
Refs #24728 - Removed Atom1Feed/RssFeed mime_type attribute.
...
Per deprecation timeline.
2017-01-17 20:52:00 -05:00
Andreas Hug
Tim Graham
Claude Paroz
Mariusz Felisiak
Sergey Fedoseev
Przemysław Suliga
Chris Jerdonek
Hasan Ramezani
Maximilian Merz
Samir Shah
Brett Cannon
Patryk Zawadzki
Sebastian Sangervasi
Chillar Anand
Jon Dufresne
Jonas Haag
Grant Jenks
Дилян Палаузов
Srinivas Reddy Thatiparthy
Nick Pope
Jozef
Nicolas Delaby
Chris Lamb
Дилян Палаузов
Yusuke Miyazaki
Ville Skyttä
medmunds
Mads Jensen
Tom
François Freitag
Matthew Schinckel
Georg Sauthoff
Thomas Khyn
Simon Charette
Adam Alton
UmanShahzad
Alexander Allakhverdiyev
petedmarsh
Daniel F Moisset
Raphael Michel
Pavlo Kapyshin
Ian Foote
Anton Samarchyan
Chronial
Vytis Banaitis
Simon Charette
Aymeric Augustin