Commit Graph

16 Commits

Author SHA1 Message Date
Tim Graham 46e2b9e059 Fixed CVE-2017-12794 -- Fixed XSS possibility in traceback section of technical 500 debug page.
This is a security fix.
2017-09-05 10:58:38 -04:00
Tim Graham 73b6d02747 Added stub release notes for security releases. 2017-09-05 10:58:38 -04:00
ZachLiuGIS 2dacc2ccd9 Fixed #28550 -- Restored contrib.auth's login() and logout() views' respect of positional arguments.
Regression in 78963495d0.

Forwardport of f8e0557b01 from stable/1.11.x
2017-09-03 12:06:44 -04:00
Tim Graham 04050bff30 Refs #26522 -- Forwardported 1.11.5 release note. 2017-09-01 16:41:39 -04:00
Tim Graham e5bd585c6e Fixed #28543 -- Prevented ManyToManyField.value_from_object() from being lazy.
Previously, it was a QuerySet which could reevaluate to a new value if the
model's data changes. This is inconsistent with other Field.value_from_object()
methods.

This allows reverting the fix in the admin for refs #27998.
2017-08-31 09:34:44 -04:00
Tim Graham 11cd46930e Refs #28487 -- Forwardported 1.11.5 release note. 2017-08-31 08:00:47 -04:00
caleb logan 9e2bf65d6a Fixed #28530 -- Prevented SelectDateWidget from localizing years in output. 2017-08-29 14:56:08 -04:00
Mads Jensen fb42d02471 Refs #25809 -- Omitted pages_per_range from BrinIndex.deconstruct() if it's None. 2017-08-26 09:45:45 -04:00
hui shang c0f4c60edd Fixed #28513 -- Added POST request support to LogoutView. 2017-08-24 09:11:16 -04:00
Mariusz Felisiak 939d923e8e
Refs #28498 -- Forwardported 1.11.5 release note. 2017-08-23 10:08:42 +02:00
Mariusz Felisiak 330e965cd8
Fixed typo in docs/releases/1.11.5.txt. 2017-08-23 08:55:25 +02:00
Kevin Grinberg c6a3546093 Fixed #28451 -- Restored pre-Django 1.11 Oracle sequence/trigger naming.
Regression in 69b7d4b116.
2017-08-22 15:51:08 -04:00
Claude Paroz ed77bea582 Refs #28502 -- Complemented stringformat tuple handling/test.
An additional test and a code change were suggested in a late review.
2017-08-22 08:45:08 -04:00
Mariusz Felisiak 6784383e93 Fixed #28498 -- Fixed test database creation with cx_Oracle 6. 2017-08-16 18:39:58 +02:00
Tim Graham 78c155cf2e Fixed #28441 -- Fixed GEOS version parsing with a commit hash at the end. 2017-08-02 09:30:30 -04:00
Tim Graham 53d2534b38 Added stub release notes for 1.11.5. 2017-08-01 08:46:23 -04:00