Commit Graph

100 Commits

Author SHA1 Message Date
Russell Keith-Magee 0fcb094557 Fixed #6735 -- Added class-based views.
This patch is the result of the work of many people, over many years.
To try and thank individuals would inevitably lead to many people
being left out or forgotten -- so rather than try to give a list that
will inevitably be incomplete, I'd like to thank *everybody* who
contributed in any way, big or small, with coding, testing, feedback
and/or documentation over the multi-year process of getting this into
trunk.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@14254 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-18 13:34:47 +00:00
Luke Plant 45c7f427ce Fixed #14445 - Use HMAC and constant-time comparison functions where needed.
All adhoc MAC applications have been updated to use HMAC, using SHA1 to
generate unique keys for each application based on the SECRET_KEY, which is
common practice for this situation. In all cases, backwards compatibility
with existing hashes has been maintained, aiming to phase this out as per
the normal deprecation process. In this way, under most normal
circumstances the old hashes will have expired (e.g. by session expiration
etc.) before they become invalid.

In the case of the messages framework and the cookie backend, which was
already using HMAC, there is the possibility of a backwards incompatibility
if the SECRET_KEY is shorter than the default 50 bytes, but the low
likelihood and low impact meant compatibility code was not worth it.

All known instances where tokens/hashes were compared using simple string
equality, which could potentially open timing based attacks, have also been
fixed using a constant-time comparison function.

There are no known practical attacks against the existing implementations,
so these security improvements will not be backported.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@14218 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-14 20:54:30 +00:00
Chris Beaven b37327caae Fix a typo in my bio
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14200 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-13 06:59:45 +00:00
Honza Král 9235d24d3f Added myself to committers
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14176 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-12 01:48:21 +00:00
Gabriel Hurley 2ed554bd92 Fixed #14227 -- Added information about the "easy-pickings" keyword to the contributing docs. Thanks to Russ for the report and cmheisel for the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14154 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-11 21:57:25 +00:00
Russell Keith-Magee 5e319f5194 Refs #12991 -- Added extra docs for the unittest2 changes made in r14139.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14140 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-11 13:18:00 +00:00
Chris Beaven fc4ed4fafd Add myself to committers
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14118 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-10 09:35:06 +00:00
Carl Meyer 501546df6f Fixed #12226 -- Deprecated test client Response.template attribute in favor of templates attribute, which is always a list. Thanks Russell for patch review.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14106 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-10 02:16:33 +00:00
Russell Keith-Magee a904e55859 Fixed #11509 -- Modified usage of "Web" to match our style guide in various documentation, comments and code. Thanks to timo and Simon Meers for the work on the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14069 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09 08:12:50 +00:00
Gabriel Hurley 816c7d1e64 Adding myself to the specialists section (and fixing a typo in Jeremy's bio).
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14056 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09 04:01:37 +00:00
Ramiro Morales 71a4c472ab Added myself to the committers list.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14051 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09 03:16:22 +00:00
Carl Meyer 5b155e2a87 Added myself to contributors.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14047 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-09 01:47:42 +00:00
Andrew Godwin 37023bc0bc Adding my bio. Andrew enjoys writing about himself in the third person.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14039 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08 22:55:46 +00:00
Simon Meers 52f763d935 Added my bio to committers.txt
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14037 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08 22:49:46 +00:00
Alex Gaynor cdc6b0eb98 Correct a rather embarrassing typo in my bio.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14035 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08 21:10:57 +00:00
Alex Gaynor 5c01585450 Added myself to the committers docs.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14034 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08 21:05:39 +00:00
Russell Keith-Magee 127a25ac27 Fixed #14383 -- Corrected the capitalization of reStructuredText. Thanks to timo for the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14017 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-08 15:37:16 +00:00
Adrian Holovaty d405ec9b4d Fixed #14409 -- Fixed typo in docs/internals/documentation.txt. Thanks, kurtmckee
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13991 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-10-06 17:32:25 +00:00
Jacob Kaplan-Moss 136bf00615 Additions to the contributing document explaining our new decision-making process.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13962 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-09-29 17:56:27 +00:00
Russell Keith-Magee f611ffaab3 Fixed #13820 -- Started the deprecation process for mod_python. Thanks to Robert Coup for the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13648 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-28 02:40:57 +00:00
Jacob Kaplan-Moss 728effcfbd Fixed #14141: docs now use the :doc: construct for links between documents.
Thanks, Ramiro Morales.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@13608 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-19 19:27:44 +00:00
Jannis Leidel 806c30cd63 Fixed #14111 -- Updated Sphinx version recommendation in documentation. Thanks, Ramiro Morales and Paul McMillan.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13604 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-18 16:34:50 +00:00
Russell Keith-Magee 7aa7943434 Fixed #13627 -- Added instructions on how to reset your Trac password. Thanks to zerok for the suggestion.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13551 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-08-07 14:55:54 +00:00
Jannis Leidel cd8758ef4d Fixed #14005 - Removed a few unneeded workarounds in the Sphinx extension. Thanks for the report and patch, Ramiro Morales.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13447 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-07-25 20:39:40 +00:00
Russell Keith-Magee 663d17897e Fixed #13497 -- Corrected various typos and markup problems in docs. Thanks to Ramiro Morales for the report and patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13144 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-05-09 04:23:43 +00:00
Russell Keith-Magee 92983a3119 Fixed #12609 -- Updated FAQ on which version users should install. Thanks to shanx for the report.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13109 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-05-06 01:20:11 +00:00
Justin Bronn 33d4aa8df1 Removed duplicated code from `django.contrib.gis.db.backend` and added a deprecation note about the module.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13103 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-05-05 16:06:39 +00:00
Jannis Leidel 77c13844ae Fixed #11068 - Introduced new language code "nb" for Norwegian Bokmål as a replacement of the current "no".
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13047 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-04-29 14:36:09 +00:00
Jannis Leidel b3390fede0 Fixed #13290 - Added a section about minification of admin JavaScript files to the contributing docs. Thanks to Gabriel Hurley for the report and patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12969 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-04-13 10:29:44 +00:00
Luke Plant 520ce1bab3 Fixed #13270 - typos in documentation
Thanks to cmbeelby for the report and patch



git-svn-id: http://code.djangoproject.com/svn/django/trunk@12934 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-04-06 14:18:32 +00:00
Russell Keith-Magee d76fc2c2a0 Fixed #12102 -- Corrected an example in the docs that suggested that you use a relative path in your PYTHONPATH. Thanks to alexkon for the report.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12570 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-02-24 14:50:37 +00:00
Jannis Leidel c8fa110093 Fixed #6298 - Added sample settings file to run the Django test suite (SQLite). Thanks, Eric Holscher.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12547 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-02-23 20:45:50 +00:00
Russell Keith-Magee 156cdcf92d Fixed #12912 -- Placed the psycopg1-backed ``postgresql`` database backend on the deprecation path.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12510 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-02-23 12:24:41 +00:00
Jannis Leidel 8e1a4bd677 Fixed #12910 - Only test extracting translation strings if xgettext can be found on PATH.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12475 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-02-21 23:45:04 +00:00
Jannis Leidel 67d4289c2e Fixed #12066 - Moved auth context processor from core to the auth app. Thanks, Rob Hudson.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12466 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-02-21 23:40:47 +00:00
Jannis Leidel f93f056c32 Fixed #10260 - Refactored internationalization documentation. Thanks, Ramiro Morales.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12440 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-02-16 12:12:53 +00:00
Russell Keith-Magee c4c27d8a04 Fixed #6188, #6304, #6618, #6969, #8758, #8989, #10334, #11069, #11973 and #12403 -- Modified the syndication framework to use class-based views. Thanks to Ben Firshman for his work on this patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12338 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-01-28 13:46:18 +00:00
Luke Plant 8daec78cfd Fixed #12557 - AnonymousUser should check auth backends for permissions
Thanks to hvdklauw for the idea and work on the patch.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@12316 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-01-28 01:47:23 +00:00
Russell Keith-Magee 53b61d9c02 Fixed #12624 -- Modified test runners to be class based.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12255 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2010-01-18 15:11:01 +00:00
Gary Wilson Jr eddb478058 Removed a couple completed TODO items from the documentation documentation.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11996 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-26 06:49:54 +00:00
Gary Wilson Jr adb74a8f2e Fixed several broken and redirecting URLs in the documentation (fixes #12219, refs #12427).
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11994 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-26 06:37:26 +00:00
Jannis Leidel 9233d04265 Fixed #7980 - Improved i18n framework to support locale aware formatting (dates and numbers) and form processing.
Thanks to Marc Garcia for working on this during his Google Summer of Code 2009!

Additionally fixes #1061, #2203, #3940, #5526, #6449, #6231, #6693, #6783, #9366 and #10891.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@11964 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-22 17:58:49 +00:00
Luke Plant 6632739e94 Fixed typo
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11961 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-22 17:40:25 +00:00
Brian Rosner 5e54f6b263 Added missing quote in contributing settings code
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11955 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-22 16:00:49 +00:00
Russell Keith-Magee ff60c5f9de Fixed #1142 -- Added multiple database support.
This monster of a patch is the result of Alex Gaynor's 2009 Google Summer of Code project.
Congratulations to Alex for a job well done.

Big thanks also go to:
 * Justin Bronn for keeping GIS in line with the changes,
 * Karen Tracey and Jani Tiainen for their help testing Oracle support
 * Brett Hoerner, Jon Loyens, and Craig Kimmerer for their feedback.
 * Malcolm Treddinick for his guidance during the GSoC submission process.
 * Simon Willison for driving the original design process
 * Cal Henderson for complaining about ponies he wanted.

... and everyone else too numerous to mention that helped to bring this feature into fruition.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@11952 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-22 15:18:51 +00:00
Russell Keith-Magee 44b9076bbe Fixed #6262 -- Added a cached template loader, and modified existing template loaders and tag to be cacheable. Thanks to Mike Malone for the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11862 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-14 12:08:23 +00:00
Jannis Leidel 9bf652dfd6 Fixed #11010 - Add a foundation for object permissions to authentication backends. Thanks to Florian Apolloner for writing the initial patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11807 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-10 01:05:35 +00:00
Luke Plant 25020ddb05 Fixed #4604 - Configurable message passing system, supporting anonymous users
This deprecates User.message_set in favour of a configurable messaging
system, with backends provided for cookie storage, session storage and
backward compatibility.

Many thanks to Tobias McNulty for the bulk of the work here, with
contributions from Chris Beaven (SmileyChris) and lots of code review from
Russell Keith-Magee, and input from many others.  Also credit to the authors
of various messaging systems for Django whose ideas may have been pinched
:-)



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11804 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-09 16:57:23 +00:00
Luke Plant bb428f3e86 Added section info on top-level use of django.conf.settings to 'contributing' documentation
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11802 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-12-09 12:47:50 +00:00
James Tauber e6b4d1014e added myself to committers list
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11753 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2009-11-19 21:49:31 +00:00