django1/django
Simon Charette 7806e45454 [2.2.x] Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation.
This was a regression introduced by 7deeabc7c7
to address CVE-2019-14234.

Thanks Tim Kleinschmidt for the report and Mariusz for the tests.

Backport of 6c3dfba892 from master
2019-09-16 08:53:31 +02:00
..
apps Fixed #27685 -- Added watchman support to the autoreloader. 2019-01-13 20:33:47 -05:00
bin Reverted "Fixed #27878, refs #23919 -- Used python3 shebangs." 2017-03-07 10:10:32 -05:00
conf [2.2.x] Updated translations from Transifex 2019-06-29 16:15:53 +02:00
contrib [2.2.x] Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation. 2019-09-16 08:53:31 +02:00
core [2.2.x] Fixed #30673 -- Relaxed system check for db_table collision when database routers are installed by turning the error into a warning. 2019-08-08 21:40:06 +02:00
db [2.2.x] Fixed #30754 -- Prevented inclusion of aliases in partial index conditions. 2019-09-10 10:04:12 +02:00
dispatch Capitalized "Python" in docs and comments. 2018-10-09 09:26:07 -04:00
forms [2.2.x] Fixed #30179 -- Fixed form Media merging when pairwise merging is insufficient. 2019-02-27 17:16:58 -05:00
http [2.2.x] Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set. 2019-07-01 07:50:48 +02:00
middleware Capitalized SecurityMiddleware headers for consistency with other headers. 2018-10-30 18:30:51 -04:00
template [2.2.x] Refs #20122 -- Corrected documentation of pluralize template filter. 2019-05-03 11:53:56 +02:00
templatetags Replaced loop with dictionary comprehension. 2018-12-19 17:31:48 -06:00
test [2.2.x] Fixed #30171 -- Fixed DatabaseError in servers tests. 2019-02-14 10:05:13 -05:00
urls [2.2.x] Fixed #30500 -- Fixed race condition in loading URLconf module. 2019-08-27 20:09:30 +02:00
utils [2.2.x] Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri(). 2019-07-29 11:06:54 +02:00
views [2.2.x] Fixed #30324 -- Forced utf-8 encoding when loading the template for the technical 500 debug page. 2019-04-05 16:37:22 +02:00
__init__.py [2.2.x] Post-release version bump. 2019-09-02 09:04:02 +02:00
__main__.py Fixed #24857 -- Added "python -m django" entry point. 2015-09-07 19:54:32 -04:00
shortcuts.py Added missing word to render_to_response deprecation warning. 2018-05-16 10:06:36 +02:00