django1/django
Erik Romijn fa350e2f30 Fixed #24464 -- Made built-in HTML template filter functions escape their input by default.
This may cause some backwards compatibility issues, but may also
resolve security issues in third party projects that fail to heed warnings
in our documentation.

Thanks Markus Holtermann for help with tests and docs.
2015-03-09 09:29:58 -04:00
..
apps Fixed #24397 -- Sped up rendering multiple model states. 2015-03-08 13:54:49 +01:00
bin Removed bin/unique-messages.py 2015-02-06 08:47:38 -05:00
conf Fixed #21495 -- Added settings.CSRF_HEADER_NAME 2015-03-05 15:03:40 -05:00
contrib Fixed #23986 -- Fixed collectstatic --clear failure if STATIC_ROOT dir doesn't exist. 2015-03-07 10:47:07 -05:00
core Fixed #23407 -- Extended coverage of makemigrations --noinput option. 2015-03-08 19:44:14 +01:00
db Fixed #24171 -- Fixed failure with complex aggregate query and expressions 2015-03-09 07:49:23 -04:00
dispatch Sorted imports with isort; refs #23860. 2015-02-06 08:16:28 -05:00
forms Fixed #24428 -- Fixed has_changed for fields with coercion 2015-03-05 09:00:13 +01:00
http Fixed #20889 -- Prevented BadHeaderError when Python inserts newline 2015-02-19 20:18:31 +01:00
middleware Fixed #21495 -- Added settings.CSRF_HEADER_NAME 2015-03-05 15:03:40 -05:00
template Fixed #24464 -- Made built-in HTML template filter functions escape their input by default. 2015-03-09 09:29:58 -04:00
templatetags Fixed #24372 - Replaced TokenParser usage with traditional parsing. 2015-03-02 18:25:28 -05:00
test Simplified emit_post_migrate from flush command 2015-02-28 16:10:32 +01:00
utils Fixed #23838 -- added missing `__iter__` to LazyObject 2015-03-08 15:42:23 +01:00
views Fixed #24399 -- Made filesystem loaders use more specific exceptions. 2015-03-03 21:20:46 +01:00
__init__.py Bumped version; master is now 1.9 pre-alpha. 2015-01-16 17:04:35 -05:00
shortcuts.py Sorted imports with isort; refs #23860. 2015-02-06 08:16:28 -05:00