django1/django/template
Erik Romijn fa350e2f30 Fixed #24464 -- Made built-in HTML template filter functions escape their input by default.
This may cause some backwards compatibility issues, but may also
resolve security issues in third party projects that fail to heed warnings
in our documentation.

Thanks Markus Holtermann for help with tests and docs.
2015-03-09 09:29:58 -04:00
..
backends Deprecated TEMPLATE_DEBUG setting. 2015-02-15 20:47:04 +01:00
loaders Fixed #24399 -- Made filesystem loaders use more specific exceptions. 2015-03-03 21:20:46 +01:00
__init__.py Fixed E265 comment style 2015-02-06 09:30:35 -05:00
base.py Fixed #24372 - Replaced TokenParser usage with traditional parsing. 2015-03-02 18:25:28 -05:00
context.py Removed a non-obvious side-effect of assigning Context.template. 2015-02-20 22:27:48 +01:00
context_processors.py Simplified the lazy CSRF token implementation in csrf context processor. 2015-02-08 15:02:43 -05:00
debug.py Removed unnecessary __init__ definition from DebugLexer. 2015-02-16 19:00:02 +01:00
defaultfilters.py Fixed #24464 -- Made built-in HTML template filter functions escape their input by default. 2015-03-09 09:29:58 -04:00
defaulttags.py Fixed #24451 -- Deprecated comma-separated {% cycle %} syntax. 2015-03-07 07:42:39 -05:00
engine.py Sorted imports with isort; refs #23860. 2015-02-06 08:16:28 -05:00
loader.py Sorted imports with isort; refs #23860. 2015-02-06 08:16:28 -05:00
loader_tags.py Set context.template instead of context.engine while rendering. 2015-02-19 22:08:11 +01:00
response.py Sorted imports with isort; refs #23860. 2015-02-06 08:16:28 -05:00
smartif.py Fixed #23913 -- Deprecated the `=` comparison in `if` template tag. 2015-01-11 15:21:01 -05:00
utils.py Refs #24324 -- Fixed get_app_template_dirs() UnicodeDecodeError on Python 2. 2015-02-17 08:19:58 -05:00