django1/django
Florian Apolloner 4b78420d25 Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities.
Thanks to Guido Vranken for initial report.
2019-08-01 09:24:54 +02:00
..
apps Fixed #30159 -- Removed unneeded use of OrderedDict. 2019-02-06 13:48:39 -05:00
bin Reverted "Fixed #27878, refs #23919 -- Used python3 shebangs." 2017-03-07 10:10:32 -05:00
conf Updated translations from Transifex 2019-06-29 16:17:16 +02:00
contrib Fixed #30552 -- Fixed loss of SRID when calling reverse() on LineString/Point. 2019-07-27 20:12:46 +02:00
core Refs #30669 -- Removed incorrect branch in ASGIHander.read_body(). 2019-07-31 13:33:01 +02:00
db Fixed #30665 -- Added support for distinct argument to Avg() and Sum(). 2019-07-31 11:22:50 +02:00
dispatch Capitalized "Python" in docs and comments. 2018-10-09 09:26:07 -04:00
forms Improved error message when index in __getitem__() is invalid. 2019-07-23 20:12:08 +02:00
http Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set. 2019-07-01 07:48:04 +02:00
middleware Removed unnecessary assignments in various code. 2019-04-24 13:09:29 +02:00
template Fixed #27486 -- Fixed Python 3.7 DeprecationWarning in intword and filesizeformat filters. 2019-06-11 20:34:59 +02:00
templatetags Replaced loop with dictionary comprehension. 2018-12-19 17:31:48 -06:00
test Fixed #30451 -- Added ASGI handler and coroutine-safety. 2019-06-20 12:29:43 +02:00
urls Fixed #29744 -- Fixed caching of URLResolver for a default URLconf. 2019-07-03 11:37:28 +02:00
utils Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities. 2019-08-01 09:24:54 +02:00
views Fixed #30411 -- Improved formatting of text tracebacks in technical 500 templates. 2019-07-29 11:09:54 +02:00
__init__.py Bumped version; master is now 3.0 pre-alpha. 2019-01-17 10:50:24 -05:00
__main__.py Fixed #24857 -- Added "python -m django" entry point. 2015-09-07 19:54:32 -04:00
shortcuts.py Refs #25978 -- Removed shortcuts.render_to_response() per deprecation timeline. 2019-01-17 10:50:25 -05:00