django1/django
Simon Charette 6c3dfba892 Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation.
This was a regression introduced by 7deeabc7c7
to address CVE-2019-14234.

Thanks Tim Kleinschmidt for the report and Mariusz for the tests.
2019-09-16 08:24:40 +02:00
..
apps Fixed #30159 -- Removed unneeded use of OrderedDict. 2019-02-06 13:48:39 -05:00
bin Reverted "Fixed #27878, refs #23919 -- Used python3 shebangs." 2017-03-07 10:10:32 -05:00
conf Refs #29817 -- Removed settings.FILE_CHARSET per deprecation timeline. 2019-09-10 12:01:00 +02:00
contrib Fixed #30769 -- Fixed a crash when filtering against a subquery JSON/HStoreField annotation. 2019-09-16 08:24:40 +02:00
core Refs #29703 -- Removed QuerySetPaginator alias per deprecation timeline. 2019-09-10 12:01:00 +02:00
db Fixed #30591 -- Fixed recreation of foreign key constraints on MySQL when altering type of referenced unique field. 2019-09-11 11:21:08 +02:00
dispatch Capitalized "Python" in docs and comments. 2018-10-09 09:26:07 -04:00
forms Improved error message when index in __getitem__() is invalid. 2019-07-23 20:12:08 +02:00
http Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set. 2019-07-01 07:48:04 +02:00
middleware Fixed #29406 -- Added support for Referrer-Policy header. 2019-09-09 13:35:41 +02:00
template Refs #29817 -- Removed settings.FILE_CHARSET per deprecation timeline. 2019-09-10 12:01:00 +02:00
templatetags Replaced loop with dictionary comprehension. 2018-12-19 17:31:48 -06:00
test Refs #28478 -- Removed support for TestCase's allow_database_queries and multi_db per deprecation timeline. 2019-09-10 12:01:00 +02:00
urls Fixed #29667 -- Prohibited whitespaces in path() URLs. 2019-08-20 11:53:10 +02:00
utils Advanced deprecation warnings for Django 3.1. 2019-09-10 12:01:00 +02:00
views Fixed #30747 -- Renamed is_safe_url() to url_has_allowed_host_and_scheme(). 2019-09-02 15:32:23 +02:00
__init__.py Bumped version; master is now 3.1 pre-alpha. 2019-09-10 11:54:25 +02:00
__main__.py Fixed #24857 -- Added "python -m django" entry point. 2015-09-07 19:54:32 -04:00
shortcuts.py Refs #25978 -- Removed shortcuts.render_to_response() per deprecation timeline. 2019-01-17 10:50:25 -05:00