Commit Graph

9175 Commits

Author SHA1 Message Date
Tim Graham 859eeaa0f0 Fixed #26533 -- Renamed Widget._format_value() to format_value(). 2016-04-23 13:15:45 -04:00
Tim Graham a755e0657e Removed unused BaseExpression.refs_aggregate().
Unused since afe0bb7b13.
2016-04-22 13:04:13 -04:00
Tim Graham 87338198e9 Fixed #26320 -- Deprecated implicit OneToOnField parent_link. 2016-04-22 12:59:41 -04:00
Marc Tamlyn 9e4e20a71c Fix typos in PGFTS docs.
Thanks for Simon Willison for the spot.
2016-04-22 16:20:47 +01:00
Markus Holtermann 5e1d45b1ca Updated my bio 2016-04-22 14:00:51 +02:00
Marc Tamlyn 2d877da855 Refs #3254 -- Added full text search to contrib.postgres.
Adds a reasonably feature complete implementation of full text search
using the built in PostgreSQL engine. It uses public APIs from
Expression and Lookup.

With thanks to Tim Graham, Simon Charettes, Josh Smeaton, Mikey Ariel
and many others for their advice and review. Particular thanks also go
to the supporters of the contrib.postgres kickstarter.
2016-04-22 10:44:37 +01:00
Claude Paroz f4c2b8e04a Fixed #20189 -- Allowed customizing staticfiles ignored_patterns list
Thanks Tim Graham for the review.
2016-04-22 09:56:06 +02:00
Jon Dufresne ec6121693f Fixed #22383 -- Added support for HTML5 required attribute on required form fields. 2016-04-21 19:16:38 -04:00
Daniel Wiesmann 65006e0b0b Refs #26455 -- Documented isvalid/makevalid in compatibility table. 2016-04-21 09:13:34 -04:00
Jon Dufresne 38ddd4ab55 Fixed incorrect rendered widget in forms example. 2016-04-20 21:07:59 -04:00
Tobias Kroenke b040ac06eb Fixed #26520 -- Fixed a regression where SessionBase.pop() didn't return a KeyError. 2016-04-20 13:06:47 -04:00
Markus Amalthea Magnuson 08cd6a0e56 Fixed #16327 -- Redirected "Save as new" to change view instead of the changelist. 2016-04-20 11:31:44 -04:00
Matthew Schinckel 5402f3ab09 Fixed #26475 -- Added functools.partial() support to migrations autodetector. 2016-04-19 10:17:11 -04:00
Jon Dufresne 500e5a6886 Fixed #26516 -- Added minlength attribute when forms.CharField.min_length is set. 2016-04-19 08:54:27 -04:00
eltronix f43da05cc5 Fixed typo in docs/topics/class-based-views/mixins.txt 2016-04-18 20:25:54 -04:00
Lukasz Wiecek d3c87a2425 Fixed #26498 -- Fixed TimeField microseconds round-tripping on MySQL and SQLite.
Thanks adamchainz for the report and review.
2016-04-18 09:39:46 -04:00
Tim Graham 2c4c67af94 Fixed #26514 -- Documented that User.refresh_from_db() doesn't clear the permission cache. 2016-04-18 09:02:56 -04:00
eltronix 7ba7d203d8 Fixed typo in docs/ref/template-response.txt. 2016-04-18 07:50:13 -04:00
Claude Paroz 9686c888d6 Fixed #25951 -- Trimmed default representation of GEOSGeometry
Thanks Sergey Fedoseev for the report.
2016-04-17 15:31:12 +02:00
krishbharadwaj e494b9ffb6 Fixed #26509 -- Deprecated the contrib.gis.utils.precision_wkt() function. 2016-04-16 16:47:04 -04:00
Claude Paroz 6c9603277d Updated indentation in GEOS docs 2016-04-16 19:51:00 +02:00
Claude Paroz 10c53385f8 Fixed #26510 -- Allowed dim/trim/precision as WKTWriter init arguments
Thanks Tim Graham for the review.
2016-04-16 19:51:00 +02:00
Katie McLaughlin 393811c67a Updated Windows docs for completeness
- Update installer option for PATH installation
 - Add link directly to pip install docu, ref get-pip.py
 - Add note about installing Django to the virtualenv that was setup in the previous step
2016-04-16 13:06:37 +02:00
Claude Paroz de40cfbe74 Fixed #19567 -- Added JavaScriptCatalog and JSONCatalog class-based views
Thanks Cristiano Coelho and Tim Graham for the reviews.
2016-04-15 17:28:54 +02:00
Tim Graham ad3c72118f Added stub release notes for 1.8.13. 2016-04-13 13:21:20 -04:00
Michal Petrucha c339a5a6f7 Refs #16508 -- Renamed the current "virtual" fields to "private".
The only reason why GenericForeignKey and GenericRelation are stored
separately inside _meta is that they need to be cloned for every model
subclass, but that's not true for any other virtual field. Actually,
it's only true for GenericRelation.
2016-04-13 10:10:53 -04:00
Filipa Andrade 47fbbc33de Fixed #26493 -- Documented how built-in signals are sent. 2016-04-13 07:48:18 -04:00
Claude Paroz 1ee9c5b4a9 Refs #17635 -- Tested the Cast function in a geography to geometry context
Thanks Tim Graham for the review.
2016-04-12 21:14:45 +02:00
Denis Afonso b1b05a017a Fixed #26485 -- Fixed typo in docs/intro/tutorial07. 2016-04-10 14:19:54 -04:00
Jeremy Lainé c1aec0feda Fixed #25847 -- Made User.is_(anonymous|authenticated) properties. 2016-04-09 14:54:18 -04:00
Alasdair Nicol c16b9dd8e0 Fixed #26479 -- Added 'is not' operator to the if tag. 2016-04-09 13:01:15 -04:00
Alasdair Nicol c10db4bd1b Moved docs about chaining if tag comparison operators. 2016-04-09 12:54:59 -04:00
Mounir Messelmeni 03e1cc930c Fixed #26145 -- Made debug context processor return queries for all databases. 2016-04-09 11:47:15 -04:00
Daniel Wiesmann c12a00e554 Fixed #26455 -- Allowed filtering and repairing invalid geometries.
Added the IsValid and MakeValid database functions, and the isvalid lookup,
all for PostGIS.

Thanks Tim Graham for the review.
2016-04-09 09:22:30 -04:00
Tim Graham f6ca63a9f8 Refs #26464 -- Added a link to OWASP Top 10 in security topic guide. 2016-04-09 07:49:40 -04:00
Claude Paroz b2aab09fe9 Fixed #15940 -- Added MySQL note about strict SQL mode 2016-04-08 20:34:27 +02:00
Claude Paroz f9a2a7db17 Fixed #26351 -- Added MySQL check to warn about strict mode option
Thanks Adam Chainz for the initial implementation in django-mysql.
Thanks Adam Chainz, Tim Graham, and Shai Berger for the reviews.
2016-04-08 20:34:16 +02:00
Claude Paroz 0d3c616fbb Refs #26351 -- Added check hook to support database-related checks
Thanks Tim Graham and Shai Berger for the reviews.
2016-04-08 20:28:00 +02:00
Tim Graham 5ac7c8f7ab Refs #22268 -- Fixed typo in docs/ref/models/querysets.txt 2016-04-08 11:43:02 -04:00
Mikkel Munch Mortensen 4bb3ddbcc6 Fixed #26477 -- Fixed typo in docs/ref/contrib/contenttypes.txt 2016-04-07 13:53:30 -04:00
Arnaud Limbourg 5cda4677b3 Fixed #26037 -- Documented precedence of USE_X_FORWARDED_HOST/PORT settings. 2016-04-07 10:09:56 -04:00
Simon Charette a872194802 Fixed #26470 -- Converted auth permission validation to system checks.
Thanks Tim for the review.
2016-04-06 22:40:43 -04:00
Tim Graham 8dcd01046e Removed extra blank lines in last commit. 2016-04-06 12:17:09 -04:00
Tobias Kunze c643b4c9f2 Refs #24016 -- Edited "Migrating data between third-party apps" howto. 2016-04-06 12:09:14 -04:00
Daniel Jilg eed658d7c4 Refs #14131 -- Documented why paginating large QuerySets may be slow. 2016-04-06 11:06:38 -04:00
krishbharadwaj 361cb7a857 Fixed #26448 -- Added details for running tests with a different database backend. 2016-04-05 21:34:26 -04:00
Vaclav Ehrlich 369fa471f4 Fixed #26201 -- Documented the consequences of rotating the CSRF token on login. 2016-04-05 11:02:38 -04:00
Attila Tovt 02ae5fd31a Fixed #25850 -- Made migrate/makemigrations error on inconsistent history. 2016-04-05 08:52:08 -04:00
Tim Graham 15a20dc9af Removed a reference to Django 1.3.1 in docs. 2016-04-04 11:55:34 -04:00
Joshua Pereyda f8b31dfdfc Fixed #26419 -- Added a link in ALLOWED_HOSTS docs. 2016-04-04 11:08:12 -04:00
David Evans 99bb7fcc18 Fixed #26452 -- Loaded middleware on server start rather than on first request. 2016-04-04 10:12:41 -04:00
Markus Amalthea Magnuson 23aa700b78 Fixed #26450 -- Corrected "Save as new" button label in docs. 2016-04-04 08:09:24 -04:00
Sergey Kolosov 21dd98a386 Fixed #25699 -- Allowed using the test client if 'django.contrib.sessions' isn't in INSTALLED_APPS. 2016-04-04 07:48:48 -04:00
rixx b7ea494d65 Fixed #24016 -- Added documentation about third-party app data migrations
There was confusion about how to migrate data from third-party

applications when you are going to uninstall the application later on.

Thanks to Markus, Marten and Sergei for help and review.
2016-04-03 17:20:35 +02:00
anna b28c60529b Fixed #26101 -- Allowed introspection of base_field.model in RangeField
Used the same test and fix as in #25867.
This required initializing base_field in RangeField.__init__,
not when setting the attribute.
2016-04-03 16:32:30 +02:00
bellisk c08ad63a33 Correct number of extra arguments in docs for FilePathField. 2016-04-03 12:38:35 +02:00
Tim Graham d2569f89f2 Fixed #26428 -- Added support for relative path redirects in assertRedirects().
Thanks Trac alias master for the report and review.
2016-04-02 10:35:33 -04:00
Daniel Jilg 55c843f2ef Fixed #14131 -- Added note to docs about Pagination and large Querysets 2016-04-02 16:03:34 +02:00
Iacopo Spalletti 7d485d5d75 Fixed #22268 -- Documented values_list() behavior for multivalued relations.a
Thanks Sai Krishna for the initial patch.
2016-04-02 07:20:11 -04:00
Tim Graham a637ed879d Added stub release notes for 1.9.6. 2016-04-01 14:09:48 -04:00
Tim Graham 93539ba2f4 Added release date for 1.9.5 and 1.8.12. 2016-04-01 13:29:43 -04:00
Claude Paroz db19619545 Fixed #25532 -- Properly redisplayed JSONField form input values
Thanks David Szotten for the report and Tommy Beadle for code inspiration.
Thanks Tim Graham for the review.
2016-04-01 09:04:20 +02:00
Simon Charette 64aba7a8ab Fixed #26438 -- Fixed multiple .objects typos in the docs.
Thanks Pablo Oubiña for the report.
2016-03-31 18:27:47 -04:00
Tim Graham 8928823b13 Fixed #26436 -- Added a link to the settings filtering in the error reporting howto.
Thanks mlissner for the suggestion.
2016-03-31 13:41:06 -04:00
Tim Graham 12dee89d9c Removed some docs that should have been removed along with PROFANITIES_LIST. 2016-03-31 13:21:32 -04:00
Tim Graham a65fc6df89 Fixed #26410 -- Added a docs example for loader.render_to_string(). 2016-03-31 08:31:55 -04:00
Akshesh 49f95cc0a0 Fixed #11560 -- Allowed proxy model multiple-inheritance from the same concrete base model. 2016-03-30 13:06:27 -04:00
Krzysztof Jurewicz 940b7fd5cb Fixed #21446 -- Allowed not performing redirect in set_language view
Thanks Claude Paroz and Tim Graham for polishing the patch.
2016-03-29 22:15:14 +02:00
Alex Hill 4b2cf1cd27 Fixed #26384 -- Fixed renaming the PK on a model with a self-referential FK on SQLite. 2016-03-29 13:25:09 -04:00
Daniel Wiesmann 870dd1d38b Fixed #26417 -- Allowed setting GDALBand data with partial values. 2016-03-29 11:08:36 -04:00
Claude Paroz 03b6947728 Fixed #24932 -- Added Cast database function.
Thanks Ian Foote for the initial patch.
2016-03-29 08:14:33 -04:00
Kai Feldhoff 5336158990 Fixed #25759 -- Added keyword arguments to customize Expressions' as_sql(). 2016-03-29 08:09:58 -04:00
Daniel Wiesmann f1db8c36e9 Fixed #26415 -- Allowed deleting nodata value on GDALBands. 2016-03-29 08:06:31 -04:00
Simon Charette 67cf5efa31 Fixed #26413 -- Fixed a regression with abstract model inheritance and explicit parent links.
Thanks Trac alias trkjgrdg for the report and Tim for investigation and review.
2016-03-28 21:11:37 -04:00
Joshua Pereyda 0c0e8f0a62 Fixed #26416 -- Fixed references to previous tutorial numbers in docs/intro/reusable-apps.txt. 2016-03-28 18:30:30 -04:00
Francisco Capdevila 82243e5150 Fixed typo in docs/ref/contrib/postgres/aggregates.txt. 2016-03-28 09:19:21 -04:00
Aymeric Augustin 7b1ce7fd91 Fixed #26408 -- Updated link to DEP 182.
Thanks kaifeldhoff for the report.
2016-03-25 20:49:18 +01:00
Tim Graham acfaec3db5 Fixed #26387 -- Restored the functionality of the admin's raw_id_fields in list_editable. 2016-03-25 13:47:42 -04:00
Tim Shaffer 8550566af6 Fixed typo in docs/topics/db/aggregation.txt. 2016-03-25 13:38:16 -04:00
ieatkittens 9390da7fb6 Fixed #26293 -- Fixed CommonMiddleware to process PREPEND_WWW and APPEND_SLASH independently. 2016-03-23 09:23:19 -04:00
Alexander Gaevsky 107165c4b0 Fixed #24987 -- Allowed inactive users to login with the test client. 2016-03-23 09:01:52 -04:00
Alexander Gaevsky e0a3d93730 Fixed #25232 -- Made ModelBackend/RemoteUserBackend reject inactive users. 2016-03-23 09:01:48 -04:00
Berker Peksag 157d7f1f1d Fixed #25388 -- Added an option to allow disabling of migrations during test database creation 2016-03-23 08:21:30 +08:00
Kai Feldhoff 5ca08f7cab Refs #25759 -- Documented customizing expressions' SQL on other databases. 2016-03-21 20:20:29 -04:00
Tim Graham c41737dc00 Fixed #26392 -- Corrected login_required/permission_required stacking example. 2016-03-21 19:56:15 -04:00
Vincenzo Pandolfo abf07355aa Fixed #26365 -- Added a system check to ensure "string_is_invalid" is a string. 2016-03-21 13:01:38 -04:00
Akshesh 2b31f14d89 Fixed grammatical typos in gis docs. 2016-03-21 11:14:04 -04:00
Tim Graham 6dd503851c Fixed #26376 -- Clarifed meaning of 'search' in TemplateResponseMixin.get_template_names() docs. 2016-03-21 08:09:13 -04:00
Tim Graham 53e8ab580f Fixed #26265 -- Clarified RadioSelect container's HTML id. 2016-03-19 18:01:10 -04:00
Jason Parrott 4c1c93032f Fixed #26373 -- Fixed reverse lookup crash with a ForeignKey to_field in a subquery. 2016-03-19 17:54:29 -04:00
Amine 8b5a4fa941 Fixed a broken link in docs/internals/contributing/writing-documentation.txt. 2016-03-19 16:19:01 -04:00
Claude Paroz 983c158da7 Refs #24227 -- Replaced M2M isinstance checks by field.many_to_many
Thanks Markus Holtermann, Collin Anderson and Tim Graham for the reviews.
2016-03-19 09:24:27 +01:00
Tim Graham 1d0abeaf75 Fixed #26375 -- Used a more generic name in a reusable template example. 2016-03-18 11:37:20 -04:00
José Tomás Tocino 39a16dd2e0 Fixed #25658 -- Allowed inspectdb to inspect a specific set of tables. 2016-03-18 08:41:15 -04:00
Berker Peksag 28bcff82c5 Fixed #26297 -- Fixed `collectstatic --clear` crash if storage doesn't implement path(). 2016-03-17 09:49:57 -04:00
Alex Hill ecb59cc657 Fixed #26306 -- Fixed memory leak in cached template loader. 2016-03-16 12:37:57 -04:00
Tim Graham 460dab0b40 Removed obsolete section on "Improving the documentation". 2016-03-15 19:05:54 -04:00
Andrew Abraham f2d9caa625 Fixed DiscoverRunner failfast parameter default in docs. 2016-03-15 18:33:35 -04:00
Akshesh 44c0ecdd92 Fixed #25364 -- Added generic way to test on all browsers supported by selenium.
Browser names should be passed as a comma separated list to the --selenium flag.

Thanks Tim Graham, Simon Charette and Moritz Sichert for review and discussion.
2016-03-15 13:10:32 -04:00
Collin Anderson 93a135d111 Fixed #26158 -- Rewrote http.parse_cookie() to better match browsers. 2016-03-15 12:24:06 -04:00
Duane Hilton f8b23e52e8 Fixed #26290 -- Documented that a QuerySet for pagination should be ordered. 2016-03-15 10:13:47 -04:00
Markus Holtermann 1cb65b8a77 Fixed #26157 #25321 -- Added sql/params to extra context of schema logger
Thanks Akshesh Doshi for the initial patch and Tim Graham for the review
2016-03-15 17:45:58 +11:00
Vincenzo Pandolfo d0fe6c9156 Fixed #26334 -- Removed whitespace stripping from contrib.auth password fields. 2016-03-14 20:20:24 -04:00
Moritz Sichert 6aef986cdb Fixed #25804 -- Documented additions to Jinja2 context. 2016-03-14 08:42:55 -04:00
Tim Graham 5695c142d2 Fixed #26294 -- Clarified call_command()'s handling of args and options. 2016-03-14 08:10:17 -04:00
Jakub Wilk 402da9ab7b Fixed typos in docs. 2016-03-13 19:48:24 +01:00
Tim Graham b3610f38fa Fixed #26345 -- Clarified which RangesFields always return a canonical form. 2016-03-12 12:54:16 -05:00
Duane Hilton ca5c05ddbe Fixed #26239 -- Added a note about how auto_now works with QuerySet.update(). 2016-03-12 12:39:00 -05:00
Tim Graham 4f0cd0fd16 Fixed #26324 -- Fixed DurationField with fractional seconds on SQLite. 2016-03-10 12:18:29 -05:00
Tim Graham 4323676ea5 Fixed #26255 -- Fixed orphaned include() reference following tutorial reordering. 2016-03-09 12:18:21 -05:00
Tim Graham 602a38d87e Fixed #26339 -- Updated Question.was_published_recently() in tutorial 7 to reflect changes in tutorial 5. 2016-03-09 11:21:33 -05:00
Tim Graham a496d10a8c Wrapped some lines and added links to docs/ref/contrib/sitemaps.txt. 2016-03-09 10:00:27 -05:00
girish ramnani 593ecfe135 Fixed #26302 -- Removed incorrect statement about virtual hosts. 2016-03-09 09:00:58 -05:00
Tim Osborn 8fb3a2877b Fixed indenting in "Serving files in development" code example 2016-03-09 14:55:55 +11:00
Claude Paroz c5fda55edc Fixed #26256 -- Added note about primary key serialization
Thanks Sonu kumar for the report and Tim Graham for the review.
2016-03-08 21:30:23 +01:00
Przemysław Suliga 96ec67a7cf Fixed #26332 -- Fixed a race condition in BaseCache.get_or_set(). 2016-03-08 11:44:37 -05:00
Bas Westerbaan b4250ea04a Fixed #26033 -- Added Argon2 password hasher. 2016-03-08 11:22:18 -05:00
Saúl Ibarra Corretgé 6c33e73333 Fixed #26289 -- Enabled shell tab completion on systems using libedit. 2016-03-08 08:37:14 -05:00
Krzysztof Urbaniak 839a955d08 Fixed #25933 -- Allowed an unprefixed default language in i18n_patterns(). 2016-03-08 08:14:10 -05:00
John-Mark Bell 4b129ac81f Fixed #26325 -- Made MultiPartParser ignore filenames that normalize to an empty string. 2016-03-07 13:19:39 -05:00
Michal Petrucha 2109975e90 Refs #26217 -- Fixed typo in docs/ref/class-based-views/generic-date-based.txt. 2016-03-05 19:40:33 -05:00
Jon Dufresne 1845bc1d10 Refs #26315 -- Cleaned up argparse options in commands.
* Removed type coercion. Options created by argparse are already coerced
  to the correct type.
* Removed fallback default values. Options created by argparse already
  have a default value.
* Used direct indexing. Options created by argparse are always set. This
  eliminates the need to use dict.get().
2016-03-05 13:19:29 -05:00
Jon Dufresne 4115288b4f Fixed #26315 -- Allowed call_command() to accept a Command object as the first argument. 2016-03-05 13:05:10 -05:00
Tim Graham 9ed4a788aa Refs #26312 -- Reworded tutorial 2 to avoid spelling "error". 2016-03-05 10:58:45 -05:00
Tim Graham bc0410d98a Fixed typo in docs/releases/1.8.12.txt. 2016-03-05 10:02:29 -05:00
Tim Graham c960af4adb Added stub release notes for 1.9.5/1.8.12. 2016-03-05 10:00:40 -05:00
Bob McDonald b388c294eb Fixed #26312 -- Documented "create database" requirement in tutorial 2. 2016-03-05 09:09:00 -05:00
Tim Graham e19fc9f08a Removed claim that you can use different database backends for Django's tests.
Such as a setup isn't tested through continuous integration and therefore
isn't likely to work reliably.
2016-03-05 08:42:18 -05:00
Claude Paroz 552f03869e Added safety to URL decoding in is_safe_url() on Python 2
The errors='replace' parameter to force_text altered the URL before checking
it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.
2016-03-04 23:33:35 +01:00
Claude Paroz ada7a4aefb Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()
This fixes a regression introduced by c5544d2892.
Thanks John Eskew for the reporti and Tim Graham for the review.
2016-03-04 21:14:14 +01:00
Tim Graham cecbf1bdef Fixed typo in docs/releases/1.9.1.txt. 2016-03-04 14:16:56 -05:00
Tim Graham 2f0c785a4c Added stub release notes for 1.8.11. 2016-03-04 09:47:43 -05:00
Tim Graham de8a11ba18 Fixed #26321 -- Added missing "for_save" parameter in expressions example.
Thanks tomaszn for the patch.
2016-03-03 19:36:03 -05:00
Tim Graham c0181f2c1f Fixed #26310 -- Documented that a queryset ordering must be specified to ensure ordered results.
Thanks Simon Charette for review.
2016-03-03 17:54:07 -05:00
Simon Charette d0451e4cad Fixed #26295 -- Allowed using i18n_patterns() in any root URLconf.
Thanks Tim for the review.
2016-03-03 12:08:49 -05:00
Alasdair Nicol 2404d209a5 Fixed #26309 -- Documented that login URL settings no longer support dotted paths. 2016-03-03 07:34:14 -05:00
Simon Charette c92123cc1d Fixed #26226 -- Made related managers honor the queryset used for prefetching their results.
Thanks Loïc for the suggested improvements and Tim for the review.
2016-03-02 16:10:18 -05:00
Tim Graham 1d17bb4f7d Refs #19527 -- Fixed typo in docs/ref/models/querysets.txt. 2016-03-02 15:54:46 -05:00
Marc Tamlyn 8ddc79a799 Fixed #26285 -- Deprecated the MySQL-specific __search lookup. 2016-03-02 14:41:56 -05:00
acrefoot 04240b2365 Refs #19527 -- Allowed QuerySet.bulk_create() to set the primary key of its objects.
PostgreSQL support only.

Thanks Vladislav Manchev and alesasnouski for working on the patch.
2016-03-02 14:29:09 -05:00
Dmitry Dygalo 5155c2b458 Fixed typo in 1.9.3/1.8.10 release date. 2016-03-02 07:08:36 -05:00
Alasdair Nicol 8c42cf0cbd Fixed #26303 -- Updated links to mod_wsgi docs. 2016-03-01 19:22:32 -05:00
Tim Graham 33db899a21 Fixed #25814 -- Added changing #django topic to release checklist. 2016-03-01 13:02:03 -05:00
Tim Graham 2e895d2870 Added stub release notes for 1.9.4. 2016-03-01 12:39:01 -05:00
Tim Graham 24fc935218 Added CVE-2016-2512/2513 to security release archive. 2016-03-01 12:32:42 -05:00
Florian Apolloner 67b46ba701 Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login.
This is a security fix.
2016-03-01 11:25:28 -05:00
Mark Striemer c5544d2892 Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth.
This is a security fix.
2016-03-01 11:25:28 -05:00
Tim Graham f43291639b Added stub release notes for security issues. 2016-03-01 11:25:28 -05:00
Michal Petrucha fe8ea3ba3b Fixed #26217 -- Added a warning about format strings to WeekArchiveView docs. 2016-03-01 10:29:52 -05:00
acemaster a1b1688c7d Fixed #26165 -- Added some FAQs about CSRF protection.
Thanks Florian Apolloner and Shai Berger for review.
2016-03-01 08:45:05 -05:00