Commit Graph

11883 Commits

Author SHA1 Message Date
Florian Apolloner c14f325c4e [1.4.x] Fixed second security issue in image uploading. Disclosure and release forthcoming.
Backport of b1d4634686 from master.
2012-07-30 22:00:17 +02:00
Florian Apolloner da33d67181 [1.4.x] Fixed a security issue in image uploading. Disclosure and release forthcoming.
Backport of dd16b17099 from master.
2012-07-30 22:00:17 +02:00
Tim Graham 94e91f75b9 [1.4.X] Fixed #18656 -- Fixed LocaleMiddleware link; thanks mitar for the report.
Backport of 07d70e9b26 from master
2012-07-28 13:33:19 -04:00
Florian Apolloner 498bf5c26c Merge pull request #212 from kevinlondon/ticket_18614_1_4
[1.4] Ticket 18614 -- Add Imports and change render_to_response to render
2012-07-25 13:33:33 -07:00
Ramiro Morales c2ff027861 [1.4.x] Made LiveServerTestCase to restore state on exit.
The piece of state is DB connections' allow_thread_sharing attribute
which gets munged when test are run when in-memory SQLite databases.

Thanks Anssi for suggesting the possible root cause and Julien for
implementing the fix.

Backport of ea667ee3ae from master.
2012-07-22 11:06:16 -03:00
Kevin London c6d06a9453 [1.4.x] Fixed #18614 -- Added imports and changed render_to_response to render. 2012-07-15 21:29:13 -07:00
Tim Graham 8ba78a0daf [1.4.X] Fixed #18577 - Clarified middleware initialization.
Thanks Lukasz Balcerzak for the patch.

Backport of 590de18add from master
2012-07-08 19:30:11 -04:00
Tim Graham dcede04715 [1.4.x] Fixed #18173 - Corrected ModelAdmin documentation for get_changelist.
Thanks Keryn Knight for the report and vanessagomes for the pckport of [d44aa98] from master.atch.

Backport of [d44aa98] from master.
2012-07-08 18:38:52 -04:00
Julien Phalip 9a2ca4266a [1.4.x] Fixed #17978 -- Fixed a minor layout issue when an inline contains a filter horizontal widget. Thanks to Aymeric Augustin for the report. 2012-07-07 15:44:26 -07:00
Claude Paroz fd88fe657b [1.4.x] Fixed #18164 -- Precised startapp template context content
Backport of 249c445446 from master.
2012-07-07 23:12:02 +02:00
Aymeric Augustin f1e416566a [1.4x] Fixed #18587 -- Typo in management command example
Thanks Frank Wiles.

Backport of 29ca3d3c4b from master.
2012-07-07 16:02:45 +02:00
Tim Graham f5db3bddb3 [1.4.X] Fixed #17997 - Documented that the debug server is now multithreaded by default.
Thanks trey.smith@ for the report and vanessagomes for the patch.

Backport of e4a1407a9c from master
2012-07-05 08:40:20 -04:00
Tim Graham c5e35afbcc [1.4.X] Fixed #17436 - Added warning about overriding Model.__init__()
Thanks zsiciarz for the draft patch.

Backport of 7313468f85 from master
2012-07-01 18:06:33 -04:00
Tim Graham 8bea1a7e4e [1.4.X] Fixed #16882 - Clarified why one should not use 'init_command' after initial database creation.
Backport of 9974069620 from master
2012-07-01 07:26:53 -04:00
Tim Graham 32bd77d392 [1.4.X] Fixed #18493 - Added instructions to locate the Django source files to the t
Thanks Claude Paroz for the draft patch.

Backport of c68f4c514c from master
2012-07-01 06:56:20 -04:00
Tim Graham fea5e0b80f [1.4.X] Fixed #17705 - Updated TabularInline image and doc in tutorial 2.
Thanks xbito for the draft patch.

Backport of c5fb8299ef from master
2012-06-30 18:21:50 -04:00
Raúl Cumplido 342e8a6246 [1.4.X] Fixed #18145 -- Improved documentation of unique_together type fields
Backport of 55ffcf8e7b from master
2012-06-30 17:24:26 -04:00
Tim Graham a89e76d151 [1.4.X] Fixed #17168 - Noted TransactionMiddleware only works with "default" database alias.
Thanks codeinthehole for the draft patch.

Backport of 5d81ad1af1 from master
2012-06-30 10:30:45 -04:00
Claude Paroz d92c38a281 [1.4.x] Fixed #18528 -- Fixed custom field value_to_string example
Thanks anuraguniyal for the report.
2012-06-29 15:11:13 +02:00
Tim Graham 9014b138e6 [1.4.X] Fixed #17511 - Removed reference to deprecated "reset" management command in FAQ; thanks voxpuibr@ for the report.
Backport of c8928b91b5 from master
2012-06-27 18:56:04 -04:00
Tim Graham 3631a028e2 [1.4.X] Fixed #18369 - Fixed argument name in render() function; thanks qsolo825@ for the report.
Backport of 1cf8287e3a from master
2012-06-27 18:43:14 -04:00
Luke Plant ff6ee5f06c [1.4.x] Added more explicit warnings about unconfigured reStructured Text usage in docs.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17915 bcc190cf-cafb-0310-a4f2-bffc1f526a37

Backport of 718f149b from master
2012-06-08 15:02:15 +01:00
Jacob Kaplan-Moss 45d43317b7 [1.4.X] Replaced documentation snippets using "gender" with less sensitive examples.
Backport of [7edf231] from master.
2012-06-06 13:55:09 +02:00
Luke Plant 0a8a6b92b2 [1.4.x] Noted that SECURE_PROXY_SSL_HEADER is needed by CSRF protection.
Both false positives and false negatives of HttpRequest.is_secure can be
dangerous.

Backport of 840ffd80ba from master
2012-06-04 21:49:42 +01:00
Luke Plant 3bd937aec2 [1.4.x] Rewrote security.txt SSL docs, noting SECURE_PROXY_SSL_HEADER.
Backport of 0199bdc0b from master
2012-06-04 21:46:37 +01:00
Karen Tracey 03f1d69f1e Merge pull request #109 from apollo13/fix4d2fdd
Fix test error.
2012-06-04 04:31:28 -07:00
Florian Apolloner 1c13cc023f [1.4.x] readd imports deleted in 4d2fdd 2012-06-04 13:24:05 +02:00
Julien Phalip 4d2fdd4185 [1.4.X] Fixed #18379 -- Made the sensitive_variables decorator work with object methods. 2012-06-03 23:59:01 -07:00
Michael Newman 0f69a16785 [1.4.x] Fixed #18135 -- Close connection used for db version checking
On MySQL when checking the server version, a new connection could be
created but never closed. This could result in open connections on
server startup.

Backport of 4423757c0c.
2012-05-27 21:51:03 +03:00
Adrian Holovaty d3fa8d92ea [1.4.x] Updated docs/intro/whatsnext.txt to reference Git instead of SVN 2012-05-16 23:19:09 +02:00
Claude Paroz 6bb85d98b0 [1.4.x] Fixed #18019 -- Use threaded runserver only when database supports it. 2012-05-15 09:23:52 +02:00
Claude Paroz 589af4971e [1.4.x] Fixed #18301 -- Fixed url name in password reset example.
Thanks nicknnn for the report.
2012-05-11 20:19:32 +02:00
Jannis Leidel 35423f6fb1 [1.4.X] Set the post process cache when finished instead of one by one.
This should prevent a race condition if running collectstatic is
canceled or its cache is accessed from other processes, leaving the
cache in a corrupt state.
2012-05-10 18:30:46 +02:00
Claude Paroz ffe620f203 Fixed #18270 -- Corrected variable name in password reset example.
Thanks schnippi for the report.
Backport of ec5423df05 from master.
2012-05-10 08:40:39 +02:00
Aymeric Augustin a3c8201b77 [1.4.x] Fixed #17976 -- Made forms.BooleanField pickleable.
Backport of 9350d1d59c from master.

This was a regression in Django 1.4.
Thanks bronger for the report and claudep for the patch.
2012-05-08 23:20:05 +02:00
Claude Paroz 521fe472e5 [1.4.X] Fixed #18186 -- Fixed ReportLab Web site links. Thanks pablog for the report and the initial patch.
Backport of r17928 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17929 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-22 17:20:39 +00:00
Ramiro Morales 839a71b0a5 [1.4.X] Added documentation notes about lack of database savepoints support when using MySQL+MyISAM.
Refs #15507 and r17341.

Backport of r17923.

git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17924 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-21 22:57:32 +00:00
Claude Paroz 143305126b [1.4.X] Fixed #18156 -- Updated signature of ModelAdmin change_view in docs to reflect r17466. Thanks arthurprat for the report.
Backport of r17918 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17919 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-20 13:01:04 +00:00
Claude Paroz 64bbf5187c [1.4.X] Fixed #18316 -- Fixed pre-1.3 PermWrapper? location in docs. Thanks Adrien Lemaire for the patch.
Backport of r17913 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17914 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-16 11:40:25 +00:00
Claude Paroz 2fa8b3f143 [1.4.X] Fixed #18118 -- Improved documentation for contrib.auth.hashers utility functions. Thanks Mathieu Agopian for the report and Ramiro Morales for the review.
Backport of r17905 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17906 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-13 11:40:44 +00:00
Claude Paroz 3f77b84489 [1.4.X] Fixed #18027 -- Removed an HTMLParser test that doesn't raise any more in recent Python versions. Thanks Arfever and Anssi Kaariainen for the report and the patch.
Backport of r17900 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17901 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-11 21:27:18 +00:00
Claude Paroz ee43524e22 [1.4.X] Fixed #18104 -- Added missing parentheses around two-lines deprecation string. Thanks Roy Smith for the report.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17897 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-11 17:20:59 +00:00
Claude Paroz 8ed9e9074c [1.4.X] Fixed #18095 -- Added missing 'cc' mention in EmailMessage recipients() description. Thanks Stéphane Raimbault for the report and the patch.
Backport of r17891 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17892 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-10 20:02:56 +00:00
Aymeric Augustin 01dfe35b38 [1.4.X] Fixed #18090 -- Applied filters when running prefetch_related backwards through a one-to-one relation. Backport of r17888 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17889 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-10 06:06:14 +00:00
Claude Paroz 8adfdf08de [1.4.X] Fixed #17672 -- Precised MacPorts GeoDjango install instructions to install gdal with geos support. Thanks chosak for the report and the patch.
Backport of r17883 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17884 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-09 10:03:31 +00:00
Julien Phalip a6ba67ffd1 [1.4.X] Fixed #18086 -- Restored '-pk' as the default order in the admin changelist. This rectifies a slight change in behavior introduced in Django 1.4 and r17635.
Backport of r17881 from trunk.

git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17882 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-09 04:32:42 +00:00
Ramiro Morales 9a3e9c27c2 [1.4.X] Fixed #18074 -- Fixed description of dumpdata command --database option.
Thanks aruseni for the report.

Backport of r17873 from trunk.

git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17874 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-06 18:59:06 +00:00
Claude Paroz 61b13444c5 [1.4.X] Fixed #18009 -- Cleaned up a comment about removal of the old contrib.syndication Feed class. Thanks Keryn Knight for the report.
Backport of r17866 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17867 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-02 19:52:32 +00:00
Claude Paroz 456d4db251 [1.4.X] Fixed #18045 -- Corrected the documented default value of SESSION_COOKIE_HTTPONLY setting. Missing bit of r17135.
Backport of r17862 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17863 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-04-01 17:17:21 +00:00
Julien Phalip aafa73db54 [1.4.X] Fixed #17972 -- Ensured that admin filters on a foreign key respect the to_field attribute. This fixes a regression introduced in [14674] and Django 1.3. Thanks to graveyboat and Karen Tracey for the report.
Backport of r17854 from trunk.

git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17858 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-31 18:46:18 +00:00