Commit Graph

9593 Commits

Author SHA1 Message Date
Mathew Payne 2128c508a2 [2.1.x] Fixed #29952 -- Lowercased all passwords in contrib.auth's auth/common-passwords.txt.gz.
Backport of 26bb2611a5 from master.
2018-11-15 14:11:24 -05:00
Tom Forbes 497d825dde [2.1.x] Removed obsolete and flaky GeoIP tests.
Backport of 8f90593e6f from master.
2018-11-10 08:22:56 -05:00
Tim Graham cd7d6c8af7 [2.1.x] Fixed #29890 -- Fixed FileSystemStorage crash if concurrent saves try to create the same directory.
Regression in 632c4ffd9c.

Backport of 98ef3829e9 from master.
2018-10-31 20:24:16 -04:00
Tim Graham 0f02d71995 [2.1.x] Fixed #29896 -- Fixed incorrect Model.save() cache relation clearing for foreign keys that use to_field.
Regression in ee49306176.
Backport of f77fc56c96 from master.
2018-10-28 22:54:19 -04:00
Sergey Fedoseev 69603b3e71 [2.1.x] Fixed #29827 -- Fixed reuse of test databases with --keepdb on MySQL.
Regression in e1253bc26f.
Backport of 9a88c6dd6a from master.
2018-10-25 19:38:00 -04:00
aspalding 0df7ea1b87 [2.1.x] Fixed #29838 -- Fixed crash when combining Q objects with __in lookups and lists.
Regression in fc6528b25a.

Backport of 834c4ec8e4,
217f82d713, and
dc5e75d419 from master.
2018-10-17 11:40:02 -04:00
Jon Dufresne 6cb5285f29 [2.1.x] Refs #29784 -- Switched to https:// links where available.
Backport of 82f286cf6f from master.
2018-10-09 20:52:43 -04:00
Jon Dufresne ec0803b1be [2.1.x] Capitalized "Python" in docs and comments.
Backport of e90af8bad4 from master.
2018-10-09 20:50:31 -04:00
Carlton Gibson 5045f8af85 Revert "[2.1.x] Refs #27795 -- Removed force_bytes() usage in sessions."
This reverts commit f3f31b0fc2.
2018-10-03 15:14:27 +02:00
Jon Dufresne f3f31b0fc2 [2.1.x] Refs #27795 -- Removed force_bytes() usage in sessions.
SessionBase.decode() is the inverse operation to SessionBase.encode().
As SessionBase.encode() always returns a string, SessionBase.decode()
should always be passed a string argument. Fixed the file backend, which
was the only backend still passing a bytestring.

Backport of bdae19cf63 from master
2018-10-03 11:33:12 +02:00
Jon Dufresne f0759305d0 [2.1.x] Fixed #29813 -- Fixed DatabaseOperation test when run in isolation on MySQL.
Backport of 7598cd4748 from master.
2018-10-02 08:22:51 -04:00
Jon Dufresne d95d7d6896 [2.1.x] Added tests for using bytearray with BinaryField and corrected docs.
Backport of b3b47bf515 from master.
2018-10-01 09:16:47 -04:00
Tim Graham 176d20b92a [2.1.x] Fixed #29809 -- Fixed a crash when a "view only" user POSTs to the admin user change form.
Backport of a7284cc0c3 from master
2018-10-01 10:16:15 +02:00
Carlton Gibson c4bd5b597e Fixed CVE-2018-16984 -- Fixed password hash disclosure to admin "view only" users.
Thanks Claude Paroz & Tim Graham for collaborating on the patch.

# Conflicts:
#	tests/auth_tests/test_views.py
2018-10-01 10:15:50 +02:00
Claude Paroz 7b444bf5f7 [2.1.x] Refs #21408 -- Updated naturaltime translation test.
Upcoming German translations will not differ for past and future naturaltime
translations. Using Czech language instead.
Backport of ddcb9e8062 from master
2018-09-29 15:07:09 +02:00
Jon Dufresne a6e7ebf4ee [2.1.x] Added test of filtering on BinaryField and corrected docs.
Backport of fb2964a410 from master.
2018-09-26 15:07:06 -04:00
Mariusz Felisiak 5aeced6dcd
[2.1.x] Fixed #29630 -- Fixed crash of sliced queries with multiple columns with the same name on Oracle 12.1.
Regression in 0899d583bd.

Thanks Tim Graham for the review and Jani Tiainen for help.
Backport of 024abe5b82 from master
2018-09-26 20:24:20 +02:00
Oleg cdb8ee741d [2.1.x] Fixed #29778 -- Fixed quoting of unique index names.
Regression in 3b429c9673.
Backport of d1d5c97bc2 from master.
2018-09-25 16:10:47 -04:00
Jon Dufresne f53ed7846b [2.1.x] Refs #29784 -- Normalized Python docs links to omit the version.
Backport of ad9a28ee38 from master.
2018-09-25 10:22:06 +02:00
Simon Charette 4c5a8c6f50 [2.1.x] Fixed #29755 -- Made migrations detect changes to Meta.default_related_name.
Backport of a4495f4b98 from master
2018-09-14 10:20:27 -04:00
Tim Graham 5bbcf83fce [2.1.x] Fixed #29749 -- Made the migrations loader ignore files starting with a tilde or underscore.
Regression in 29150d5da8.
Backport of 32fbccab40 from master
2018-09-11 12:51:24 -04:00
Alexander Holmbäck bd5ce0599b [2.1.x] Fixed #29727 -- Made nonexistent joins in F() raise FieldError.
Regression in 2162f0983d.

Backport of f315d0423a from master
2018-09-08 09:50:02 -04:00
Alexander Holmbäck ed60ce55c2 [2.1.x] Moved test for nonexistent field in F() to BasicExpressionsTest.
Backport of aa16ec5474 from master
2018-09-08 09:40:53 -04:00
James Aylett 231c595bde [2.1.x] Refs #16470 -- Fixed typo in a FileResponse test.
Backport of ee52044a27 from master.
2018-09-01 15:16:07 +02:00
Tim Graham 152b1d783b [2.1.x] Fixed #29723 -- Fixed crash if InlineModelAdmin.has_add_permission() doesn't accept the obj argument.
* Refs #27991 -- Added testing for ModelAdmin.get_inline_instances() if the inline's has_add_permission() doesn't accept 'obj'.

* Fixed #29723 -- Fixed crash if InlineModelAdmin.has_add_permission() doesn't accept the obj argument.

Backport of fd8a7a5313 from master
2018-08-30 11:36:04 +02:00
Mariusz Felisiak e7acd99113 [2.1.x] Fixed #29694 -- Fixed column mismatch crash with QuerySet.values() or values_list() after combining querysets with extra() with union(), difference(), or intersection().
Regression in 0b66c3b442.
Backport of 39461a83c3 from master
2018-08-29 10:03:36 +02:00
Tim Graham 53b9a6654b [2.1.x] Fixed #29682 -- Fixed admin change form crash if a view-only model's form has an extra field.
Backport of d311124be5 from master
2018-08-20 11:15:16 -04:00
Jon Dufresne cae84904c6 [2.1.x] Refs #29015 -- Added database name to PostgreSQL database name too long exception.
Backport of bf17f5e884 from master
2018-08-17 12:44:17 -04:00
Jon Dufresne 9c93bf0903 [2.1.x] Fixed #29663 -- Made admin change view redirect to changelist with view permission.
Backport of 09ee3b6fe3 from master
2018-08-17 11:21:17 -04:00
Marnanel Thurman ef306338eb [2.1.x] Fixed #29662 -- Allowed test client to accept structured suffix JSON content types.
Backport of 7cc52250f0 from master
2018-08-15 10:28:08 -04:00
Ramiro Morales f72a7d8f44 [2.1.x] Fixed #29653 -- Fixed missing related_query_name reverse accessor if GenericRelation is declared on an abstract base model.
Regression in 4ab027b944.

Thanks Lauri Kainulainen for the report.

Backport of b5c7cb4d33 from master
2018-08-10 12:43:27 -04:00
Clément Mangin d7615674d9 [2.1.x] Fixed #29637 -- Fixed admin change form crash if the user doesn’t have the add permission to a TabularInline.
Regression in 825f0beda8.

Backport of 64e1a271f5 from master
2018-08-10 11:32:52 -04:00
Tim Graham e3be4e94d1 [2.1.x] Fixed #29623 -- Fixed translation failure of DurationField's "overflow" error message.
Backport of 730173d1c5 from master
2018-08-08 06:38:27 -04:00
Mariusz Felisiak 2bf766cedc
[2.1.x] Fixed #29643 -- Fixed crash when combining Q objects with __in lookups and lists.
Regression in fc6528b25a.
Backport of 9fee229874 from master
2018-08-08 08:52:55 +02:00
Mariusz Felisiak c706091225
[2.1.x] Fixed #29613 -- Fixed --keepdb on PostgreSQL if the database exists and the user can't create databases.
Regression in e776dd2db6.

Thanks Tim Graham for the review.
Backport of 1a9cbf41a1 from master
2018-08-03 10:33:52 +02:00
Tim Graham 0cfca0f2cc [2.1.x] Fixed #29627 -- Fixed QueryDict.urlencode() crash with non-string values.
Regression in 7d96f0c49a.
Backport of d8e2be459f from master
2018-08-02 21:56:43 -04:00
Michael Sanders 221ef69a9b [2.1.x] Fixed #29499 -- Fixed race condition in QuerySet.update_or_create().
A race condition happened when the object didn't already exist and
another process/thread created the object before update_or_create()
did and then attempted to update the object, also before update_or_create()
saved the object. The update by the other process/thread could be lost.

Backport of 271542dad1 from master
2018-08-02 17:17:12 -04:00
luz.paz adfd261404 [2.1.x] Fixed typos in comments and docs.
Backport of 97e637a87f from master
2018-08-01 16:13:18 -04:00
Andreas Hug c4e5ff7fdb [2.1.x] Fixed CVE-2018-14574 -- Fixed open redirect possibility in CommonMiddleware. 2018-08-01 09:35:09 -04:00
Dražen Odobašić 4dadf4eb7b [2.1.x] Fixed #29617 -- Fixed Template crash if template_string is lazy.
Regression in 3a148f958d.
Backport of 9f3b9ffd51 from master
2018-07-31 09:57:28 -04:00
Carlton Gibson 278457988a [2.1.x] Refs #29514 -- Added test for get_default_timezone()/timezone.utc equality.
Backport of f4ef71c689 from master
2018-07-23 10:44:25 -04:00
Claude Paroz 1084bcc4b7 [2.1.x] Fixed #29578 -- Made numberformat.format() honor forced l10n usage.
Thanks Sassan Haradji for the report.
Backport of 0adfba968e from master
2018-07-19 16:44:57 -04:00
Tom c7ac2ee773 [2.1.x] Refs #29451 -- Fixed test_isvalid_lookup on MySQL 8+.
Backport of f98e1c01ea from master
2018-07-06 09:05:55 -04:00
Tim Graham 78f502cd0b [2.1.x] Fixed #29449 -- Reverted "Fixed #28757 -- Allowed using contrib.auth forms without installing contrib.auth."
This reverts commit 3333d935d2 due to
a crash if USERNAME_FIELD isn't a CharField.

Backport of f3fa86a89b from master
2018-07-02 18:57:12 -04:00
Tim Graham 01b7fdfd67 [2.1.x] Fixed #29520 -- Fixed test client crash when posting bytes.
Regression in b8a41a2872.

Backport of 9294110a57 from master
2018-06-27 16:52:06 -04:00
Chris Jerdonek da46599143 [2.1.x] Refs #29253 -- Fixed method_decorator() crash if decorator sets a new attribute.
Regression in fdc936c913.

Backport of f434f5b84f from master
2018-06-27 11:46:24 -04:00
Tim Graham 714612a638 [2.1.x] Fixed #29511 -- Added charset to JavaScriptCatalog's Content-Type header.
Backport of 7cdeb23ae7 from master
2018-06-22 09:32:33 +02:00
Carlton Gibson dae75481fa [2.1.x] Refs #29451 -- Fixed invalid SQL on MySQL in queries tests.
Backport of c4f099de1d from master
2018-06-20 10:39:15 -04:00
Nick Pope 16e691d568 [2.1.x] Fixed #29503 -- Made __in lookup keep order of values in query.
Regression in 86eccdc8b6.

Backport of b0fbfae093 from master
2018-06-20 09:42:47 -04:00
Carlton Gibson 67fc680c43 [2.1.x] Fixed #29502 -- Allowed users with the view permission to use autocomplete_fields.
Backport of 5b73317181 from master
2018-06-18 15:37:10 -04:00