Commit Graph

2775 Commits

Author SHA1 Message Date
Tim Graham 46e2b9e059 Fixed CVE-2017-12794 -- Fixed XSS possibility in traceback section of technical 500 debug page.
This is a security fix.
2017-09-05 10:58:38 -04:00
Tim Graham 73b6d02747 Added stub release notes for security releases. 2017-09-05 10:58:38 -04:00
Mads Jensen f4135783ad Fixed #28126 -- Added GistIndex to contrib.postgres.
Thanks to Marc Tamlyn for the initial patch.
2017-09-04 21:08:02 -04:00
Berker Peksag d81c86d32c Fixed typo in docs/releases/1.10.txt. 2017-09-04 08:40:07 -04:00
ZachLiuGIS 2dacc2ccd9 Fixed #28550 -- Restored contrib.auth's login() and logout() views' respect of positional arguments.
Regression in 78963495d0.

Forwardport of f8e0557b01 from stable/1.11.x
2017-09-03 12:06:44 -04:00
Berker Peksag 90fcf0fce7 Fixed typos in docs/releases/1.10.txt. 2017-09-02 09:09:07 -04:00
Nick Pope f9c2fd30be Fixed #28559 -- Removed contrib.gis.gdal.OGRException backwards compatibility alias. 2017-09-02 08:52:01 -04:00
Tim Graham 04050bff30 Refs #26522 -- Forwardported 1.11.5 release note. 2017-09-01 16:41:39 -04:00
Tim Graham e5bd585c6e Fixed #28543 -- Prevented ManyToManyField.value_from_object() from being lazy.
Previously, it was a QuerySet which could reevaluate to a new value if the
model's data changes. This is inconsistent with other Field.value_from_object()
methods.

This allows reverting the fix in the admin for refs #27998.
2017-08-31 09:34:44 -04:00
Tim Graham 11cd46930e Refs #28487 -- Forwardported 1.11.5 release note. 2017-08-31 08:00:47 -04:00
caleb logan 9e2bf65d6a Fixed #28530 -- Prevented SelectDateWidget from localizing years in output. 2017-08-29 14:56:08 -04:00
Mads Jensen fb42d02471 Refs #25809 -- Omitted pages_per_range from BrinIndex.deconstruct() if it's None. 2017-08-26 09:45:45 -04:00
hui shang c0f4c60edd Fixed #28513 -- Added POST request support to LogoutView. 2017-08-24 09:11:16 -04:00
Mariusz Felisiak 939d923e8e
Refs #28498 -- Forwardported 1.11.5 release note. 2017-08-23 10:08:42 +02:00
Mariusz Felisiak 330e965cd8
Fixed typo in docs/releases/1.11.5.txt. 2017-08-23 08:55:25 +02:00
Kevin Grinberg c6a3546093 Fixed #28451 -- Restored pre-Django 1.11 Oracle sequence/trigger naming.
Regression in 69b7d4b116.
2017-08-22 15:51:08 -04:00
Claude Paroz ed77bea582 Refs #28502 -- Complemented stringformat tuple handling/test.
An additional test and a code change were suggested in a late review.
2017-08-22 08:45:08 -04:00
Berker Peksag 8d095c6378 Removed redundant backticks in docs/releases/1.8.txt 2017-08-21 09:16:22 +02:00
Mariusz Felisiak 6784383e93 Fixed #28498 -- Fixed test database creation with cx_Oracle 6. 2017-08-16 18:39:58 +02:00
Bae KwonHan 0608c24378 Fixed typo in docs/releases/2.0.txt. 2017-08-15 09:41:49 -04:00
Alejandro Zamora 90d7b912b9 Fixed #28201 -- Added ProhibitNullCharactersValidator and used it on CharField form field. 2017-08-12 20:14:14 -04:00
Tom b78d100fa6 Fixed #27849 -- Added filtering support to aggregates. 2017-08-12 17:58:28 -04:00
Mariusz Felisiak 489421b015 Fixed #23546 -- Added kwargs support for CursorWrapper.callproc() on Oracle.
Thanks Shai Berger, Tim Graham and Aymeric Augustin for reviews and
Renbi Yu for the initial patch.
2017-08-12 21:06:49 +02:00
Tim Graham abd723c6a0 Fixed #27855 -- Updated docs for Python 3.4 support in Django 2.0. 2017-08-11 11:17:08 -04:00
Pavel Karateev 851ef09db9 Fixed typo in docs/releases/2.0.txt. 2017-08-09 20:48:36 +02:00
Tim Graham 78c155cf2e Fixed #28441 -- Fixed GEOS version parsing with a commit hash at the end. 2017-08-02 09:30:30 -04:00
Tim Graham 53d2534b38 Added stub release notes for 1.11.5. 2017-08-01 08:46:23 -04:00
Tim Graham 4c68ef9136 Added release date for 1.11.4. 2017-08-01 08:08:18 -04:00
Mariusz Felisiak b61d5b1991 Fixed #28371 -- Fixed Cast() with CharField if the max_length argument isn't provided.
Thanks Tim Graham for the review.
2017-07-27 19:36:47 +02:00
Tim Graham 14172cf442 Fixed #28415 -- Clarified what characters ASCII/UnicodeUsernameValidator accept. 2017-07-27 08:42:01 -04:00
Melvyn Sopacua 5bb9b9a388 Fixed #28363 -- Allowed naming the migration generated by squashmigrations. 2017-07-26 13:47:35 -04:00
Sergey Fedoseev f3bada9889 Fixed #28436 -- Added support for distance lookups on MySQL. 2017-07-26 08:50:56 -04:00
Rachel Tobin f9e5f9ae9f Fixed #28418 -- Fixed queryset crash when using a GenericRelation to a proxy model. 2017-07-21 18:21:13 -04:00
Tom Carrick 3159ad4df6 Fixed #27970 -- Allowed QuerySet.in_bulk() to fetch on fields besides primary key. 2017-07-21 08:34:35 -04:00
Tim Graham 487362fa8f Fixed #28370 -- Deprecated the context arg of Field.from_db_value() and Expression.convert_value().
Unused since a0d166306f.
2017-07-20 16:30:08 -04:00
Johannes Hoppe c19b56f633 Fixed #28377 -- Made combining form Media retain relative asset order.
Thanks Florian Apolloner, Mariusz Felisiak, and Tim Graham for reviews.
2017-07-20 11:06:30 -04:00
Roman Selivanov d4da39685b Fixed #28414 -- Fixed ClearableFileInput rendering as a subwidget of MultiWidget. 2017-07-19 14:28:06 -04:00
Florian Apolloner adab280cef Fixed #28399 -- Fixed QuerySet.count() for union(), difference(), and intersection() queries. 2017-07-15 08:20:12 -04:00
Sergey Fedoseev 504ce3914f Fixed #28394 -- Allowed setting BaseExpression.output_field (renamed from _output_field). 2017-07-14 21:56:01 -04:00
Srinivas Reddy Thatiparthy 5debbdfcc8 Fixed #28387 -- Fixed has_changed() for disabled form fields that subclass it. 2017-07-14 13:06:51 -04:00
Tim Graham 2e9ada1551 Fixed #28397 -- Removed django.core.exceptions.DjangoRuntimeWarning. 2017-07-14 12:06:06 -04:00
Tim Graham 37b2602c89 Refs #28174 -- Added 1.11.4 release note for Python 2 runserver autoreload fix.
Forwardport of fc6b90bdb7 from stable/1.11.x
2017-07-13 13:42:27 -04:00
Sergey Fedoseev 83440a1258 Refs #28389 -- Added release note and test for pickling of LazyObject when wrapped object doesn't have __reduce__().
Forwardport of 30f334cc58 from stable/1.11.x
2017-07-12 09:30:29 -04:00
Claude Paroz 169c3b3e07 Fixed #14204 -- Enforced SQLite foreign key constraints.
Thanks Tim Graham for contributing to the patch and
Simon Charette for advice and review.
2017-07-11 09:07:31 -04:00
Mariusz Felisiak ca74e56350 Fixed #28378 -- Fixed union() and difference() when combining with a queryset raising EmptyResultSet.
Thanks Jon Dufresne for the report. Thanks Tim Graham and Simon Charette
for the reviews.
2017-07-10 20:40:08 +02:00
Bruno Alla 604341c85f Fixed #28331 -- Added ContextMixin.extra_context to allowing passing context in as_view(). 2017-07-06 10:34:54 -04:00
Tim Graham 42e91cd6f4 Refs #28355 -- Forwardported 1.11.4 release note. 2017-07-06 08:17:39 -04:00
Mariusz Felisiak df1106a40f Fixed #28365 -- Unified DatabaseOperations.date_interval_sql() return value with similar methods. 2017-07-06 07:37:47 -04:00
Tim Graham 2328f2faf8 Added stub release notes for 1.11.4. 2017-07-01 19:37:43 -04:00
Tim Graham 25cce597d0 Added release date for 1.11.3. 2017-07-01 19:13:35 -04:00