Commit Graph

8303 Commits

Author SHA1 Message Date
Marti Raudsepp 70f9995296 [1.8.x] Fixed CVE-2016-9013 -- Generated a random database user password when running tests on Oracle.
This is a security fix.
2016-10-25 14:24:11 -04:00
Tim Graham 33bf6220e2 [1.8.x] Added stub release notes for 1.8.16. 2016-10-25 13:56:26 -04:00
Tim Graham aba8f2b501 [1.8.x] Fixed #27342 -- Corrected QuerySet.update_or_create() example.
Backport of 51b83d9e51 from master
2016-10-13 11:03:38 -04:00
Tim Graham 3141b79d26 [1.8.x] Fixed #27307 -- Added missing url names in sitemaps docs.
Backport of fe1aee6b98 from master
2016-10-03 16:05:56 -04:00
Alasdair Nicol 6e24eeef60 [1.8.x] Fixed 27283 -- Fixed typo in 1.8 release notes.
Backport of 3203171832 from master
2016-09-28 06:51:42 -04:00
Tim Graham d5430a5ff9 [1.8.x] Added CVE-2016-7401 to the security release archive.
Backport of 6fe846a8f0 from master
2016-09-26 18:30:31 -04:00
Tim Graham 47f5d799b2 [1.8.x] Added a CVE role for Sphinx.
Backport of a46742e738 from master
2016-09-26 18:30:16 -04:00
Collin Anderson 6118ab7d06 [1.8.x] Fixed CVE-2016-7401 -- Fixed CSRF protection bypass on a site with Google Analytics.
This is a security fix.

Backport of "refs #26158 -- rewrote http.parse_cookie() to better match
browsers." 93a135d111 from master
2016-09-14 13:42:24 -04:00
Tim Graham 717aa88439 [1.8.x] Fixed #26807 -- Documented how to replicate SubfieldBase's assignment behavior.
Backport of 518eaf1fa2 from master
2016-08-18 21:09:12 -04:00
Naved Khan 7665a52161 [1.8.x] Fixed #26941 -- Corrected uwsgi "env = LANG=…" configuration in docs.
Backport of 9a5a789da2 from master
2016-07-25 07:01:32 -04:00
Tim Graham 2deed2ea08 [1.8.x] Added CVE-2016-6186 to the security release archive.
Backport of bc53af13cb from master
2016-07-18 15:20:55 -04:00
Tim Graham f68e5a9916 [1.8.x] Fixed XSS in admin's add/change related popup.
This is a security fix.
2016-07-18 13:45:11 -04:00
Marissa Zhou 358ae4a687 [1.8.x] Fixed #24796 -- Moved SecurityMiddleware in MIDDLEWARE_CLASSES docs.
Partial backport of 8b1f39a727 from master
2016-07-18 07:57:00 -04:00
Jon Dufresne 8edfdddbc8 [1.8.x] Fixed #26889 -- Fixed missing PostgreSQL index in SchemaEditor.add_field().
Backport of 2e4cfcd2b9 from master
2016-07-13 22:15:43 -04:00
Romain Garrigues 2a49d8e9b2 [1.8.x] Fixed #25461 -- Corrected meta API code examples to account for MTI.
In the case of multiple-table inheritance models, get_all_related_objects() and
get_all_related_objects_with_model() don't return the auto-created
OneToOneField, but the new examples didn't account for this.

Backport of 8be84e2ac4 from master
2016-07-06 09:28:58 -04:00
Taylor Edmiston 787675789c [1.8.x] Fixed typo in docs/topics/class-based-views/generic-display.txt
Backport of 43d0345fe1 from master
2016-07-06 08:49:17 -04:00
Krzysztof Jurewicz be5dfde7c2 [1.8.x] Fixed #26774 -- Corrected value of default_zoom in GeoModelAdmin doc
Backport of 6dd4d2709b from master
2016-06-17 14:03:52 +02:00
Berker Peksag ba29dfb191 [1.8.x] Fixed #21588 -- Corrected handler initialization in "modifying upload handlers" example.
Backport of 8f50ff5b15 from master
2016-06-09 12:52:44 -04:00
Tim Graham 0f12924eb5 [1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.
Backport of 149ace94df from master
2016-06-02 11:50:26 -04:00
Tim Graham 8346d2b633 [1.8.x] Ignored new warnings when building the docs with Sphinx 1.4.
Backport of af32737573 from master
2016-06-02 11:30:49 -04:00
Florian Apolloner d4ad28dbdd [1.8.x] Fixed a typo in the docs.
Backport of 62e4f8ec43 from master.
2016-05-31 16:57:31 +02:00
Berker Peksag 4295848868 [1.8.x] Fixed #26503 -- Removed an outdated example from session docs.
Backport of 698c8dfc2a from master
2016-05-31 07:21:23 -04:00
Sergey Fedoseev 17a7ca283f [1.8.x] Fixed typo in docs/topics/forms/modelforms.txt
Backport of 26794f6657 from master
2016-05-27 10:31:57 -04:00
MariKiev 4f50139692 [1.8.x] Added imports to docs/topics/db/aggregation.txt example.
Backport of 30d110ef43 from master
2016-05-25 09:57:55 -04:00
Tim Graham e06bbf8fc3 [1.8.x] Fixed #26636 -- Fixed typo in docs/ref/request-response.txt
Backport of 6d9c5d46e6 from master
2016-05-18 21:39:58 -04:00
vytisb 163972eb61 [1.8.x] Fixed code example in docs/howto/custom-lookups.txt
Backport of b3acf35f13 from master
2016-05-06 08:26:27 -04:00
Tim Graham 3b2b51712b [1.8.x] Added release date for 1.8.13. 2016-05-02 18:17:09 -04:00
Joshua Phillips 052e1f17ca [1.8.x] Fixed #26557 -- Converted empty strings to None when saving GenericIPAddressField.
Backport of 4681d65048 from master
2016-04-29 10:17:00 -04:00
Tim Graham 7934695a0f [1.8.x] Refs #25136 -- Fixed nonexistent field reference in aggregation topic guide.
Thanks Ankush Thakur for the report and Simon for the review.

Backport of fe70f280d7 from master
2016-04-27 15:26:14 -04:00
Jon Dufresne f8b8bcea5d [1.8.x] Fixed incorrect rendered widget in forms example.
Backport of 38ddd4ab55 from master
2016-04-20 21:08:38 -04:00
Lukasz Wiecek 0a411b2224 [1.8.x] Fixed #26498 -- Fixed TimeField microseconds round-tripping on MySQL and SQLite.
Thanks adamchainz for the report and review.

Backport of d3c87a2425 from master
2016-04-18 09:49:31 -04:00
Tim Graham a61b26a651 [1.8.x] Added stub release notes for 1.8.13.
Backport of ad3c72118f from master
2016-04-13 13:22:08 -04:00
Mikkel Munch Mortensen 7c67508a80 [1.8.x] Fixed #26477 -- Fixed typo in docs/ref/contrib/contenttypes.txt
Backport of 4bb3ddbcc6 from master
2016-04-07 13:53:58 -04:00
Tim Graham 539302ee9a [1.8.x] Added release date for 1.8.12.
Backport of 93539ba2f4 from master
2016-04-01 13:30:53 -04:00
Simon Charette 5198b0abea [1.8.x] Fixed #26438 -- Fixed multiple .objects typos in the docs.
Thanks Pablo Oubiña for the report.

Backport of 64aba7a8ab from master
2016-03-31 18:34:03 -04:00
Aymeric Augustin ca051388de [1.8.x] Fixed #26408 -- Updated link to DEP 182.
Thanks kaifeldhoff for the report.

Backport of 7b1ce7f from master
2016-03-25 20:52:33 +01:00
Tim Graham 0496838e61 [1.8.x] Fixed #26387 -- Restored the functionality of the admin's raw_id_fields in list_editable.
Backport of acfaec3db5 from master
2016-03-25 14:57:12 -04:00
Tim Shaffer 540b487cd6 [1.8.x] Fixed typo in docs/topics/db/aggregation.txt.
Backport of 8550566af6 from master
2016-03-25 13:38:38 -04:00
Tim Graham a2970a0464 [1.8.x] Fixed #26392 -- Corrected login_required/permission_required stacking example.
Backport of c41737dc00 from master
2016-03-21 19:58:44 -04:00
Amine 08b0a08c25 [1.8.x] Fixed a broken link in docs/internals/contributing/writing-documentation.txt.
Backport of 8b5a4fa941 from master
2016-03-19 16:19:56 -04:00
Tim Graham 56f5059239 [1.8.x] Fixed #26375 -- Used a more generic name in a reusable template example.
Backport of 1d0abeaf75 from master
2016-03-18 11:38:47 -04:00
Andrew Abraham 5d931314e3 [1.8.x] Fixed DiscoverRunner failfast parameter default in docs.
Backport of f2d9caa625 from master
2016-03-15 18:35:08 -04:00
Tim Graham c7764ca3a0 [1.8.x] Fixed #26324 -- Fixed DurationField with fractional seconds on SQLite.
Backport of 4f0cd0fd16 from master
2016-03-10 19:16:31 -05:00
Tim Osborn ae4d932b1a [1.8.x] Fixed indenting in "Serving files in development" code example
Backport of 8fb3a2877b from master
2016-03-09 14:57:50 +11:00
John-Mark Bell a5e9ae9ad5 [1.8.x] Fixed #26325 -- Made MultiPartParser ignore filenames that normalize to an empty string.
Backport of 4b129ac81f from master
2016-03-07 13:22:38 -05:00
Tim Graham 6d312f95f3 [1.8.x] Added stub release notes for 1.8.12.
Backport of c960af4adb from master
2016-03-05 10:02:12 -05:00
Claude Paroz beb392b85e [1.8.x] Added safety to URL decoding in is_safe_url() on Python 2
The errors='replace' parameter to force_text altered the URL before checking
it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.
Backport of 552f03869e from master.
2016-03-04 23:39:46 +01:00
Claude Paroz 28bed24f55 [1.8.x] Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()
This fixes a regression introduced by c5544d2892.
Thanks John Eskew for the reporti and Tim Graham for the review.
Backport of ada7a4aef from master.
2016-03-04 21:16:51 +01:00
Tim Graham f294b3833b [1.8.x] Added stub release notes for 1.8.11.
Backport of 2f0c785a4c from master
2016-03-04 09:48:11 -05:00
Tim Graham 8b891cf386 [1.8.x] Fixed #26321 -- Added missing "for_save" parameter in expressions example.
Thanks tomaszn for the patch.

Backport of de8a11ba18 from master
2016-03-03 19:38:06 -05:00