Adam Malinowski
37809b891e
Fixed #27346 -- Stopped setting the Content-Length header in ConditionalGetMiddleware.
2016-11-05 22:24:54 +01:00
Tim Graham
b8ae2c16cf
Added CVE-2016-9013,14 to the security release archive.
2016-11-01 10:48:11 -04:00
Tim Graham
7fe2d8d940
Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.
...
This is a security fix.
2016-11-01 09:30:57 -04:00
Marti Raudsepp
da7910d483
Fixed CVE-2016-9013 -- Generated a random database user password when running tests on Oracle.
...
This is a security fix.
2016-11-01 09:30:57 -04:00
Tim Graham
9e9c81d3c2
Added stub release notes for 1.9.11/1.8.16.
2016-11-01 09:30:57 -04:00
Andrew Nester
1ce04bcce0
Fixed #27363 -- Replaced unsafe redirect in SessionMiddleware with SuspiciousOperation.
2016-11-01 07:15:56 -04:00
Henry Dang
9c2e1ad6a5
Fixed #27400 -- Documented {% static %} encoding change in 1.10.
2016-10-31 16:07:00 -04:00
Krzysztof Urbaniak
a01d887a3a
Fixed #27063 -- Prevented i18n_patterns() from using too much of the URL as the language.
2016-10-31 14:32:01 -04:00
Michael Scott
ec9ed07488
Fixed #27188 -- Allowed using unique=True with FileField.
...
Thanks Tim Graham for the initial patch.
2016-10-28 20:11:03 -04:00
Aymeric Augustin
625cd5bcb3
Added require_ready argument to get_model methods.
...
This allows bringing back the behavior of Django < 1.7.
Also fixed the check for the app registry being ready in
AppConfig.get_model(s), which was inconsistent with the equivalent check in
Apps.get_model(s). That part is a backwards-incompatible change.
2016-10-28 19:08:57 -04:00
Aymeric Augustin
efcb7e1ebf
Modified readiness check in AppConfig.get_model(s).
...
It was inconsistent with the equivalent check in Apps.get_model(s)
because I made incorrect assumptions when I wrote that code and
needlessly complicated readiness checks.
This is a backwards-incompatible change.
2016-10-28 18:42:29 -04:00
Tim Graham
414ad25b09
Fixed #27327 -- Simplified time zone handling by requiring pytz.
2016-10-27 08:53:20 -04:00
Jon Dufresne
c74378bb77
Fixed #27299 -- Documented the Widget.use_required_attribute() method.
...
Thanks Tim Graham for the review and edits.
2016-10-26 19:29:16 -07:00
Jon Dufresne
f3ea0c4bbd
Reverted "Fixed #26401 -- Added BaseAuthConfig to use auth without migrations."
...
This reverts commit 1ec1633cb2
as it
doesn't handle ContentType's auth.Permission dependency. Thus, it
doesn't allow auth without migrations.
2016-10-25 17:32:59 -07:00
David Barragán Merino
b3bd3aa07c
Fixed #27385 -- Fixed QuerySet.bulk_create() on PostgreSQL when the number of objects is a multiple plus one of batch_size.
2016-10-25 19:21:08 -04:00
Alvin Lindstam
6b5106b1ce
Fixed #27374 -- Made JavaScriptCatalog respect the packages argument.
2016-10-22 19:26:08 -04:00
Tim Graham
61f9243e51
Fixed #27345 -- Stopped setting the Date header in ConditionalGetMiddleware.
2016-10-14 12:48:03 -04:00
Tim Graham
cd09524f27
Fixed #27200 -- Provided makemigration's allow_migrate() with model_name.
2016-10-13 11:04:58 -04:00
Denis Cornehl
a840710e1e
Fixed #26447 -- Deprecated settings.USE_ETAGS in favor of ConditionalGetMiddleware.
2016-10-10 14:55:59 -04:00
Zach Borboa
bf91be83d5
Fixed #24941 -- Added ModelAdmin.get_exclude().
...
Thanks Ola Sitarska for the initial patch.
2016-10-07 18:49:28 -04:00
Mads Jensen
0a26f3c338
Fixed #26327 -- Added JsonAgg to contrib.postgres.
...
Thanks Tim Graham for review.
2016-10-07 07:52:03 -04:00
Tim Graham
e261337eea
Fixed docs typos in lines ending with a dash.
2016-10-06 11:01:20 -04:00
Tim Graham
0083a4c8e9
Refs #18974 -- Deprecated @models.permalink() decorator.
2016-10-04 14:39:49 -04:00
Simon Charette
040bd7c938
Fixed #27279 -- Fixed a migration performance regression related to RenameModel operations.
...
Thanks Trac alias mtomiyoshi for the report, Marten Kenbeek for the initial
patch and Tim for the review.
2016-10-04 08:35:15 -04:00
Reto Aebersold
3ab55c1a8a
Fixed #27309 -- Added CallableBool.__hash__().
2016-10-04 07:44:19 -04:00
Claude Paroz
122c90a43b
Fixed #27305 -- Removed BaseCommand.can_import_settings unused attribute
...
Thanks Tim Graham for the review.
2016-10-02 20:31:56 +02:00
Tim Graham
bae1160c3f
Added stub release notes for 1.10.3.
2016-10-01 16:11:54 -04:00
Claude Paroz
67eee5e4fa
Fixed #27302 -- Fixed ModelAdmin.construct_change_message() changed field detection
...
Thanks Ramiro Morales for the report and Tim Graham for the review.
2016-10-01 20:14:27 +02:00
Tim Graham
aa7dc2dc39
Added release date for 1.10.2.
2016-10-01 11:48:11 -04:00
Claude Paroz
fa2f55cfd5
Refs #26940 -- Re-allowed makemessages without settings
...
Thanks Tim Graham for the review.
2016-10-01 14:57:16 +02:00
Tim Graham
87c5e7efeb
Refs #27186 -- Fixed model form default fallback for CheckboxSelectMultiple.
2016-09-30 14:49:50 -04:00
Tim Graham
cc282fa731
Updated links to the current version of PostGIS docs.
2016-09-30 09:26:20 -04:00
Tim Graham
9819676676
Updated links to the current version of MySQL docs.
2016-09-30 09:14:17 -04:00
Tim Graham
eb4d4376fc
Normalized spelling of "Web server/page" in docs.
2016-09-29 19:51:59 -04:00
Rinat Khabibiev
9e07a9b5fe
Fixed #27226 -- Removed patch_response_headers()'s setting of the Last-Modified header.
2016-09-28 09:09:09 -04:00
Alasdair Nicol
3203171832
Fixed 27283 -- Fixed typo in 1.8 release notes.
2016-09-28 06:50:49 -04:00
levental
617e36dc1e
Fixed #20705 -- Allowed using PasswordResetForm with user models with an email field not named 'email'.
2016-09-27 11:59:00 -04:00
Sergey Fursov
6709ea4ae9
Fixed #27271 -- Fixed a crash in runserver logging.
...
Allowed ServerFormatter to handle simple string messages or messages with
formatting arguments. The formatter will set the server_time variable on
the log record if it's required by the format string but wasn't passed in
extra parameters.
2016-09-27 09:46:07 -04:00
Tim Graham
6fe846a8f0
Added CVE-2016-7401 to the security release archive.
2016-09-26 18:01:19 -04:00
Tim Graham
a46742e738
Added a CVE role for Sphinx.
2016-09-26 15:48:40 -04:00
Tim Graham
c6a3109e20
Added release notes for 1.9.10 and 1.8.15 releases.
2016-09-26 13:55:21 -04:00
François Freitag
a5e13a0b92
Fixed #27118 -- Made QuerySet.get_or_create()/update_or_create() error for a non-field in their arguments.
2016-09-24 20:16:16 -04:00
Tim Graham
3507d4e773
Fixed #27186 -- Fixed model form default fallback for MultiWidget, FileInput, SplitDateTimeWidget, SelectDateWidget, and SplitArrayWidget.
...
Thanks Matt Westcott for the review.
2016-09-22 12:20:58 -04:00
Claude Paroz
92323d54fd
Fixed #27056 -- Allowed migrating geometry field dimension on PostGIS
...
Thanks Tim Graham for the review.
2016-09-22 16:40:27 +02:00
Jon Dufresne
2c716c1dc7
Fixed #27256 -- Changed Select widget's selected attribute to use HTML5 boolean syntax.
2016-09-21 15:12:13 -07:00
Mads Jensen
094d630ae8
Fixed #26610 -- Added CITextField to contrib.postgres.
2016-09-21 12:11:37 -04:00
Alasdair Nicol
911d9f4ed1
Fixed #27238 -- Disabled check_pattern_startswith_slash if settings.APPEND_SLASH=False.
...
Thanks strycore for the report and timgraham for suggesting the
solution.
2016-09-19 21:00:12 -04:00
Kevin Christopher Henry
22e303887b
Refs #27083 -- Updated conditional header comparison to match RFC 7232.
2016-09-16 15:45:53 -04:00
Tim Graham
5a51b44936
Fixed #26697 -- Removed contrib.gis.maps.
2016-09-16 15:21:46 -04:00
Gavin Wahl
f0f3de3c96
Fixed #23155 -- Added request argument to user_login_failed signal.
2016-09-12 20:30:34 -04:00