Commit Graph

26979 Commits

Author SHA1 Message Date
Harrison88 0dc3ad163a [2.2.x] Fixed #30695 -- Used relative path in default_storage docs example.
Backport of 1e429df748 from master
2019-08-20 12:03:04 +02:00
Garry Polley 4a24fe940e [2.2.x] Removed outdated examples of flatpages served sites.
Removing the lawrence journal flat page examples because one is no longer a web page (404) and the other is no longer served by Django: https://www.reddit.com/r/django/comments/8v0fpb/the_lawrence_journalworld_where_django_was/
Backport of 10528a81ed from master
2019-08-19 12:28:27 +02:00
Mariusz Felisiak 98464dde12 [2.2.x] Fixed broken links and redirects to OGR library in docs.
Backport of 49aeabbf27 from master
2019-08-19 11:43:44 +02:00
bcye 9ecff12720 [2.2.x] Fixed broken links to Dive Into Python 3 book.
Backport of ac34fccdb9 from master
2019-08-19 07:20:39 +02:00
Claude Paroz 556cef1ba8 [2.2.x] Fixed #30694 -- Documented FileResponse does not seek its file source.
Backport of 7203efb799 from master
2019-08-17 09:21:48 +02:00
Mariusz Felisiak 6624a3de28
[2.2.x] Fixed test_json.TestQuerying.test_key_transform_expression() on Python 3.5. 2019-08-15 19:38:12 +02:00
zeyneloz c2732e6839 [2.2.x] Fixed #30449 -- Fixed RelatedFieldListFilter/RelatedOnlyFieldListFilter to respect model's Meta.ordering.
Regression in 6d4e5feb79.

Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of 00035672a4 from master
2019-08-15 13:14:17 +02:00
Mariusz Felisiak 52a7759a49 [2.2.x] Fixed #30672 -- Fixed crash of JSONField/HStoreField key transforms on expressions with params.
Regression in 4f5b58f5cd.

Thanks Florian Apolloner for the report and helping with tests.

Backport of 1f8382d34d from master.
2019-08-14 15:29:13 +02:00
Akash Agrawal be4a2a0358 [2.2.x] Fixed #30696 -- Removed obsolete mention of CheckConstraint in the AddConstraint docs.
Follow up to 8eae094638.

Backport of c1b26c77a9 from master
2019-08-11 16:30:44 +02:00
Akash Agrawal 8a3a328020 [2.2.x] Fixed #30670 -- Doc'd SchemaEditor.add/remove_constraint().
Backport of af08a54415 from master
2019-08-11 03:28:01 +02:00
Carlton Gibson c5cbb797d7 [2.2.x] Fixed #30688 -- Clarified base_manager_name docs.
Backport of 514efa3129 from master
2019-08-09 10:10:15 +02:00
Adnan Umer 1265a26b2f [2.2.x] Fixed #30673 -- Relaxed system check for db_table collision when database routers are installed by turning the error into a warning.
Backport of 8d3519071e from master.
2019-08-08 21:40:06 +02:00
Mariusz Felisiak 2c66f340bb [2.2.x] Added stub release notes for 2.2.5.
Backport of 1af469e67f from master
2019-08-03 11:28:47 +02:00
niauah 5b294d3931 [2.2.x] Corrected StreamingHttpResponse.streaming_content description in docs.
Backport of 75f8264083 from master
2019-08-02 16:47:00 +02:00
Carlton Gibson 68cc954ffb [2.2.x] Added CVE-2019-14235 to security release archive.
Backport of a5652eb795 from master
2019-08-01 12:04:18 +02:00
Carlton Gibson 3bfa2f99d8 [2.2.x] Added CVE-2019-14234 to security release archive.
Backport of 3a6a2f5eaf from master
2019-08-01 12:04:06 +02:00
Carlton Gibson 859d1d1cb0 [2.2.x] Added CVE-2019-14233 to security release archive.
Backport of 9600f63885 from master
2019-08-01 12:03:53 +02:00
Carlton Gibson 928d596886 [2.2.x] Added CVE-2019-14232 to the security release archive.
Backport of 87750787d1 from master
2019-08-01 12:03:34 +02:00
Carlton Gibson 7c65adf0f8 [2.2.x] Post-release version bump. 2019-08-01 10:59:41 +02:00
Carlton Gibson 8687fbe034 [2.2.x] Bumped version for 2.2.4 release. 2019-08-01 10:56:47 +02:00
Florian Apolloner cf694e6852 [2.2.x] Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri().
Thanks to Guido Vranken for initial report.
2019-07-29 11:06:54 +02:00
Mariusz Felisiak 4f5b58f5cd [2.2.x] Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection.
Thanks to Sage M. Abdullah for the report and initial patch.
Thanks Florian Apolloner for reviews.
2019-07-29 11:06:54 +02:00
Florian Apolloner e34f3c0e9e [2.2.x] Fixed CVE-2019-14233 -- Prevented excessive HTMLParser recursion in strip_tags() when handling incomplete HTML entities.
Thanks to Guido Vranken for initial report.
2019-07-29 11:06:54 +02:00
Florian Apolloner c3289717c6 [2.2.X] Fixed CVE-2019-14232 -- Adjusted regex to avoid backtracking issues when truncating HTML.
Thanks to Guido Vranken for initial report.
2019-07-29 11:00:01 +02:00
daniel a rios f9462f4c82 [2.2.x] Fixed #30656 -- Added QuerySet.bulk_update() to the database optimization docs.
Backport of 68aeb90160 from master
2019-07-29 10:10:00 +02:00
daniel a rios b4139ed6ea [2.2.x] Refs #30656 -- Reorganized bulk methods in the database optimization docs.
Backport of fe33fdc049 from master
2019-07-29 10:09:53 +02:00
Carlton Gibson ea57c8a345 [2.2.x] Added stub release notes for security releases.
Backport of f13147c8de from master
2019-07-25 10:50:18 +02:00
Tom Forbes 4d6449e125 [2.2.x] Fixed #30647 -- Fixed crash of autoreloader when extra directory cannot be resolved.
Backport of fc75694257 from master.
2019-07-24 14:38:24 +02:00
terminator14 61d4a15989 [2.2.x] Fixed typo in docs/topics/http/sessions.txt.
Backport of 8323691de0 from master
2019-07-23 15:11:54 +02:00
Tom Forbes 2d2859bec2 [2.2.x] Fixed #30506 -- Fixed crash of autoreloader when path contains null characters.
Backport of 2ff517ccb6 from master.
2019-07-23 10:41:50 +02:00
Mariusz Felisiak 506f800ead [2.2.x] Refs #30083 -- Added a warning about performing queries in pre/post_init receivers.
Thanks Carlton Gibson the review.

Backport of fc1182af01 from master
2019-07-19 16:07:29 +02:00
Mariusz Felisiak fa3ae446d9 [2.2.x] Refs #30083 -- Clarified database state of instances in signals.pre_init docs.
Backport of a2e1c17f19 from master
2019-07-19 16:07:21 +02:00
Davit Gachechiladze de2635fb4e [2.2.x] Fixed #30648 -- Removed unnecessary overriding get_context_data() from mixins with CBVs docs.
Backport of 7f612eda80 from master
2019-07-18 19:47:53 +02:00
Mariusz Felisiak 0088e59292 [2.2.x] Refs #30547 -- Clarified that partial UniqueConstraints don't affect model validation.
Backport of 230d75f59c from master
2019-07-18 12:56:52 +02:00
Mariusz Felisiak 4814db40c1 [2.2.x] Fixed heading level typo in docs/ref/contrib/postgres/fields.txt.
Backport of ad4e83a6d1 from master
2019-07-16 15:08:40 +02:00
Frank Wiles d58cde7444 [2.2.x] Updated WSGI servers ordering according to the more commonly used.
Backport of fa65b90a96 from master
2019-07-16 14:44:29 +02:00
Frank Wiles de19a600f0 [2.2.x] Fixed explanation of how to automatically create tables in database.
Backport of c1b94e32fb from master
2019-07-15 15:24:44 +02:00
Hasan Ramezani a39365c48e [2.2.x] Doc'd --no-input option for createsuperuser.
Backport of 8dd5877f58 from master
2019-07-11 10:26:16 +02:00
Mariusz Felisiak 1088a9777d [2.2.x] Fixed #30621 -- Fixed crash of __contains lookup for Date/DateTimeRangeField when the right hand side is the same type.
Thanks Tilman Koschnick for the report and initial patch.
Thanks Carlton Gibson for the review.

Regression in 6b048b364c.
Backport of 7991111af1 from master
2019-07-10 10:34:49 +02:00
Simon Charette 9dee8515d6 [2.2.x] Fixed #30628 -- Adjusted expression identity to differentiate bound fields.
Expressions referring to different bound fields should not be
considered equal.

Thanks Julien Enselme for the detailed report.

Regression in bc7e288ca9.

Backport of ee6e93ec87 from master
2019-07-10 08:04:45 +02:00
Mariusz Felisiak 8f0b9e7f9a [2.2.x] Fixed typos in docs/ref/django-admin.txt.
Backport of 24e8f7f7d3 from master
2019-07-09 13:39:35 +02:00
Mariusz Felisiak b593c39d7f [2.2.x] Added stub release notes for 2.2.4.
Backport of 08e69cad9c from master
2019-07-09 07:45:27 +02:00
sp1rs 0ea952e3d6 [2.2.x] Fixed #30600 -- Clarified that ValueError raised by converter.to_python() means no match.
Backport of f197c3dd91 from master
2019-07-04 13:36:10 +02:00
swatantra 7d52d056e3 [2.2.x] Fixed #28667 -- Clarified how to override list of forms fields for custom UserAdmin with a custom user model.
Backport of c13e3715f5 from master
2019-07-04 08:22:56 +02:00
Carlton Gibson b6d8957356 [2.2.x] Fixed #28588 -- Doc'd User.has_perm() & co. behavior for active superusers.
Equivalent note for PermissionsMixin was added in d33864ed13.
Backport of 4b32d039db from master
2019-07-02 11:21:46 +02:00
aitoehigie b9d1bb6955 [2.2.x] Fixed #30589 -- Clarified that urlize should be applied only to email addresses without single quotes.
Backport of c2f381ef17 from master
2019-07-01 12:03:56 +02:00
Mariusz Felisiak 2b533ae60e [2.2.x] Added CVE-2019-12781 to the security release archive.
Backport of 868cd56f05 from master
2019-07-01 10:21:16 +02:00
Mariusz Felisiak 5d39f62f7e [2.2.x] Post-release version bump. 2019-07-01 08:21:52 +02:00
Mariusz Felisiak 89e9a4aeb6 [2.2.x] Bumped version for 2.2.3 release. 2019-07-01 07:55:16 +02:00
Mariusz Felisiak 93e719efdb [2.2.x] Updated man page for Django 2.2. 2019-07-01 07:54:32 +02:00