f4db2d16ec
[3.1.x] Refs #28741 -- Doc'd SESSION_COOKIE_DOMAIN requirement with CSRF_USE_SESSIONS.
...
Similar considerations as refs #32065 , again adding some nuance to
afd375fc342e7ba6057c
2021-01-04 08:17:46 +01:00
3d28beea00
[3.1.x] Corrected formatting in settings docs.
...
Backport of 0ed6f3ba4b
2020-12-15 12:09:38 +01:00
31946faf4f
[3.1.x] Updated {% static %} tag examples in docs to use single quotes where appropriate.
...
Backport of 42f3fafdfa
2020-11-02 10:35:04 +01:00
1f8dbc8fa9
[3.1.x] Fixed #32065 -- Restored leading dot to CSRF_COOKIE_DOMAIN examples.
...
Partially reverts afd375fc343d4ffd1ff0
2020-10-07 10:04:24 +02:00
fbb7881956
[3.1.x] Fixed #32012 -- Made test database creation sync apps models when migrations are disabled.
...
Thanks Jaap Roes for the report.
Backport of 77caeaea88
2020-09-23 10:54:50 +02:00
eda59ba2ec
[3.1.x] Fixed #31934 -- Added note about the default of SameSite cookie flag in modern browsers.
...
Backport of 70731fc6fe
2020-08-31 12:33:17 +02:00
9857352655
[3.1.x] Fixed #31842 -- Added DEFAULT_HASHING_ALGORITHM transitional setting.
...
It's a transitional setting helpful in migrating multiple instance of
the same project to Django 3.1+.
Thanks Markus Holtermann for the report and review, Florian
Apolloner for the implementation idea and review, and Carlton Gibson
for the review.
Backport of d907371ef9
2020-08-04 09:39:29 +02:00
3116444559
[3.1.x] Fixed #31821 -- Removed outdated note in FILE_UPLOAD_PERMISSIONS docs.
...
Follow up to 22aab8662f248d03fbe9
2020-07-23 21:00:45 +02:00
2521664041
[3.1.x] Fixed #31814 -- Fixed typo in docs/ref/settings.txt.
...
Backport of f65454801b
2020-07-22 22:39:27 +02:00
f91ba43ebf
[3.1.x] Improved description of USE_THOUSAND_SEPARATOR setting.
...
Backport of 80f92177eb
2020-07-20 12:55:44 +02:00
ecd794bc68
[3.1.x] Fixed #31696 -- Updated OWASP links in docs.
...
Backport of a16080810b
2020-06-15 09:44:37 +02:00
ccf3cecbaf
[3.1.x] Refs #23097 -- Used new octal format in FILE_UPLOAD_PERMISSIONS docs.
...
Backport of f24b59267b
2020-05-25 21:04:28 +02:00
a6c773aa86
[3.1.x] Fixed #31608 -- Doc'd that form ISO 8601 datetime parsing always retains tzinfo.
...
Backport of 643207efae
2020-05-21 20:49:30 +02:00
d2b9a9fdbb
Refs #28622 -- Corrected PASSWORD_RESET_TIMEOUT/PASSWORD_RESET_TIMEOUT_DAYS docs.
...
Removed outdated note about an extra day in PASSWORD_RESET_TIMEOUT
docs and incorrect "minimum" phrase.
2020-05-05 08:19:25 +02:00
b28be08cac
Fixed broken links in docs.
2020-04-28 10:09:45 +02:00
bec4dea844
Fixed #31400 -- Doc'd the expected type of CONN_MAX_AGE database option.
2020-03-27 06:32:42 +01:00
72b97a5b1e
Fixed #31232 -- Changed default SECURE_REFERRER_POLICY to 'same-origin'.
2020-02-05 14:39:01 +01:00
a45c8d7ad0
Fixed #31126 -- Doc'd STATICFILES_DIRS namespacing in static files how-to.
2020-01-29 10:34:34 +01:00
13e4abf83e
Fixed #30752 -- Allowed using ExceptionReporter subclasses in error reports.
2020-01-16 15:25:49 +01:00
188b003014
Fixed #15982 -- Added DATE_INPUT_FORMATS to forms.DateTimeField default input formats.
2020-01-07 11:08:40 +01:00
b33bfc3839
Fixed #30862 -- Allowed setting SameSite cookies flags to 'none'.
...
Thanks Florian Apolloner and Carlton Gibson for reviews.
2019-12-12 10:52:31 +01:00
adb9661789
Fixed #31010 -- Allowed subdomains of localhost in the Host header by default when DEBUG=True.
2019-12-05 09:44:45 +01:00
c06492dd87
Fixed #23524 -- Allowed DATABASES['TIME_ZONE'] option on PostgreSQL.
2019-12-04 18:22:08 +01:00
ff1b19da67
Fixed #31029 -- Used more specific links to RFCs.
2019-11-27 20:54:38 +01:00
a69c4d626a
Refs #25388 -- Corrected value of TEST MIGRATE setting in MIGRATION_MODULES docs.
2019-11-25 08:42:35 +01:00
f5ebdfce5c
Fixed #25388 -- Added an option to allow disabling of migrations during test database creation.
2019-11-20 20:42:38 +01:00
fbbff7f808
Refs #29983 -- Added pathlib.Path support to the file email backend.
2019-11-06 09:33:07 +01:00
c8debd5061
Added a link to the file email backend from EMAIL_FILE_PATH setting.
2019-11-06 08:24:49 +01:00
d232fd76a8
Clarified that SECURE_REDIRECT_EXEMPT patterns should not include leading slashes.
2019-10-11 15:30:33 +02:00
c574bec092
Fixed #25598 -- Added SCRIPT_NAME prefix to STATIC_URL and MEDIA_URL set to relative paths.
...
Thanks Florian Apolloner for reviews.
Co-authored-by: Joel Dunham <Joel.Dunham@technicalsafetybc.ca>
2019-09-25 19:47:03 +02:00
28e769dfe6
Fixed typo in docs/ref/settings.txt.
2019-09-23 08:17:58 +02:00
45304e444e
Refs #28622 -- Clarified security implications of PASSWORD_RESET_TIMEOUT.
2019-09-20 13:53:01 +02:00
226ebb1729
Fixed #28622 -- Allowed specifying password reset link expiration in seconds and deprecated PASSWORD_RESET_TIMEOUT_DAYS.
2019-09-20 13:52:04 +02:00
4056558a1c
Fixed typos in docs/ref/settings.txt.
2019-09-13 20:36:35 +02:00
3d716467a9
Refs #29817 -- Removed settings.FILE_CHARSET per deprecation timeline.
2019-09-10 12:01:00 +02:00
416c584cab
Removed versionadded/changed annotations for 2.2.
2019-09-10 12:01:00 +02:00
406dba04e1
Fixed #29406 -- Added support for Referrer-Policy header.
...
Thanks to James Bennett for the initial implementation.
2019-09-09 13:35:41 +02:00
05d0eca635
Fixed #30426 -- Changed X_FRAME_OPTIONS setting default to DENY.
2019-09-09 08:15:26 +02:00
4a954cfd11
Fixed #30573 -- Rephrased documentation to avoid words that minimise the involved difficulty.
...
This patch does not remove all occurrences of the words in question.
Rather, I went through all of the occurrences of the words listed
below, and judged if they a) suggested the reader had some kind of
knowledge/experience, and b) if they added anything of value (including
tone of voice, etc). I left most of the words alone. I looked at the
following words:
- simply/simple
- easy/easier/easiest
- obvious
- just
- merely
- straightforward
- ridiculous
Thanks to Carlton Gibson for guidance on how to approach this issue, and
to Tim Bell for providing the idea. But the enormous lion's share of
thanks go to Adam Johnson for his patient and helpful review.
2019-09-06 13:27:46 +02:00
0468159763
Refs #30426 -- Changed default SECURE_CONTENT_TYPE_NOSNIFF to True.
2019-08-18 13:17:49 +02:00
c5075360c5
Fixed #30680 -- Removed obsolete system check for SECURE_BROWSER_XSS_FILTER setting.
2019-08-05 18:44:08 +02:00
54d0f5e62f
Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set.
...
An HTTP request would not be redirected to HTTPS when the
SECURE_PROXY_SSL_HEADER and SECURE_SSL_REDIRECT settings were used if
the proxy connected to Django via HTTPS.
HttpRequest.scheme will now always trust the SECURE_PROXY_SSL_HEADER if
set, rather than falling back to the request scheme when the
SECURE_PROXY_SSL_HEADER did not have the secure value.
Thanks to Gavin Wahl for the report and initial patch suggestion, and
Shai Berger for review.
2019-07-01 07:48:04 +02:00
f3a03d5b61
Changed charset and collation link to MySQL docs.
2019-06-11 11:16:27 +02:00
b6c4766f53
Refs #29548 -- Updated docs for MariaDB support.
2019-05-27 19:59:49 +02:00
80482e9249
Fixes #30342 -- Removed a system check for LANGUAGES_BIDI setting.
...
This partly reverts commit 4400d8296d
2019-04-24 10:54:03 +02:00
19fc6376ce
Fixed #30304 -- Added support for the HttpOnly, SameSite, and Secure flags on language cookies.
2019-04-08 11:26:06 +02:00
4cbe2b06ce
Fixed typo in docs/ref/settings.txt.
2019-04-02 09:10:11 +02:00
198a2a9381
Removed unnecessary /static from links to PostgreSQL docs.
2019-03-29 21:49:44 -04:00
879cc3da62
Moved extlinks in docs config to allow using 'version' variable.
...
After a stable branch is created, 'master' will change to
'stable/' + version + '.x'.
2019-03-28 20:47:51 -04:00
a68c029e22
Used extlinks for Django's source code.
2019-03-28 20:32:17 -04:00
Tim Graham
Carlton Gibson
Nikita Sobolev
Carlton Gibson
Mariusz Felisiak
Hasan Ramezani
Harpreet Sharma
Buk Bukowski
Adam Johnson
René Fleschenberg
Chris Burchhardt
Abhijeet
Pavel Lysak
Claude Paroz
Osaetin Daniel
Gordon Pendleton
Aymeric Augustin
Baptiste Mispelon
Jon Dufresne
Oleg Kainov
Luke Plant
Ben Falk
Nick Pope
Tobias Kunze
Adnan Umer
Mykola Nicholas
Matthias Kestenholz
Ran Benita