Florian Apolloner
166be6a77e
[1.5.x] Fixed #21253 -- PBKDF2 with cached HMAC key
...
This gives a 2x speed increase compared to the existing implementation.
Thanks to Steve Thomas for the initial patch and Tim Graham for finishing it.
Backport of 1e4f53a6eb
from master.
2013-10-21 20:01:39 +02:00
Riccardo Magliocchetti
045d192222
[1.5.x] Fixed #21296 -- Added docs for PostgreSQL and unix domains sockets.
...
Backport of 1e39982b6e
from master
2013-10-21 13:10:51 -04:00
Juergen Schackmann
8ffa99ccb6
[1.5.x] Fixed #21212 -- Documented the reverse name for OneToOneField.
...
Thanks bjb at credil.org for the report.
Backport of f8632572ad
from master
2013-10-18 16:22:47 -04:00
Tim Graham
472917024b
[1.5.x] Added a warning regarding session security and subdomains.
...
Backport of a3372f67cb
from master
2013-10-18 09:44:34 -04:00
Tim Graham
0fb2897c81
[1.5.x] Fixed bug causing CSRF token not to rotate on login.
...
Thanks Gavin McQuillan for the report.
Backport of ac4fec5ca2
from master
2013-10-18 08:33:07 -04:00
Tianyi Wang
312ca5e9cb
[1.5.x] Improvement on InlineFormSet doc, refs #21006
...
Backport of 944a2bb7c1
from master
2013-10-15 09:58:57 -04:00
Tianyi Wang
1acd5fc9d2
[1.5.x] Fixed #21006 -- Added example code for overriding methods on an InlineFormSet.
...
Thanks treysta at gmail.com for the suggestion.
Backport of 9bfe66164e
from master
2013-10-15 07:37:51 -04:00
Sorcha Bowler
6e7de2edb0
[1.5.x] Fixed #21223 -- Added form.id_for_label to topic guide.
...
Thanks ebertti at yahoo.com.br for the suggestion.
Backport of 018e2c055a
from master
2013-10-14 18:43:48 -04:00
Bouke Haarsma
7f62d794b3
[1.5.x] Fixed #20962 -- Documented that template tag render() may raise exceptions.
...
Thanks Keryn Knight for the report.
Backport of e077224f4a
from master
2013-10-14 11:55:15 -04:00
Bouke Haarsma
5c1be8a870
[1.5.x] Fixed #21210 -- Documented when runserver doesn't auto-restart.
...
Thanks gergely at polonkai.eu for the suggestion.
Backport of 9b7d38ed5a
from master
2013-10-14 10:38:34 -04:00
Bouke Haarsma
b268488806
[1.5.x] Fixed #21264 -- Incorrect RST usage in docs
...
Backport of 8fc63087f6
from master
2013-10-14 08:17:00 -04:00
Max Vizard
e532d1e38f
[1.5.x] Fixed #21027 -- Updated tutorial 5 docs to link to management shell command page.
...
Backport of 13ddf0e002
from master
2013-10-14 08:10:55 -04:00
Aymeric Augustin
ef9133768c
[1.5.x] Fixed #21256 -- Error in datetime_safe.datetime.combine.
...
Backport of d9b6fb8
from master
2013-10-13 19:11:53 +02:00
Aymeric Augustin
2fb127b881
Fixed #21261 -- Added missing import in RedirectView docs
...
Thanks yokomizor.
2013-10-13 19:00:55 +02:00
Tim Graham
2b8519760e
[1.5.x] Fixed #15582 -- Documented how TransactionTestCase.multi_db affects fixtures.
...
Thanks slinkp for the suggestion.
Backport of dd839a2dfd
from master
2013-10-11 20:12:55 -04:00
Cody Scott
766fbd53cb
[1.5.x] Minor edits to docs/topics/db/queries.txt.
...
Backport of 8bfc7cc64c
from master
2013-10-11 15:35:52 -04:00
Cody Scott
3e6d895912
[1.5.x] Small improvements to docs/topics/db/models.txt
...
Backport of 695bc0d191
from master
2013-10-10 20:57:20 -04:00
Anssi Kääriäinen
9f8a36eb20
[1.5.x] Fixed #21248 -- Skipped test_bcrypt if no py-bcrypt found
...
Pre 1.6 Django worked only with py-bcrypt, not with bcrypt. Skipped
test_bcrypt when using bcrypt to avoid false positives.
2013-10-09 14:40:32 +03:00
Tai Lee
b495c24375
[1.5.x] Fixed #16436 -- defer + annotate + select_related crash
...
Correctly calculate the ``aggregate_start`` offset from loaded fields,
if any are deferred, instead of ``self.query.select`` which includes all
fields on the model.
Backpatch of 69f7db153d
from master.
2013-10-09 13:55:32 +03:00
Dan Loewenherz
f8393edb52
[1.5.x] Fix grammatical errors in email documentation
...
Backport of 43f213e475
from master
2013-10-08 20:30:50 -04:00
Tim Graham
67d887fbae
[1.5.x] Fixed #21218 -- Typo on docs/howto/upgrade-version.txt
...
Thanks ryan at ryangallen.com for the report.
Backport of 36e220f923
from master
2013-10-03 20:14:07 -04:00
Tim Graham
1f63061060
[1.5.x] Clarified session replay attack differences with cookie backend.
...
Backport of 00a0d3de02
from master
2013-10-02 10:15:42 -04:00
Michael Manfre
7ebd10019d
[1.5.x] Fixed #21203 -- resolve_columns fields misalignment
...
In queries using .defer() together with .select_related() the values
and fields arguments didn't align properly for resolve_columns().
Backpatch of 8c27247397
from master.
2013-10-01 21:34:39 +03:00
Tim Graham
997a332cbb
[1.5.x] Fixed #21180 -- Additional deprecation notes for databrowse.
...
Thanks einsteiger for the suggestion.
2013-10-01 10:21:04 -04:00
Curtis Maloney
20f394f4d5
[1.5.x] Fixed #21154 -- Updated TemplateResponse docs to better explain context.
...
Thanks mrmachine for the report.
Backport of c39c9f2ad8
from master
2013-09-30 10:21:40 -04:00
Baptiste Mispelon
73ffe26816
[1.5.x] Fix #21185 : Added tests for unescape_entities.
...
Also fixed a py3 incompatibility.
Thanks to brutasse for the report.
Backport of 3754f4ad41
from master.
2013-09-27 18:45:26 +02:00
Aymeric Augustin
cb95516a88
[1.5.x] Updated the bundled version of six to 1.4.0.
...
Backport of 4292097078
from master.
2013-09-27 18:44:49 +02:00
Anssi Kääriäinen
b7e5b5ba1e
[1.5.x] Fixed #21126 -- QuerySet value conversion failure
...
A .annotate().select_related() query resulted in misaligned rows vs
columns for compiler.resolve_columns() method.
Report & patch by Michael Manfre.
Backpatch of 83554b018e
from master.
2013-09-25 20:53:00 +03:00
Baptiste Mispelon
43ab759ce3
[1.5.X] Fixed wording in unit tests documentation.
...
Backport of 42b9feb2e7
from master.
2013-09-25 18:32:07 +02:00
Florian Apolloner
f3853172a4
[1.5.x] Fixed #21138 -- Increased the performance of our PBKDF2 implementation.
...
Thanks go to Michael Gebetsroither for pointing out this issue and help on
the patch.
Backport of 68540fe4df
from master.
2013-09-24 21:14:30 +02:00
Florian Apolloner
1cc572a071
Revert "[1.5.x] Ensure that passwords are never long enough for a DoS."
...
This reverts commit 22b74fa09d
.
This fix is no longer necessary, our pbkdf2 (see next commit) implementation
no longer rehashes the password every iteration.
2013-09-24 21:12:25 +02:00
Tim Graham
de8715ca97
[1.5.x] Fixed #21137 -- Corrected ULRconf include example.
...
Thanks marfire for the report.
Backport of 77f6b468e5
from master
2013-09-24 09:41:44 -04:00
Brett Koonce
13aff91ae7
[1.5.x] Removed extra p (topppings->toppings)
...
Backport of 946a2226ea
from master
2013-09-23 19:25:19 -04:00
Tim Graham
959adcc1de
[1.5.x] Removed implication that six is part of Python stdlib.
...
Backport of 45969bdeb5
from master
2013-09-23 18:30:23 -04:00
Daley Chetwynd
c695f293e3
[1.5.x] Fixed #20830 -- Clarified that Django uses a customized version of six.
...
Thanks glarrain for the suggestion.
Backport of a53caf28bf
from master
2013-09-23 11:07:40 -04:00
Ben Huckvale
a722dfda93
[1.5.x] Fixed #21120 -- Added more explicit text on using validators and link to writing validators.
...
Thanks nicolas at niconomicon.net for the suggestion.
Backport of 98e0453f00
from master
2013-09-23 10:40:27 -04:00
Tim Garner
938d98c8d1
[1.5.x] Fixed #21702 -- Added different bullet styles for nested lists.
...
Thanks moc at mocpa.com for the suggestion.
Backport of c81b6f7b83
from master
2013-09-23 07:40:07 -04:00
Florian Apolloner
1fa8c612fc
[1.5.x] Stopped a test from executing queries at the module level.
...
Currently module level queries are executed against the real database
(specified in NAME) instead of the test database; since it is to late
to fix this for 1.6, we at least ensures stable builds. Refs #21443 .
Backport of 4fcc1e4ad8
from master.
2013-09-22 23:07:54 +02:00
Florian Apolloner
18fe77e4ed
[1.5.x] Fixed "Address already in use" from liveserver.
...
Our WSGIServer rewrapped the socket errors from server_bind into
WSGIServerExceptions, which is used later on to provide nicer
error messages in runserver and used by the liveserver to see if
the port is already in use. But wrapping server_bind isn't enough since
it only binds to the socket, socket.listen (which is called from
server_activate) could also raise "Address already in use".
Instead of overriding server_activate too I chose to just catch socket
errors, which seems to make more sense anyways and should be more robust
against changes in wsgiref.
Backport of 2ca00faa91
from master
2013-09-22 22:08:59 +02:00
Ramiro Morales
b5eddde095
[1.5.x] Reference Meta.index_together in DB performance guide.
...
9dc45efeba
from master.
2013-09-22 14:07:36 -03:00
Ramiro Morales
8e51bea4fb
[1.5.x] Fixed a couple of typos in GeoDjango docs.
...
8b366a50f4
from master.
2013-09-22 14:07:14 -03:00
mlissner
177270ea73
[1.5.x] Correct very minor typo
...
Just changed as to has.
Backport of d8f2d940cc
from master
2013-09-21 18:18:46 -04:00
Michael DiBernardo
61b685847e
[1.5.x] Fixed #21137 -- Documented best practice for URLconfs with repeated pattern prefixes.
...
Backport of 222460a994
from master
2013-09-21 18:18:26 -04:00
Curtis Maloney
b8e7730f3e
[1.5.x] Fixed #21133 -- Clarifed documentation about strftime formatting.
...
Backport of 43a2ec7999
from master
2013-09-21 06:56:17 -04:00
Markus Amalthea Magnuson
b541cf24d0
[1.5.x] Added missing "in" in sentence.
...
Backport of 2c5c422d34
from master
2013-09-19 13:29:56 -04:00
Tim Graham
1ef9a296da
[1.5.x] Added __pycache__ to gitignore
...
Backport of 55b9bff07f
from master
2013-09-19 06:38:01 -04:00
Russell Keith-Magee
75c0aa43d3
[1.5.x] Fixed #21121 : Added archive of security issues.
...
Backport of 9d3e60a
, 8e134c2
, 8b3bae9
, c65ae7c
, bbabc53
,
and a2e25e8
from master.
2013-09-19 15:07:29 +08:00
Florian Apolloner
87c8de2a06
Revert "[1.5.x] Silenced last sporadic failure on 1.5."
...
This reverts commit 6a708cd654
.
Reverted since it only moved the failures to some other tests and it apperently
only worked by accident. Patched selenium for now to include:
https://github.com/SeleniumHQ/selenium/pull/118
which seems to be the root cause for sporadic extra requests to the live server,
which then cause all sorts of issues.
2013-09-18 16:54:30 +02:00
Tim Graham
72f7932cfb
[1.5.x] Fixed #21118 -- Isolated a test that uses the database.
...
Thanks rmboggs for the report.
Backport of 4f40b97d97
from master
2013-09-18 09:43:34 -04:00
Florian Apolloner
6a708cd654
[1.5.x] Silenced last sporadic failure on 1.5.
...
This commit is a last resort; technically the test is correct but our testsuite
has some threading issues when LiveServer is used. Since this will never get
fixed in 1.5 and apperently doesn't get triggered on 1.6 we just make sure the
test doesn't error out. I am not 100% sure why this actually fixes the issue,
but this is still better than having failing builds wheneever we do a security
release for 1.5.
(Tested on jenkins itself, should work (tm)).
2013-09-17 22:33:11 +02:00