Florian Apolloner
2eea361eff
Fixed #30511 -- Used identity columns instead of serials on PostgreSQL.
2022-04-13 21:51:51 +02:00
Nick Pope
62ffc9883a
Updated bpo link to use redirect URI.
...
Mirrors the change made in python/cpython#32342 .
2022-04-13 13:27:41 +02:00
Mariusz Felisiak
b54fd0e36e
Added stub release notes for 4.0.5.
2022-04-11 10:45:57 +02:00
Mariusz Felisiak
78eeff8d33
Added CVE-2022-28346 and CVE-2022-28347 to security archive.
2022-04-11 10:32:22 +02:00
Mariusz Felisiak
6723a26e59
Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL.
2022-04-11 08:59:58 +02:00
Mariusz Felisiak
93cae5cb2f
Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases.
...
Thanks Splunk team: Preston Elder, Jacob Davis, Jacob Moore,
Matt Hanson, David Briggs, and a security researcher: Danylo Dmytriiev
(DDV_UA) for the report.
2022-04-11 08:59:33 +02:00
Manel Clos
62739b6e26
Fixed #33628 -- Ignored directories with empty names in autoreloader check for template changes.
...
Regression in 68357b2ca9
.
2022-04-11 07:37:30 +02:00
Carlton Gibson
9ffd4eae2c
Fixed #33611 -- Allowed View subclasses to define async method handlers.
2022-04-07 07:05:59 +02:00
sarahboyce
65effbdb10
Fixed #33471 -- Made AlterField operation a noop when changing "choices".
...
This also allows customizing attributes of fields that don't affect
a column definition.
2022-04-06 13:05:57 +02:00
Baptiste Mispelon
50e1e7ef8e
Fixed #33348 -- Changed SimpleTestCase.assertFormError()/assertFormsetErrors() to take form/formset.
...
Instead of taking a response object and a context name for
the form/formset, the two methods now take the object directly.
2022-04-06 07:58:52 +02:00
Mariusz Felisiak
78277faafd
Added stub release notes and release date for 4.0.4, 3.2.13, and 2.2.28.
2022-04-04 10:31:57 +02:00
Lucidiot
13a9cde133
Fixed #33613 -- Made createsuperuser detect uniqueness of USERNAME_FIELD when using Meta.constraints.
2022-04-01 11:39:41 +02:00
sarahboyce
ae506181f7
Fixed #32129 -- Adjusted the docs for session expiry helpers.
...
Updated the docs for `get_session_cookie_age`, `get_expiry_age`, and
`get_expiry_date` to clarify their intended usage by session backends
when saving the session.
2022-03-31 17:06:14 +02:00
David
c8459708a7
Refs #32339 -- Added use_fieldset to Widget.
2022-03-30 16:28:14 +02:00
Mariusz Felisiak
fac662f479
Fixed #33598 -- Reverted "Removed unnecessary reuse_with_filtered_relation argument from Query methods."
...
Thanks lind-marcus for the report.
This reverts commit 0c71e0f9cf
.
Regression in 0c71e0f9cf
.
2022-03-30 07:31:56 +02:00
Carlton Gibson
59ab3fd0e9
Refs #32365 -- Deprecated django.utils.timezone.utc.
2022-03-29 14:47:44 +02:00
Alokik Vijay
baf9604ed8
Fixed #16406 -- Added ResolveMatch.captured_kwargs and extra_kwargs.
...
Thanks Florian Apolloner for the review and implementation idea.
2022-03-29 10:27:40 +02:00
Mariusz Felisiak
83c803f161
Updated Oracle docs links to Oracle 21c.
2022-03-29 09:41:57 +02:00
Mariusz Felisiak
010a9d8a4f
Updated various links to HTTPS and new locations.
2022-03-29 07:46:08 +02:00
René Fleschenberg
eb07b5be0c
Fixed #15619 -- Deprecated log out via GET requests.
...
Thanks Florian Apolloner for the implementation idea.
Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2022-03-29 06:42:14 +02:00
Sih Sîng-hông薛丞宏
d4bf3b4c75
Corrected models.FileField signature in docs.
2022-03-28 13:25:39 +02:00
David Smith
379bb201ed
Fixed #33564 -- Confirmed support for PROJ 9.X.
2022-03-25 13:09:15 +01:00
David Smith
510c4e465c
Used Cmake in GEOS installation docs.
2022-03-25 11:56:22 +01:00
adontz
2bee0b4328
Fixed #7497 -- Allowed overriding the order of apps and models in admin.
2022-03-25 10:33:44 +01:00
Mariusz Felisiak
94d8ed55fa
Refs #15619 -- Logged out with POST requests in admin.
2022-03-24 17:41:53 +01:00
Carlton Gibson
bb61f0186d
Refs #32365 -- Removed internal uses of utils.timezone.utc alias.
...
Remaining test case ensures that uses of the alias are mapped
canonically by the migration writer.
2022-03-24 06:29:50 +01:00
Thomas Schmidt
1cf60ce601
Fixed #33569 -- Added SECURE_PROXY_SSL_HEADER support for list of protocols in the header value.
2022-03-23 19:33:36 +01:00
Samuel Hartmann
5cc9464e4d
Fixed #33544 -- Expanded the TEMPLATES section of the Deployment checklist.
...
Clarified that the cached template loader is enabled by default when
DEBUG = False.
2022-03-22 12:37:38 +01:00
Carlton Gibson
9fed515a25
Fixed #33585 -- Made example git repo URLs use HTTPS protocol.
...
The SSH-based checkout requires additional configuration, which is
beneficial to defer for new contributors.
Follow up to 3c6a4fdb6d
. This commit
updates the remaining examples.
2022-03-22 11:57:44 +01:00
Mariusz Felisiak
653daaa60c
Refs #31676 -- Used term "merger" instead of "committer" in docs.
...
Follow up to caa2dd08c4
.
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2022-03-22 11:13:36 +01:00
Tomas McNamer
f77216bd1a
Refs #28592 -- Improved some headings in CSRF how-to.
2022-03-22 06:05:34 +01:00
Mariusz Felisiak
b07ee98b27
Renamed Jenkins wiki page to CI.
...
Jenkins is no longer the only CI tool.
2022-03-19 15:41:48 +01:00
Mariusz Felisiak
39ae8d740e
Added missing backticks to function names.
2022-03-17 11:10:03 +01:00
tommcn
e458abc593
Refs #28592 -- Created a new CSRF how-to document.
2022-03-17 06:53:53 +01:00
tommcn
8e63390640
Corrected CSRF reference in middleware docs.
2022-03-17 06:03:10 +01:00
Gagaro
9c04af837a
Doc'd BaseConstraint.
2022-03-16 16:55:17 +01:00
Mariusz Felisiak
970f5bf503
Fixed #33577 -- Confirmed support for GDAL 3.4.
2022-03-16 09:07:01 +01:00
Mariusz Felisiak
be80aa55ec
Removed outdated handling of length parameter to If-Modified-Since header.
...
The length parameter is not described in RFC-7232 and it's against
HTTP/1.0 and HTTP/1.1 specifications. It was an old and unofficial
extension set by some ancient versions of IE.
2022-03-15 13:07:44 +01:00
Tomas McNamer
65ac1431d5
Refs #28592 -- Removed redundant spaces in docs/ref/csrf.txt.
2022-03-14 07:46:01 +01:00
David Sanders
7c56fc8e91
Corrected AppConfig.get_models() signature in docs.
2022-03-14 06:54:16 +01:00
Mariusz Felisiak
6ffe48b8e4
Moved log_response() release notes into backwards incompatible changes section.
...
Follow up to 90cf963264
.
2022-03-11 22:16:46 +01:00
Adrian Torres
d90e34c61b
Fixed #33561 -- Allowed synchronization of user attributes in RemoteUserBackend.
2022-03-10 12:57:19 +01:00
David Smith
67b5f506a6
Changed some words to use inline markup.
2022-03-10 10:18:31 +01:00
David
3dbf46654c
Removed unused and unnecessary words from docs/spelling_wordlist.
2022-03-09 10:35:00 +01:00
David Smith
71531cc32c
Changed "bolded" to "in bold" in docs.
2022-03-09 08:03:14 +01:00
Adam Johnson
a45f28f0ec
Rewrote strip_tags test file to lorem ipsum.
2022-03-08 14:50:06 +01:00
Adam Johnson
a8c15481f4
Rewrote some references to "master".
...
Following d9a266d657
.
2022-03-08 14:50:06 +01:00
Adam Johnson
76fda7729e
Clarified that tutorial background image should be self-provided.
2022-03-08 06:28:56 +01:00
Luke Plant
ae2da5ba65
Fixed #33562 -- Made HttpResponse.set_cookie() support timedelta for the max_age argument.
2022-03-07 07:57:14 +01:00
Ryan Heard
c6b4d62fa2
Fixed #29865 -- Added logical XOR support for Q() and querysets.
2022-03-04 12:55:37 +01:00