Commit Graph

5791 Commits

Author SHA1 Message Date
James Bennett 623c4916df [1.6.x] Add release notes and bump version number for security release. 2013-09-15 00:36:03 -06:00
Russell Keith-Magee 5ecc0f828e [1.6.x] Ensure that passwords are never long enough for a DoS.
* Limit the password length to 4096 bytes
  * Password hashers will raise a ValueError
  * django.contrib.auth forms will fail validation
 * Document in release notes that this is a backwards incompatible change

Thanks to Josh Wright for the report, and Donald Stufft for the patch.

This is a security fix; disclosure to follow shortly.

Backport of aae5a96d57 from master.
2013-09-15 13:46:16 +08:00
Goetz 097fb98f81 [1.6.x] Fixed #21101 -- Updated urlize documentation to mention email addresses
Backport of 39b49fd339 from master
2013-09-13 12:42:40 -04:00
Tim Graham 7a2adec4d0 [1.6.x] Fixed #21100 -- Noted that Create/UpdateViews.fields is new in 1.6
Thanks AndrewIngram for the suggestion.

Backport of ec89e1725a from master
2013-09-13 09:35:22 -04:00
Tim Graham 6e17534c89 [1.6.x] Fixed #21094 -- Updated reuseable apps tutorial to use pip for installation.
Thanks ylb415 at gmail.com for the suggestion.

Backport of e4aab1bb8d from master
2013-09-13 09:30:12 -04:00
Kevin Christopher Henry c91ffd5f23 [1.6.x] Documentation -- added instructions on working with pull requests
Since non-core contributors are asked to review patches, instructions
on working with pull requests were added to the Working with Git and
GitHub page (based on the existing instructions in the core
committers page).

Backport of 990ce9aab9 from master
2013-09-13 08:27:23 -04:00
Matt Austin a929adfd3b [1.6.x] Fixed #21095 -- Documented new requirement for dates lookups.
Day, month, and week_day lookups now require time zone definitions in the database.

Backport of 9451d8d from master.
2013-09-13 10:20:13 +02:00
Ramiro Morales 66e6e2d146 [1.6.x] Fixed a couple of typos in GeoDjango docs.
8b366a50f4 from master.
2013-09-12 19:45:27 -03:00
Phaneendra Chiruvella e8bb41d05c [1.6.x] Minor typo fix in django.contrib.auth.models.User docs
Backport of bd72c2acb6 from master
2013-09-11 19:44:35 -04:00
Tim Graham b05639dcac [1.6.x] Fixed #20887 -- Added a warning to GzipMiddleware in light of BREACH.
Thanks EvilDMP for the report and Russell Keith-Magee
for the draft text.

Backport of da843e7dba from master
2013-09-11 08:18:48 -04:00
Kevin Christopher Henry 4f0ea1aca4 [1.6.x] Documentation -- Improved description of cache arguments
- Fixed some grammar and formatting mistakes
- Added the type and default for CULL_FREQUENCY
- Made the note on culling the entire cache more precise. (It's actually
  slower on the filesystem backend.)

Backport of 5eca021d48 from master
2013-09-11 07:43:24 -04:00
Tim Graham 2f2731e67e [1.6.x] Added 1.4.7/1.5.3 release notes
Backport of baec6a26dd from master
2013-09-10 21:08:27 -04:00
Tarjei Husøy ef3604a085 [1.6.x] Fixed broken sphinx reference to staticfiles.
Backport of 751dc0a36b from master
2013-09-10 16:31:51 -04:00
Aymeric Augustin f9f792eb04 [1.6.x] Took advantage of django.utils.six.moves.urllib.*.
Backport of 6a6428a36 from master.
2013-09-10 21:29:31 +02:00
oz123 960f5bc759 [1.6.x] Fixed #21075 - Improved doc for calling call_command with arguments.
Backport of fca4c4826e from master
2013-09-10 09:18:14 -04:00
Tim Graham 01ad508514 [1.6.x] Fixed spelling; refs #16895.
Thanks Panagiotis Issaris for the report.

Backport of fb51c9a0f2 from master
2013-09-09 11:31:25 -04:00
e0ne 276e053803 [1.6.x] Fixed #16895 -- Warned about cost of QuerySet ordering
Thanks outofculture at gmail.com for the suggestion.

Backport of cbf08c6b0c from master
2013-09-09 09:49:15 -04:00
Tim Graham c03848b540 [1.6.x] Fixed #21068 -- Added some docs for DiscoverRunner
Thanks jcd.

Backport of e4b012feeb from master
2013-09-07 16:11:03 -04:00
Aymeric Augustin 01edcf70f2 Fixed #20409 -- Clarified how unique_for_date works when USE_TZ is set. 2013-09-07 14:09:52 -05:00
Tim Graham 7b8037f3aa [1.6.x] Fixed #20005 -- Documented that Oracle databases need execute permission on SYS.DBMS_LOB.
Thanks jafula for the suggestion.

Backport of a86ecc80a2 from master
2013-09-07 14:01:05 -04:00
Tim Graham 17b67e17a3 [1.6.x] Fixed #20938 -- Added cached sessions note to deployment checklist.
Thanks mjtamlyn for the suggestion.

Backport of 4e784f337c from master
2013-09-07 13:08:45 -04:00
Keith Edmiston a357c854c9 [1.6.x] Fixed #16992 -- Added InnoDB warning regarding reuse of AUTO_INCREMENT values.
Thanks kent at nsc.liu.se for the report.

Backport of c54fa1a7bc from master
2013-09-07 12:16:43 -04:00
Tim Graham 2ab2d0fb25 [1.6.x] Fixed a link in topics/testing/overview.txt
Backport of 0c295a7718 from master
2013-09-06 17:41:43 -04:00
Keith Edmiston 2c73ba88f2 [1.6.x] Fixed #19295 -- Documented that CachedStaticFilesStorage isn't compatible with runserver --insecure.
Backport of 028db97503 from master
2013-09-06 17:30:59 -04:00
Tim Graham da44a8bdc2 [1.6.x] Fixed #20646 -- Clarified the use of AbstractBaseUser.REQUIRED_FIELDS
Thanks craigbruce.

Backport of db3de52807 from master
2013-09-06 16:06:46 -04:00
Tim Graham 544382dd85 [1.6.x] Fixed instructions for running a subset of tests.
Backport of cd4068f359 from master
2013-09-06 14:31:43 -04:00
Eric Boersma 180b9955cc [1.6.x] Fixed #21035 -- Changed docs to treat the acronym SQL phonetically.
The documentation and comments now all use 'an' to
refer to the word SQL and not 'a'.

Backport of 4d13cc56de from master
2013-09-05 20:16:14 -04:00
micahhausler 9f69ae7847 [1.6.x] Fixed #21047 -- Added CLA mesage on the new contributor advice doc
Backport of 93dd31cadf from master
2013-09-05 17:54:56 -04:00
Tim Graham 1dd061ad77 [1.6.x] Fixed #21044 -- Documented django.core.urlresolvers.Resolver404
Thanks Keryn Knight for the suggestion.

Backport of eacf060e01 from master
2013-09-05 08:45:58 -04:00
Tim Graham 622d5c7650 [1.6.x] Fixed #20900 -- Documented RemoteUserBackend.authenticate
Backport of 7b62b80693 from master
2013-09-05 06:32:50 -04:00
Tim Graham cda4fc8225 [1.6.x] Fixed #20958 -- Documented that GenericForeignKey fields can't be accessed in forms.
Thanks marky1991.

Backport of 533d1ab334 from master
2013-09-04 13:19:32 -04:00
Paul C. Anagnostopoulos fe0eb2f995 [1.6.x] Clarified docs for some tags and filters
Backport of 1ccdc08189 from master
2013-09-04 13:04:51 -04:00
Loic Bistuer a62b640f7d [1.6.x] Fixed #20973 -- Document serving static files without django.contrib.staticfiles
Backport of 7b04038a7f from master
2013-09-03 09:01:43 -04:00
Aymeric Augustin 115318051c [1.6.x] Replaced "not PY3" by "PY2", new in six 1.4.0.
Conflicts:
	django/db/backends/oracle/base.py
	django/db/backends/sqlite3/base.py
	django/db/models/base.py

Backport of 365c3e8b from master.
2013-09-03 07:34:45 -05:00
Tim Graham c0fb6bdde3 [1.6.x] Fixed #21002 -- Documented JSON session serialization requires string keys
Thanks jeroen.pulles at redslider.net for the report.

Backport of 3baf1d1042 from master
2013-09-03 07:49:59 -04:00
Claude Paroz 4e3794dd1f [1.6.x] Fixed #20998 -- Allow custom (de)serialization for GIS widgets
Thanks Mathieu Leplatre for the report and the initial patch.
Backport of 102f26c92 from master.
2013-09-02 13:34:26 +02:00
Loic Bistuer 64383e8349 [1.6.x] Made the doc about translating string literals in templates more prominent.
Backport of 9885f07757 from master
2013-08-31 08:00:33 -04:00
Claude Paroz 68ae9f39b7 [1.6.x] Fixed copy/paste error in measurement docs
Backport of e87997dd33 frmo master.
2013-08-31 10:33:46 +02:00
Tim Graham 0089a9a854 [1.6.x] Fixed typo in docs/ref/models/options.txt
Backport of a89c856a7a from master
2013-08-30 21:07:04 -04:00
Carl Meyer 21a3efcf48 [1.6.x] Fixed #20999 - Allow overriding formfield class with choices, without subclass restrictions.
Refs #18162. Thanks claudep and mjtamlyn for review.

Backport of 7211741fc5 from master.
2013-08-30 17:45:14 -06:00
Anssi Kääriäinen 76e38a2177 [1.6.x] Fixed #20988 -- Added model meta option select_on_save
The option can be used to force pre 1.6 style SELECT on save behaviour.
This is needed in case the database returns zero updated rows even if
there is a matching row in the DB. One such case is PostgreSQL update
trigger that returns NULL.

Reviewed by Tim Graham.

Refs #16649

Backport of e973ee6a98 from master

Conflicts:
	django/db/models/options.py
	tests/basic/tests.py
2013-08-30 09:47:34 +03:00
Jorge C. Leitão 60df34d477 [1.6.x] Added links to file docs.
Backport of d72f83c410 from master
2013-08-29 12:49:27 -04:00
Phaneendra Chiruvella 68eca2b36f [1.6.x] Minor spelling correction in ModelForms docs
Backport of 2fbf949760 from master
2013-08-28 07:12:38 -04:00
Krzysztof Jurewicz 544a190ebf [1.6.x] Fixed #20981 -- Noted the default value of disable_existing_loggers.
Backport of 095643e691 from master
2013-08-27 10:27:44 -04:00
Jan Böcker c4e2e4f630 [1.6.x] Fixed typo in docs/topics/conditional-view-processing.txt
Backport of 5fd2c979cb from master
2013-08-27 09:22:31 -04:00
Matt Robenolt 28026c3e26 [1.6.x] Updated instructions for running contrib tests.
Backport of 08e7a64369 from master
2013-08-27 08:24:31 -04:00
Ramiro Morales 2a166623a6 [1.6.x] Typos introduced in 57c82f909b. 2013-08-22 22:33:59 -03:00
Tim Graham 5f061986b9 [1.6.x] Fixed #20922 -- Allowed customizing the serializer used by contrib.sessions
Added settings.SESSION_SERIALIZER which is the import path of a serializer
to use for sessions.

Thanks apollo13, carljm, shaib, akaariai, charettes, and dstufft for reviews.

Backport of b0ce6fe656 from master
2013-08-22 17:55:01 -04:00
Kevin Christopher Henry bf9382fb02 [1.6.x] Documentation -- Clarified use of 'view' in test client introduction.
Backport of 2e926b041c from master
2013-08-22 09:39:14 -04:00
Marc Tamlyn 8d02c378ab [1.6.x] Fixed #20944 -- Removed inaccurate statement about View.dispatch().
Backport of bac4d03ce6 from master
2013-08-22 09:21:28 -04:00
Ramiro Morales 26a4c83598 [1.6.x] Made description of LANGUAGE_CODE setting more clear.
297f5af222 from master.
2013-08-22 08:29:59 -03:00
Kevin Christopher Henry 69a4594cb7 [1.6.x] Documentation -- Corrected error about Model.full_clean()
Although the ModelForm validation code was changed to call
Model.full_clean(), the documentation still said otherwise. The
offending phrase was removed.

Backport of bb011cf809 from master
2013-08-21 17:46:18 -04:00
Kevin Christopher Henry e7d4d41a30 [1.6.x] Documentation - Noted that OneToOneField doesn't respect unique.
Added OneToOneField to the list of model fields for which the unique
argument isn't valid. (OneToOneFields are inherently unique, and if
the user supplies a value for unique it is ignored / overwritten.)
2013-08-20 21:20:55 -07:00
Florian Apolloner 12d364a9b0 [1.6.x] Fixed #20933 -- Allowed loaddata to load fixtures from relative paths.
Backport of 6e846f7627 from master.
2013-08-20 21:28:14 +02:00
Tim Graham 7825fb8788 [1.6.x] Fixed #20891 -- Removed part of the tutorial that requires pytz
Thanks AtomicSpark for the report.

Backport of 55339a7669 from master
2013-08-15 15:31:57 -04:00
James Bennett d2419bb2b8 [1.6.x] Added release date to 1.5 release notes.
Forwardport of 61283a8208 from 1.5.x
2013-08-15 07:41:53 -04:00
Alasdair Nicol 52741004f6 [1.6.x] Updated docs following deprecation of django.views.defaults.shortcut
Follows 3f2befc

Backport of 354009d67e from master
2013-08-15 07:07:15 -04:00
Tim Graham 8bd5251fd5 [1.6.x] Added some doc links for django.contrib.messages
Backport of b6178fa24b from master
2013-08-14 12:58:19 -04:00
Tim Graham 529afa7138 Added 1.4.6/1.5.2 release notes. 2013-08-13 11:17:07 -05:00
Tim Graham 4f470f5186 [1.6.x] Added missing release notes for older versions of Django
Backport of 3f6cc33cff from master
2013-08-12 14:07:58 -04:00
Tim Graham 43f12f368b [1.6.x] Fixed #20890 -- Added missing import in class-based view docs.
Thanks André Augusto.

Backport of ab680725bf from master
2013-08-10 18:08:27 -04:00
Tim Graham 2cd1439c06 [1.6.x] Fixed #20868 -- Added an email to django-announce as a security step.
Thanks garrison for the report.

Backport of 5737c57d95 from master
2013-08-09 16:02:54 -04:00
Tim Graham 7c5d43eea0 [1.6.x] Added an anchor for django.forms.Form.clean in docs
Backport of 8442268869 from master
2013-08-08 14:14:14 -04:00
Jaime Irurzun 7836bd502c [1.6.x] Clarifed meaning of models.User.is_authenticated()
Backport of f96fe3cd1e from master
2013-08-08 10:27:34 -04:00
Daniele Procida 9cc7407f2c [1.6.x] Added more on @cached_property, refs #20870
Backport of 7e6af9d40c from master
2013-08-08 09:47:24 -04:00
Daniele Procida 25ce1e0e0a [1.6.x] Fixed #20870 -- Documented django.utils.functional.cached_property
Backport of 7a2296eb5b from master
2013-08-08 05:36:52 -04:00
Christopher Medrela 6264e39c34 [1.6.x] Added note to GenericIPAddressField documentation
refs #20484

Backport of fb26c4996a from master
2013-08-08 05:17:54 -04:00
Leandro Regueiro 4c90081b5b [1.6.x] Added section labels in cache docs
Backport of 709cd2c4b7 from master
2013-08-06 11:56:31 -04:00
Jimmy Song ea7bef318f [1.6.x] Fixed #20859 - Clarified Model.clean() example.
Backport of 94d7fed775 from master
2013-08-05 09:06:36 -04:00
Tim Graham 06f484dcf9 [1.6.x] Fixed #20862 -- Updated startproject MIDDLEWARE_CLASSES in docs.
Thanks Keryn Knight.

Backport of 26c4bd38ac from master
2013-08-05 08:16:56 -04:00
Julien Phalip 7cc91eae7c [1.6.x] Fixed a small formatting issue.
Backport 0b071ba7df of from master.
2013-08-04 17:33:00 -07:00
Julien Phalip 59bf42f79e [1.6.x] Added a note to the 1.6 release about the new `--keep-pot` option for `makemessages`.
Refs #17008.
Backport of 28d3b33c04 from master.
2013-08-04 17:20:22 -07:00
Tim Graham 7a5f799193 [1.6.x] Fixed #20860 -- Removed references to defunct chicagocrime.org
Backport of 1593a86494 from master
2013-08-04 14:46:41 -04:00
Daniele Procida 74205c4a3c [1.6.x] Fixed #20842 and #20845 - Added a note on order_by() and improved prefetch_related() docs.
Backport of e8183a8193 from master
2013-08-04 12:35:31 -04:00
Justin Michalicek 77293f9354 [1.6.x] Fixed #20855 -- Added documentation of current_app and extra_context params to django.contrib.auth views
refs #5298 and refs #8342

Backport of 61ecb5f48a from master
2013-08-04 08:05:36 -04:00
Tim Graham 01a9604274 [1.6.x] Fixed #20858 -- Removed erroneous import in tutorial 2.
Thanks AtomicSpark.

Backport of b278f7478d from master
2013-08-04 05:59:24 -04:00
Alasdair Nicol ccef8b2aa2 [1.6.x] Added missing request argument to example in URL dispatcher docs
Backport of a0c58113b9 from master
2013-08-03 19:36:15 -04:00
Dominic Rodger e710f6dc56 [1.6.x] Fixed #20786 -- Cleaned up docs/ref/exceptions.txt
Thanks Daniele Procida for the suggestion and edits.

Backport of 920b242e30 from master
2013-08-02 09:43:20 -04:00
Tim Graham b3e54f4a01 [1.6.x] Removed unused model option "admin"
Backport of 5df84b268d from master
2013-08-01 12:33:19 -04:00
Tim Graham d32471f8c2 [1.6.x] Added a bugfix in docutils 0.11 -- docs will now build properly.
Backport of a3a59a3197 from master
2013-07-31 09:26:11 -04:00
SusanTan bc617fd42c [1.6.x] Fixed #20779 -- Documented AdminSite.app_index_template; refs #8498.
Thanks CollinAnderson for the report.

Backport of 7de35a9ef3 from master
2013-07-31 07:09:37 -04:00
Tim Graham e82846a9aa [1.6.x] Fixed #20823 -- Typo in docs/ref/forms/validation.txt
Backport of 05ea5a2139 from master
2013-07-29 18:42:22 -04:00
minusf 518faa19c1 [1.6.x] Misc doc cleanups.
Backport of 70c080fcdb from master
2013-07-29 07:06:29 -04:00
minusf 5f8bf4368d [1.6.x] Allowed overriding variables in docs/Makefile.
Backport of c694e6220e from master
2013-07-29 06:52:42 -04:00
Jannis Leidel c456a27725 [1.6.x] Fixed #20774 -- Mention the new django-localflavor app as a replacement for the contrib app. Backport from master. 2013-07-29 12:05:47 +02:00
Tim Graham 192154fb17 [1.6.x] Fixed ReST typo in topics/class-based-views/mixins.txt
Backport of 0b35a2cce3 from master
2013-07-28 14:10:11 -04:00
Tim Graham dbbd2b1272 [1.6.x] Fixed #20805 -- Removed an extra colon beside checkboxes in the admin.
Thanks CollinAnderson for the report.

Backport of 8676318d2d from master
2013-07-26 14:47:58 -04:00
Aymeric Augustin efdf7442bb [1.6.x] Added versionadded directive missing from b7bd708.
Backport of 5ed7ec9 from master.
2013-07-25 20:16:02 +02:00
Tim Graham 68c01e15a5 [1.6.x] Fixed #20769 -- Added "Python compatibility" section to the 1.6 release notes.
Backport of bddb4a6818 from master
2013-07-25 13:04:18 -04:00
mark hellewell ec6928be34 [1.6.x] Fixed #18315 -- Documented QueryDict.popitem and QueryDict.pop
Thanks gcbirzan for the report.

Backport of 8c9240222f from master
2013-07-25 11:08:47 -04:00
Brenton Cleeland 7604749871 [1.6.x] Fixed #20792 -- Corrected DISALLOWED_USER_AGENTS docs.
Thanks simonb for the report.

Backport of dab52d99fc from master
2013-07-25 07:39:36 -04:00
Jon Lønne cd46463eb1 [1.6.x] Fixed typo in Custom management commands documentation.
Backport of 5a5d594717 from master
2013-07-24 07:33:49 -04:00
Dominic Rodger 45d5a4e7d2 [1.6.x] Fixed #20794 -- Documented changes to validate_email
4e2e8f39d changed the way validate_email behaves for foo@localhost
email addresses, but wasn't listed in the release notes.
Backport of c928725b9 from master.
2013-07-24 10:27:34 +02:00
Sergio Oliveira 496f319970 [1.6.x] LocaleMiddleware isn't default anymore (corrected docs)
Changed in @23229061fcb836ecca2195cc75f91e331279a5d1

Backport of cf6c754629 from master
2013-07-19 06:36:26 -04:00
Matt Deacalion Stevens 9b26cb72d9 [1.6.x] Updated the `databases` documentation
+ Removed a reference about MySQL storage engines also being
   called 'table types', as this term has been deprecated for
   8 years and is no longer used.

 + Fixed the link to the official InnoDB storage engine docs.

 + Apache (versions >= 2.4) will always choose a multi-threaded
   MPM module on modern operating systems (later than 2002).

Backport of fa217d14a0 from master
2013-07-19 06:31:38 -04:00
Matt Deacalion Stevens e7435fbe2f [1.6.x] Fixed Croatia's country code in `localflavor` docs
Backport of 97e5398629 from master
2013-07-19 05:30:55 -04:00
Loic Bistuer b7556a4980 [1.6.x] Fixed #20772 -- Fixed minor typo in form media docs.
Backport of aa41eb9b8b from master
2013-07-19 05:19:46 -04:00
Tim Graham 579ca9ee8d [1.6.x] Fixed #20762 -- Clarified that add_fieldsets is not a standard ModelAdmin attribute.
Backport of dce8945ea6 from master
2013-07-18 12:41:51 -04:00
Matt Deacalion Stevens fcd5f3a8d9 [1.6.x] Atom specification URL updated
Changed to the URL of the official RFC for Atom, since Atomenabled.org
is just a holding page.

Backport of beefc97171 from master
2013-07-18 08:47:58 -04:00
Tim Graham 1641aa7119 [1.6.x] Fixed #20763 -- Typo in tutorial 3.
Thanks crichard@ for the report.

Backport of fd95dc9e27 from master
2013-07-18 08:06:50 -04:00