p31829507
/
django
mirror of https://github.com/django/django.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
20,163 Commits 28 Branches 411 Tags 641 MiB
Commit Graph

20163 Commits

Author SHA1 Message Date
Baptiste Mispelon 82c9169077 Refs #24461 -- Added test/release notes for XSS issue in ModelAdmin.readonly_fields 
This issue was fixed by refs #24464.
 2015-03-09 10:12:21 -04:00
Tim Graham 300fdbbebb Clarified an item in 1.7.6 release notes. 2015-03-09 10:06:18 -04:00
Erik Romijn fa350e2f30 Fixed #24464 -- Made built-in HTML template filter functions escape their input by default. 
This may cause some backwards compatibility issues, but may also
resolve security issues in third party projects that fail to heed warnings
in our documentation.

Thanks Markus Holtermann for help with tests and docs.
 2015-03-09 09:29:58 -04:00
Anssi Kääriäinen fb146193c4 Fixed #24171 -- Fixed failure with complex aggregate query and expressions 
The query used a construct of qs.annotate().values().aggregate() where
the first annotate used an F-object reference and the values() and
aggregate() calls referenced that F-object.

Also made sure the inner query's select clause is as simple as possible,
and made sure .values().distinct().aggreate() works correctly.
 2015-03-09 07:49:23 -04:00
Tim Graham 63f2dd4ad7 Fixed typo in docs/howto/custom-template-tags.txt 2015-03-09 07:06:09 -04:00
Rik eb9b7abb83 Fixed #21661 -- Expanded authentication views documentation 2015-03-08 20:36:27 +01:00
Marten Kenbeek e272904ff7 Fixed #23407 -- Extended coverage of makemigrations --noinput option. 
Changed --noinput option in makemigrations to suppress all user prompts,
not just when combined with --merge.
 2015-03-08 19:44:14 +01:00
Rik 794c3f74c3 Fixed #24460 -- Extended HttpRequest.build_absolute_uri documentation 
Added explanation on why build_absolute_uri always enforces the
request's scheme.
 2015-03-08 16:32:54 +01:00
Bas Peschier 336512fae7 Fixed #23173 -- Fixed incorrect stripping of SCRIPT_URL 2015-03-08 15:48:27 +01:00
Rik a5b225084f Fixed #23838 -- added missing `__iter__` to LazyObject 2015-03-08 15:42:23 +01:00
Marten Kenbeek 888c9b6429 Fixed #24397 -- Sped up rendering multiple model states. 
Set apps.ready to False when rendering multiple models. This prevents
that the cache on Model._meta is expired on all models after each time a
single model is rendered. Prevented that Apps.clear_cache() refills the
cache on Apps.get_models(), so that the wrong value cannot be cached
when cloning a StateApps.
 2015-03-08 13:54:49 +01:00
Daniele Procida 180f75c2a0 Merge pull request #4271 from PsiloLR/ticket_24456 
Fixed #24456 -- Update modelforms.txt table of Form/Model refs
 2015-03-08 10:25:25 +01:00
Psilo Cybin 866e71140f Fixed #24456 -- Update modelforms.txt table of Form/Model refs 
Added links to the Form/Model table to the field reference docs to
point to their individual field references
 2015-03-08 10:12:53 +01:00
Floris den Hengst e42a720ba2 Fixed typos and updated spelling wordlist. 2015-03-07 17:59:03 +01:00
Sztrovacsek 87d78241a2 Fixed #23986 -- Fixed collectstatic --clear failure if STATIC_ROOT dir doesn't exist. 2015-03-07 10:47:07 -05:00
Aymeric Augustin 90b069c33f Prevented some tests from writing in the CWD. 2015-03-07 15:56:15 +01:00
Tim Graham 9eab328444 Forwardported 1.7.6 release note. 2015-03-07 08:12:44 -05:00
Jean-Louis Fuchs f4f0060fea Fixed #24447 -- Made migrations add FK constraints for existing columns 
When altering from e.g. an IntegerField to a ForeignKey, Django didn't
add a constraint.
 2015-03-07 14:09:56 +01:00
Tim Graham c36b60836b Fixed #24451 -- Deprecated comma-separated {% cycle %} syntax. 2015-03-07 07:42:39 -05:00
david 88c605e3e3 Fixed #23993 -- Added form.media to the admin login template. 2015-03-07 12:59:58 +01:00
Claude Paroz ec808e807a Fixed urlize regression with entities in query strings 
Refs #22267.
Thanks Shai Berger for spotting the issue and Tim Graham for the
initial patch.
 2015-03-06 22:20:14 +01:00
Josh Smeaton ceaf31adff Fixed #24420 -- Allowed ordering by case expressions 2015-03-06 13:30:02 +11:00
Tim Graham 82f7bee1d5 Fixed admin selenium tests broken by removal of fixtures. 2015-03-05 17:51:17 -05:00
Grzegorz Slusarek 668d53cd12 Fixed #21495 -- Added settings.CSRF_HEADER_NAME 2015-03-05 15:03:40 -05:00
Marten Kenbeek 8e744fa150 Stressed authentication should be successful before logging in a user. 2015-03-05 12:17:56 -05:00
Preston Timmons fb7d681705 Fixed test_notafile_error to pass on Windows. 
This test failed because a different error code is raised on Windows when
opening a directory. Since the particular message isn't as important to this
test as the fact that the original IOError is reraised, this fixes the test
by making the assertion more generic.
 2015-03-05 12:14:19 -05:00
Aymeric Augustin 9a4a9a8a49 Improved get_media_prefix template tag example. 2015-03-05 09:14:36 -05:00
Tim Graham d61ebc8fed Fixed #19538 -- Removed window.__admin_media_prefix__ from admin templates. 2015-03-05 06:44:16 -05:00
Claude Paroz b4a1bb8669 Updated test to be date-independent 
Fixes commit 8714403614.
 2015-03-05 10:08:39 +01:00
Claude Paroz 8714403614 Fixed #24428 -- Fixed has_changed for fields with coercion 
Thanks Carsten Fuchs for the report.
 2015-03-05 09:00:13 +01:00
Claude Paroz 767c33d1fa Fixed #24369 -- Prevented crash when flushing before db migration 
Thanks Thomas Tanner for the report and Tim Graham for the review.
 2015-03-05 08:57:28 +01:00
Josh Smeaton 39a7eed1bb Converted test fixtures to setUpTestData methods 2015-03-05 10:10:32 +11:00
Benjamin Wohlwend d6969abf23 Moved definition of chunks out of timesince function. 
This speeds up the timesince function/filter substantially.
 2015-03-04 22:30:14 +01:00
Tim Graham 36a17be9f3 Fixed #24426 -- Displayed admin actions panel when show_full_result_count=False. 2015-03-04 12:00:12 -05:00
Tim Graham fe42bfaaff Used format_html() in contrib.admin.utils for consistency. 2015-03-04 10:26:04 -05:00
Markus Holtermann a9e29fae10 Fixed #24435 -- Prevented m2m field removal and addition in migrations when changing blank 
Thanks Mark Tranchant for the report an Tim Graham for the test and
review.
 2015-03-04 14:26:49 +01:00
Preston Timmons 70123cf084 Fixed #24399 -- Made filesystem loaders use more specific exceptions. 2015-03-03 21:20:46 +01:00
Mathias André 85757d0e79 Removed outdated docstring for get_admin_url(). 
Since a4b8a4b632 the admin
URL returned by get_admin_url() is no longer relative to
the Django admin index page.
 2015-03-03 07:46:12 -05:00
Ross Brunton 6b28e957df Fixed #24379 -- Documented that remote user example disables ModelBackend. 2015-03-02 19:53:11 -05:00
Tim Graham a40a34a4b2 Fixed #13015 -- Clarified language about model instances attached to forms. 2015-03-02 18:44:23 -05:00
Preston Timmons 358850781f Fixed #24372 - Replaced TokenParser usage with traditional parsing. 2015-03-02 18:25:28 -05:00
Shai Berger 8ca35d7c6a Fixed Oracle build failure introduced by refs #24390. 
Used shorter column names to make the generated index name
fit within Oracle's limit of 30 characters
 2015-03-03 00:01:21 +02:00
Claude Paroz 80be597a7b Fixed #24360 -- Delayed internal LocaleMiddleware variable initialization 
Failing in a middleware `__init__` is preventing proper debug view.
 2015-03-02 20:06:24 +01:00
Andrew Pinkham fea45eff5a Fixed #24439 -- Removed incorrect make_object_list attributes in CBV docs. 2015-03-02 13:33:11 -05:00
Andrei Kulakov 08572e8d12 Fixed #24294 -- Allowed staff_member_required decorator to handle args. 2015-03-02 13:15:34 -05:00
Tim Graham 4e8b167e4d Fixed MySQL build failure introduced by refs #24390. 
Added table_name back to _create_index_sql() to prevent
duplicate index names on MySQL.
 2015-03-02 13:07:34 -05:00
Ian Lee fde4857fb8 Added syntax highlighting for apache code blocks 2015-03-02 12:33:58 -05:00
László Károlyi f37c11eea3 Fixed #24390 -- Made migration index names deterministic. 2015-03-02 09:25:19 -05:00
Corey Farwell 4fdc7015c0 Used dict comprehension in URLNode 
4468c08d7 replaced a lot of the old `dict()` comprehensions
with the new style, but missed this one.
 2015-03-02 08:50:27 -05:00
Brent O'Connor f7bf135f62 Updated contributing link in the README. 2015-03-02 08:23:18 -05:00