Commit Graph

413 Commits

Author SHA1 Message Date
Tim Graham 30042d475b [1.4.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names.
This is a security fix. Disclosure following shortly.
2014-08-11 10:14:06 -04:00
Florian Apolloner c2fe73133b [1.4.x] Prevented reverse() from generating URLs pointing to other hosts.
This is a security fix. Disclosure following shortly.
2014-08-11 09:04:23 -04:00
Tim Graham 4d5e972a2c [1.4.x] Added release note stub for 1.4.14. 2014-08-11 08:47:06 -04:00
Tim Graham d39fcff11a [1.4.x] Minor edits to latest release notes.
Backport of 860d31ac7a from master
2014-05-15 07:17:54 -04:00
Jacob Kaplan-Moss fe5b3e36a2 Added release notes for 1.4.13. 2014-05-14 18:07:32 +02:00
Tim Graham e1812617cf [1.4.x] Added dates to release notes of today's release.
Backport of 68d264059a from master
2014-04-28 19:07:51 -04:00
Tim Graham b91c385e32 [1.4.x] Fixed #22486 -- Restored the ability to reverse views created using functools.partial.
Regression in 8b93b31.

Thanks rcoup for the report.

Backport of 3c06b2f2a3 from master
2014-04-23 09:22:02 -04:00
Erik Romijn 8010908313 [1.4.x] Added information on resolved security issues to release notes.
Backport of c07f3e60c2 from master
2014-04-21 18:31:44 -04:00
Tim Graham f2a9f71565 [1.4.x] Updated six to 1.6.1.
Backport of 2ec82c7387 from master
2014-03-24 07:35:13 -04:00
Tim Graham 74181c0a2c [1.4.x] Added release note stub for 1.4.11.
Backport of dfa28981ce from master.
2014-01-26 17:50:12 -05:00
Tim Graham c5d071f85a [1.4.x] Added 1.4.10 release notes to index. 2013-11-07 09:38:53 -05:00
James Bennett 30eb916bdb [1.4.x] Bump version info and add release notes for 1.4.10. 2013-11-06 08:17:26 -06:00
Paolo Melchiorre d491702ed7 [1.4.x] Fixed typo in docs/releases/1.4.9.txt.
Backport of 3b0293370a from master
2013-10-25 07:55:50 -04:00
James Bennett 8f36d1fd95 [1.4.x] Bump everything for 1.4.9 bugfix release. 2013-10-24 23:37:26 -05:00
Tim Graham 3a46f621fe [1.4.x] Bumped release date for 1.5.5 & 1.4.9.
Backport of 4ce5c119b5 from master
2013-10-23 18:29:53 -04:00
Tim Graham ead7c496a4 [1.4.x] Added 1.4.9 release notes
Backport of 2eb8f15516 from master
2013-10-22 20:25:20 -04:00
Tim Graham ca77e38d24 [1.4.x] Cleaned up 1.4.8 release notes
Backport of 8d29005524 from master
2013-09-15 14:29:40 -04:00
James Bennett 3ffc7b52f8 [1.4.x] Add release notes and bump version numbers for 1.4.8 security release. 2013-09-14 23:53:07 -06:00
Tim Graham d1dc8a0d00 Added 1.4.7 release notes
Backport of baec6a26dd from master
2013-09-10 21:09:47 -04:00
Tim Graham d77ce64fe8 [1.4.x] Removed 1.5.2 release notes 2013-08-13 13:15:54 -04:00
Tim Graham e61e20e497 Added 1.4.6/1.5.2 release notes. 2013-08-13 11:18:07 -05:00
Tim Graham b50be6857c [1.4.x] Added missing release notes for older versions of Django
Backport of 3f6cc33cff from master
2013-08-12 14:11:10 -04:00
Tim Graham 7b7592cafa [1.4.x] Fixed #18944 -- Documented PasswordResetForm's from_email argument as a backwards incompatible change for 1.3
Thanks DrMeers for the report.

Backport of dab921751d from master
2013-07-08 15:06:45 -04:00
Carl Meyer 5d1791ffd2 [1.4.x] Don't characterize XML vulnerabilities as DoS-only. 2013-02-19 18:22:22 -07:00
Carl Meyer 62d5338bf2 [1.4.x] Update 1.4.4 release notes for all security fixes. 2013-02-19 11:48:46 -07:00
Carl Meyer 9936fdb11d [1.4.x] Added ALLOWED_HOSTS setting for HTTP host header validation.
This is a security fix; disclosure and advisory coming shortly.
2013-02-19 10:37:54 -07:00
Preston Holmes e86e4ce0bd Added 1.4.2 release notes 2012-10-21 07:50:30 -07:00
Claude Paroz 92f7af3c36 [1.4.x] Fixed #18212 -- Standardized arguments of GenericIPAddressField
Unlike other model fields, the newly introduced (1.4)
GenericIPAddressField did not accept verbose_name and name as the
first positional arguments. This commit fixes it.
Thanks Dan McGee for the report and the patch.

Backport of 306d34873c from master.
2012-09-01 18:39:51 +02:00
Claude Paroz f6159d426b [1.4.x] Added 1.4.1 and 1.3.2 release notes
Backport of 44f541ab47 from master.
2012-08-31 20:38:12 +02:00
Claude Paroz b8340d26e4 [1.4.x] Updated obsolete links in the documentation
Backport of 8a5d1a6b93 from master.
2012-08-30 07:47:56 -04:00
Tim Graham f5db3bddb3 [1.4.X] Fixed #17997 - Documented that the debug server is now multithreaded by default.
Thanks trey.smith@ for the report and vanessagomes for the patch.

Backport of e4a1407a9c from master
2012-07-05 08:40:20 -04:00
Claude Paroz ec2119e194 [1.4.X] Fixed #17963 -- Fixed internal links in the 1.4 release notes.
Backport of r17802 from trunk.


git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17816 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-29 15:07:09 +00:00
Jacob Kaplan-Moss a033d4992c Edited Django 1.4 release notes:
* Remove the "UNDER DEVELOPMENT" parts.
* Added an overview, explicitly mentioning time zone support.
* Spell/grammar check.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@17798 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-23 16:51:01 +00:00
Claude Paroz c7cc4cfb9e Fixed #16138 -- Made FormMixin get_initial return a copy of the 'initial' class variable. Thanks hanson2010, wilfred@potatolondon.com and agriffis for their work on the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17765 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-17 22:31:03 +00:00
Paul McMillan 14df122f86 Fixed #17837. Improved markdown safety.
Markdown enable_attributes is now False when safe_mode is enabled. Documented
the markdown "safe" argument. Added warnings when the safe argument is
passed to versions of markdown which cannot be made safe. Deprecated
versions of markdown < 2.1. Many thanks to ptone for the patch.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@17735 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-14 19:06:23 +00:00
Julien Phalip 01c8862abd Fixed #17891 -- Documented a small backwards incompatibility in the `password_reset` auth view. Thanks to danfairs and lukegb.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17705 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-13 21:49:48 +00:00
Claude Paroz 78638a9a51 Replaced http by https in djangoproject.com links
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17703 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-13 17:53:31 +00:00
Karen Tracey 37d0488910 Add a note to the backwards-incompatible changes section of 1.4 release notes about the change related to loading fixtures with incomplete data for auto_now and auto_now_add fields. Refs #12753. Thanks ptone.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17694 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-13 00:15:43 +00:00
Adrian Holovaty ebc6fc9354 Added note to releases/1.4.txt about contrib.auth user password hash-upgrade sequence. Thanks, ericholscher
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17687 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-12 20:14:58 +00:00
Adrian Holovaty dd246a62c7 Edited some docs and docstrings until [17685]
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17686 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-12 20:05:48 +00:00
Aymeric Augustin 21c38f9c34 Linked to the FAQ from the release notes.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17647 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-03 22:54:55 +00:00
Ramiro Morales 149e541034 Added a blurb about new SimpleTestCase class to release notes.
Also, tweaked the cross-referencing of `django.test` symbols.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@17644 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-03 21:50:49 +00:00
Adrian Holovaty 2ade1e916f Edited stuff from [17543] to [17629]
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17630 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 17:16:52 +00:00
Paul McMillan a255d39338 Fixed 17764. Improved auth docs.
Thanks mbt for the report and patch.


git-svn-id: http://code.djangoproject.com/svn/django/trunk@17620 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 05:03:52 +00:00
Paul McMillan 2a4e49595a Fixed #17766. Clarified HttpOnly flag on session cookie.
Thanks ptone for the patch!


git-svn-id: http://code.djangoproject.com/svn/django/trunk@17618 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 04:22:16 +00:00
Carl Meyer 60119d4f49 Refs #17800 - Added release notes and deprecation note about SECRET_KEY requirement.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17617 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 04:04:56 +00:00
Aymeric Augustin 26d12af6fd Fixed #17772 -- typo in the release notes.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17590 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-26 20:48:48 +00:00
Chris Beaven 0e54c23caf Fixed #17660 -- Standardize extends tag token parsing
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17568 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-21 02:59:05 +00:00
Adrian Holovaty 7981efe04f Documentation (and some small source code) edits from [17432] - [17537]
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17540 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-17 20:04:11 +00:00
Aymeric Augustin 5b37a02ba3 Used Sphinx markup for PEPs and fixed a typo in the 1.4-beta-1 release notes.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17536 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-16 18:27:42 +00:00