Tim Graham
30042d475b
[1.4.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names.
...
This is a security fix. Disclosure following shortly.
2014-08-11 10:14:06 -04:00
Florian Apolloner
c2fe73133b
[1.4.x] Prevented reverse() from generating URLs pointing to other hosts.
...
This is a security fix. Disclosure following shortly.
2014-08-11 09:04:23 -04:00
Tim Graham
4d5e972a2c
[1.4.x] Added release note stub for 1.4.14.
2014-08-11 08:47:06 -04:00
Tim Graham
d39fcff11a
[1.4.x] Minor edits to latest release notes.
...
Backport of 860d31ac7a
from master
2014-05-15 07:17:54 -04:00
Jacob Kaplan-Moss
fe5b3e36a2
Added release notes for 1.4.13.
2014-05-14 18:07:32 +02:00
Tim Graham
e1812617cf
[1.4.x] Added dates to release notes of today's release.
...
Backport of 68d264059a
from master
2014-04-28 19:07:51 -04:00
Tim Graham
b91c385e32
[1.4.x] Fixed #22486 -- Restored the ability to reverse views created using functools.partial.
...
Regression in 8b93b31
.
Thanks rcoup for the report.
Backport of 3c06b2f2a3
from master
2014-04-23 09:22:02 -04:00
Erik Romijn
8010908313
[1.4.x] Added information on resolved security issues to release notes.
...
Backport of c07f3e60c2
from master
2014-04-21 18:31:44 -04:00
Tim Graham
f2a9f71565
[1.4.x] Updated six to 1.6.1.
...
Backport of 2ec82c7387
from master
2014-03-24 07:35:13 -04:00
Tim Graham
74181c0a2c
[1.4.x] Added release note stub for 1.4.11.
...
Backport of dfa28981ce
from master.
2014-01-26 17:50:12 -05:00
Tim Graham
c5d071f85a
[1.4.x] Added 1.4.10 release notes to index.
2013-11-07 09:38:53 -05:00
James Bennett
30eb916bdb
[1.4.x] Bump version info and add release notes for 1.4.10.
2013-11-06 08:17:26 -06:00
Paolo Melchiorre
d491702ed7
[1.4.x] Fixed typo in docs/releases/1.4.9.txt.
...
Backport of 3b0293370a
from master
2013-10-25 07:55:50 -04:00
James Bennett
8f36d1fd95
[1.4.x] Bump everything for 1.4.9 bugfix release.
2013-10-24 23:37:26 -05:00
Tim Graham
3a46f621fe
[1.4.x] Bumped release date for 1.5.5 & 1.4.9.
...
Backport of 4ce5c119b5
from master
2013-10-23 18:29:53 -04:00
Tim Graham
ead7c496a4
[1.4.x] Added 1.4.9 release notes
...
Backport of 2eb8f15516
from master
2013-10-22 20:25:20 -04:00
Tim Graham
ca77e38d24
[1.4.x] Cleaned up 1.4.8 release notes
...
Backport of 8d29005524
from master
2013-09-15 14:29:40 -04:00
James Bennett
3ffc7b52f8
[1.4.x] Add release notes and bump version numbers for 1.4.8 security release.
2013-09-14 23:53:07 -06:00
Tim Graham
d1dc8a0d00
Added 1.4.7 release notes
...
Backport of baec6a26dd
from master
2013-09-10 21:09:47 -04:00
Tim Graham
d77ce64fe8
[1.4.x] Removed 1.5.2 release notes
2013-08-13 13:15:54 -04:00
Tim Graham
e61e20e497
Added 1.4.6/1.5.2 release notes.
2013-08-13 11:18:07 -05:00
Tim Graham
b50be6857c
[1.4.x] Added missing release notes for older versions of Django
...
Backport of 3f6cc33cff
from master
2013-08-12 14:11:10 -04:00
Tim Graham
7b7592cafa
[1.4.x] Fixed #18944 -- Documented PasswordResetForm's from_email argument as a backwards incompatible change for 1.3
...
Thanks DrMeers for the report.
Backport of dab921751d
from master
2013-07-08 15:06:45 -04:00
Carl Meyer
5d1791ffd2
[1.4.x] Don't characterize XML vulnerabilities as DoS-only.
2013-02-19 18:22:22 -07:00
Carl Meyer
62d5338bf2
[1.4.x] Update 1.4.4 release notes for all security fixes.
2013-02-19 11:48:46 -07:00
Carl Meyer
9936fdb11d
[1.4.x] Added ALLOWED_HOSTS setting for HTTP host header validation.
...
This is a security fix; disclosure and advisory coming shortly.
2013-02-19 10:37:54 -07:00
Preston Holmes
e86e4ce0bd
Added 1.4.2 release notes
2012-10-21 07:50:30 -07:00
Claude Paroz
92f7af3c36
[1.4.x] Fixed #18212 -- Standardized arguments of GenericIPAddressField
...
Unlike other model fields, the newly introduced (1.4)
GenericIPAddressField did not accept verbose_name and name as the
first positional arguments. This commit fixes it.
Thanks Dan McGee for the report and the patch.
Backport of 306d34873c
from master.
2012-09-01 18:39:51 +02:00
Claude Paroz
f6159d426b
[1.4.x] Added 1.4.1 and 1.3.2 release notes
...
Backport of 44f541ab47
from master.
2012-08-31 20:38:12 +02:00
Claude Paroz
b8340d26e4
[1.4.x] Updated obsolete links in the documentation
...
Backport of 8a5d1a6b93
from master.
2012-08-30 07:47:56 -04:00
Tim Graham
f5db3bddb3
[1.4.X] Fixed #17997 - Documented that the debug server is now multithreaded by default.
...
Thanks trey.smith@ for the report and vanessagomes for the patch.
Backport of e4a1407a9c
from master
2012-07-05 08:40:20 -04:00
Claude Paroz
ec2119e194
[1.4.X] Fixed #17963 -- Fixed internal links in the 1.4 release notes.
...
Backport of r17802 from trunk.
git-svn-id: http://code.djangoproject.com/svn/django/branches/releases/1.4.X@17816 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-29 15:07:09 +00:00
Jacob Kaplan-Moss
a033d4992c
Edited Django 1.4 release notes:
...
* Remove the "UNDER DEVELOPMENT" parts.
* Added an overview, explicitly mentioning time zone support.
* Spell/grammar check.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17798 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-23 16:51:01 +00:00
Claude Paroz
c7cc4cfb9e
Fixed #16138 -- Made FormMixin get_initial return a copy of the 'initial' class variable. Thanks hanson2010, wilfred@potatolondon.com and agriffis for their work on the patch.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17765 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-17 22:31:03 +00:00
Paul McMillan
14df122f86
Fixed #17837 . Improved markdown safety.
...
Markdown enable_attributes is now False when safe_mode is enabled. Documented
the markdown "safe" argument. Added warnings when the safe argument is
passed to versions of markdown which cannot be made safe. Deprecated
versions of markdown < 2.1. Many thanks to ptone for the patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17735 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-14 19:06:23 +00:00
Julien Phalip
01c8862abd
Fixed #17891 -- Documented a small backwards incompatibility in the `password_reset` auth view. Thanks to danfairs and lukegb.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17705 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-13 21:49:48 +00:00
Claude Paroz
78638a9a51
Replaced http by https in djangoproject.com links
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17703 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-13 17:53:31 +00:00
Karen Tracey
37d0488910
Add a note to the backwards-incompatible changes section of 1.4 release notes about the change related to loading fixtures with incomplete data for auto_now and auto_now_add fields. Refs #12753 . Thanks ptone.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17694 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-13 00:15:43 +00:00
Adrian Holovaty
ebc6fc9354
Added note to releases/1.4.txt about contrib.auth user password hash-upgrade sequence. Thanks, ericholscher
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17687 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-12 20:14:58 +00:00
Adrian Holovaty
dd246a62c7
Edited some docs and docstrings until [17685]
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17686 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-12 20:05:48 +00:00
Aymeric Augustin
21c38f9c34
Linked to the FAQ from the release notes.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17647 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-03 22:54:55 +00:00
Ramiro Morales
149e541034
Added a blurb about new SimpleTestCase class to release notes.
...
Also, tweaked the cross-referencing of `django.test` symbols.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17644 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-03 21:50:49 +00:00
Adrian Holovaty
2ade1e916f
Edited stuff from [17543] to [17629]
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17630 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 17:16:52 +00:00
Paul McMillan
a255d39338
Fixed 17764. Improved auth docs.
...
Thanks mbt for the report and patch.
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17620 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 05:03:52 +00:00
Paul McMillan
2a4e49595a
Fixed #17766 . Clarified HttpOnly flag on session cookie.
...
Thanks ptone for the patch!
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17618 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 04:22:16 +00:00
Carl Meyer
60119d4f49
Refs #17800 - Added release notes and deprecation note about SECRET_KEY requirement.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17617 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-03-02 04:04:56 +00:00
Aymeric Augustin
26d12af6fd
Fixed #17772 -- typo in the release notes.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17590 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-26 20:48:48 +00:00
Chris Beaven
0e54c23caf
Fixed #17660 -- Standardize extends tag token parsing
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17568 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-21 02:59:05 +00:00
Adrian Holovaty
7981efe04f
Documentation (and some small source code) edits from [17432] - [17537]
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17540 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-17 20:04:11 +00:00
Aymeric Augustin
5b37a02ba3
Used Sphinx markup for PEPs and fixed a typo in the 1.4-beta-1 release notes.
...
git-svn-id: http://code.djangoproject.com/svn/django/trunk@17536 bcc190cf-cafb-0310-a4f2-bffc1f526a37
2012-02-16 18:27:42 +00:00