76ccce64cc
Fixed #16063 -- Adjusted admin changelist searches spanning multi-valued relationships.
...
This reduces the likelihood of admin searches issuing queries with
excessive joins.
2021-12-15 08:14:19 +01:00
669dcefc04
Fixed #33338 -- Doc'd that never_cache() decorator set Expires header.
2021-12-13 15:34:19 +01:00
7e4a9a9f69
Corrected example in models.DecimalField docs.
2021-12-13 07:20:35 +01:00
8a8c8797e8
Updated link to Microsoft SQL Server backend.
2021-12-13 07:17:05 +01:00
eba9a9b7f7
Refs #32338 -- Added Boundfield.legend_tag().
2021-12-09 07:16:33 +01:00
f04b44bad4
Refs #33319 -- Added note about commutation of QuerySet's | operator.
2021-12-08 21:16:24 +01:00
8a4e506760
Fixed #19721 -- Allowed admin filters to customize the list separator.
2021-12-08 15:25:52 +01:00
2b76f45749
Refs #19721 -- Corrected list formatting in admin filters docs.
2021-12-08 14:27:53 +01:00
1eaf38fa87
Fixed #33335 -- Made model validation ignore functional unique constraints.
...
Regression in 3aa545281e
2021-12-06 07:59:11 +01:00
d75c387f46
Fixed #33334 -- Alphabetized form and model fields in reference docs.
2021-12-02 08:33:26 +01:00
4ce59f602e
Fixed #30398 -- Added CONN_HEALTH_CHECKS database setting.
...
The CONN_HEALTH_CHECKS setting can be used to enable database
connection health checks for Django's persistent DB connections.
Thanks Florian Apolloner for reviews.
2021-12-01 07:44:48 +01:00
5d80843ebc
Fixed #32800 -- Changed CsrfViewMiddleware not to mask the CSRF secret.
...
This also adds CSRF_COOKIE_MASKED transitional setting helpful in
migrating multiple instance of the same project to Django 4.1+.
Thanks Florian Apolloner and Shai Berger for reviews.
Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-11-29 10:47:39 +01:00
aec71aaa5b
Fixed #33304 -- Allowed passing string expressions to Window(order_by).
2021-11-23 07:58:44 +01:00
a17becf4c7
Corrected signatures of QuerySet's methods.
2021-11-23 07:04:04 +01:00
e6e664a711
Fixed #33302 -- Made element_id optional argument for json_script template filter.
...
Added versionchanged note in documentation
2021-11-22 11:52:19 +01:00
e53aea2e23
Refs #19721 -- Moved ModelAdmin.list_filter docs into a separate file.
...
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>
2021-11-18 14:01:04 +01:00
ba9ced3e9a
Fixed #33253 -- Reverted "Fixed #32319 -- Added ES module support to ManifestStaticFilesStorage."
...
This reverts commit 91e21836f6
2021-11-05 12:11:18 +01:00
fc565cb539
Fixed #27147 -- Allowed specifying bounds of tuple inputs for non-discrete range fields.
2021-11-04 19:08:57 +01:00
125f9afc2c
Added Google Cloud Spanner to list of third-party DB backends.
2021-11-01 08:47:41 +01:00
a754b82dac
Refs #33182 -- Adjusted custom admin theming example to use correct template block.
2021-10-27 10:35:02 +02:00
3f1f8b9376
Fixed #33182 -- Moved admin dark mode vars to separate stylesheet and template block.
2021-10-27 10:34:01 +02:00
9231526af4
Fixed #33215 -- Confirmed support for GEOS 3.10.
2021-10-21 20:23:58 +02:00
1405dc7887
Fixed #33210 -- Clarified docs for sitemaps ping_google() helper.
2021-10-21 16:22:25 +02:00
480191244d
Fixed #25916 -- Added lastmod support to sitemap index view.
...
Co-authored-by: Matthew Downey <matthew.downey@webit.com.au>
2021-10-21 15:26:22 +02:00
004b4620f6
Fixed #32987 -- Added system check for template tag modules with the same name.
...
Co-authored-by: Daniel Fairhead <daniel@dev.ngo>
2021-10-20 11:15:47 +02:00
7ef0bc922c
Refs #32956 -- Capitalized HTTP/HTTPS in comments, docs, and docstrings.
2021-10-20 08:40:19 +02:00
69b0736fad
Refs #32956 -- Changed docs to treat the acronym HTTP phonetically.
2021-10-18 21:00:28 +02:00
0d4e575c96
Fixed #33198 -- Corrected BinaryField.max_length docs.
2021-10-18 07:27:00 +02:00
30d8932753
Doc'd a precise exception type in Paginator.page() docs.
2021-10-13 08:46:46 +02:00
bf4be3711a
Improved docs regarding UTF-8 support with Apache and mod_wsgi.
2021-10-08 12:26:06 +02:00
9be36f8044
Refs #31026 -- Improved BoundField.label_tag() docs.
2021-10-06 20:30:53 +02:00
2116238d5f
Fixed #33131 -- Improved error messages for clashing reverse accessor names.
2021-10-06 12:33:15 +02:00
cd6bddd44e
Fixed #22224 -- Added note about supplying missing values for non-nullable fields with blank=True.
2021-10-05 06:09:54 +02:00
d400b08a8b
Fixed #32888 -- Doc'd that select_for_update() only locks tables with selected columns.
2021-10-04 10:20:34 +02:00
1953dd02b6
Refs #27694 -- Doc'd lookups that can be chained with HStoreField key transforms.
2021-10-04 07:18:16 +02:00
c2f6c05c4c
Refs #32943 -- Added support for covering exclusion constraints using SP-GiST indexes on PostgreSQL 14+.
2021-10-01 13:11:37 +02:00
e76f9d5b44
Refs #32943 -- Added support for covering SP-GiST indexes on PostgreSQL 14+.
2021-10-01 13:11:34 +02:00
bd47b9bc81
Fixed #32961 -- Added BitXor() aggregate to django.contrib.postgres.
2021-10-01 10:32:39 +02:00
ad36a198a1
Fixed #33141 -- Renamed Expression.empty_aggregate_value to empty_result_set_value.
2021-09-29 12:58:01 +02:00
93f3b7a0ba
Corrected field and model check messages in docs.
...
Follow up to 72d04e0385
2021-09-28 10:57:16 +02:00
4ffada3609
Fixed #33136 -- Added GEOSGeometry.make_valid() method.
2021-09-27 09:58:28 +02:00
8036b53de6
Removed obsolete GEOS 3.5 requirement note.
...
Follow up to ea87a85fad
2021-09-24 18:52:08 +02:00
221b2f85fe
Fixed #33129 -- Dropped support for MariaDB 10.2.
2021-09-22 11:57:54 +02:00
1d16dbc745
Fixed broken links and redirects in docs.
2021-09-21 09:27:44 +02:00
d25710a625
Refs #31670 -- Removed whitelist argument and domain_whitelist attribute in EmailValidator per deprecation timeline.
2021-09-20 21:23:01 +02:00
97237ad3fe
Removed versionadded/changed annotations for 3.2.
2021-09-20 21:23:01 +02:00
456466d932
Fixed #31026 -- Switched form rendering to template engine.
...
Thanks Carlton Gibson, Keryn Knight, Mariusz Felisiak, and Nick Pope
for reviews.
Co-authored-by: Johannes Hoppe <info@johanneshoppe.com>
2021-09-20 15:50:18 +02:00
ef4ef3b8f5
Fixed #32504 -- Updated admin's jQuery to 3.6.0.
2021-09-20 06:54:35 +02:00
4e4082f939
Fixed #32492 -- Added TrigramWordSimilarity() and TrigramWordDistance() on PostgreSQL.
2021-09-17 13:05:15 +02:00
4555aa0a48
Fixed #27674 -- Deprecated GeoModelAdmin and OSMGeoAdmin.
...
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-09-17 08:56:16 +02:00
b5bf026813
Corrected outputs and made cosmetic edits in GeoDjango tutorial.
2021-09-17 08:56:16 +02:00
306607d5b9
Fixed #32365 -- Made zoneinfo the default timezone implementation.
...
Thanks to Adam Johnson, Aymeric Augustin, David Smith, Mariusz Felisiak, Nick
Pope, and Paul Ganssle for reviews.
2021-09-16 12:11:05 +02:00
7132d17de1
Doc'd Jinja2 form renderer.
2021-09-16 11:25:00 +02:00
ec212c6616
Fixed #33012 -- Added Redis cache backend.
...
Thanks Carlton Gibson, Chris Jerdonek, David Smith, Keryn Knight,
Mariusz Felisiak, and Nick Pope for reviews and mentoring this
Google Summer of Code 2021 project.
2021-09-14 15:50:08 +02:00
676bd084f2
Fixed #32873 -- Deprecated settings.USE_L10N.
...
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-09-14 12:05:43 +02:00
691b8dd8ed
Made CSRF JavaScript example more reusable.
2021-09-13 06:36:27 +02:00
ecf76cc1fb
Clarified type of Window()'s partition_by and order_by arguments.
2021-09-10 11:49:51 +02:00
0a28b42b15
Fixed #33084 -- Removed incorrect system check for ManyToManyField with limit_choices_to.
2021-09-09 12:07:59 +02:00
46c8df640c
Fixed #32219 -- Made InlineModelAdmin.verbose_name_plural fallback to its verbose_name.
2021-09-08 13:20:13 +02:00
4a43335d30
Fixed #30086 , Refs #32873 -- Made floatformat template filter independent of USE_L10N.
2021-09-08 08:37:27 +02:00
f1d2d2679b
Fixed #33067 -- Improved templatetag docs.
2021-09-03 20:08:01 +02:00
84c7c4a477
Fixed #32309 -- Added --exclude option to startapp/startproject management commands.
2021-09-01 12:08:02 +02:00
3cca5fdd3e
Refs #25264 -- Doc's that not all default options are supported by every management command.
2021-08-31 10:45:40 +02:00
5942ab5eb1
Refs #32338 -- Made RadioSelect/CheckboxSelectMultiple render in <div> tags.
...
This improves accessibility for screen reader users.
2021-08-27 06:14:01 +02:00
a5cb1ef6eb
Corrected BaseDatabaseSchemaEditor.execute() signature in docs.
2021-08-27 06:12:53 +02:00
7ea86076fc
Fixed #33046 -- Added note about using length of cached result by QuerySet.count().
2021-08-26 06:48:33 +02:00
36714be874
Refs #31621 -- Fixed handling --parallel option in test management command and runtests.py.
...
Regression in ae89daf46f
2021-08-19 09:18:32 +02:00
c23aa73626
Fixed #32964 -- Corrected 'setup'/'set up' usage in docs.
2021-08-17 12:18:07 +02:00
6c3525a09d
The geodjango mailing list moved to the Django Forum.
2021-08-13 15:34:27 +02:00
8208381ba6
Refs #32956 -- Corrected spelling of daylight saving time.
...
AP Stylebook: Saving not savings, no hyphen, and lowercase.
2021-08-06 13:00:24 +02:00
5d4f21b16f
Fixed #32983 -- Added system check for redundant related_name on symmetrical M2M fields.
...
Since ManyToManyFields defined with `symmetrical=True` do not add a
related field to the target model, including a `related_name` argument
will never do what the coder likely expects. This makes including
a related_name with a symmetrical model raise a system check warning.
ticket-32983
2021-08-06 11:57:02 +02:00
d3c4696596
Fixed #27590 -- Allowed customizing a manifest file storage in ManifestFilesMixin.
2021-08-05 12:40:34 +02:00
ae89daf46f
Fixed #31621 -- Added support for '--parallel auto' to test management command.
2021-08-03 09:57:04 +02:00
fbb1984046
Refs #32956 -- Updated words ending in -wards.
...
AP styleguide: Virtually none of the words ending with -wards end with
an s.
2021-07-30 20:34:50 +02:00
85d47a58bf
Made minor edits to QuerySet.update_or_create() docs.
2021-07-29 06:51:09 +02:00
1024b5e74a
Fixed 32956 -- Lowercased spelling of "web" and "web framework" where appropriate.
2021-07-29 06:24:12 +02:00
c258918a03
Fixed typo in docs/ref/contrib/admin/index.txt.
2021-07-28 12:20:17 +02:00
6559a55eed
Fixed #32933 -- Documented BoundField.initial as preferred over Form.get_initial_for_field().
2021-07-27 16:47:09 +02:00
1cba320786
Refs #32956 -- Changed "afterwards" to "afterward" in docs and comments.
...
This also removes unnecessary comments with the previous spelling.
AP Stylebook has a short entry to advise the preferred spelling for
"en-us". "Afterwards" is preferred in British English.
2021-07-27 10:41:51 +02:00
5a634a7b6f
Fixed #32906 -- Added docs and tests for using key and index lookups on JSONBAgg results.
...
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-07-26 11:23:51 +02:00
f876c7d08e
Fixed #32957 -- Improved visibility of arguments sections in Model.save() docs.
2021-07-26 07:23:01 +02:00
019424e44e
Fixed #32950 -- Removed myproject from imports in admin docs where appropriate.
2021-07-23 06:19:02 +02:00
fee8734596
Refs #10929 -- Deprecated forced empty result value for PostgreSQL aggregates.
...
This deprecates forcing a return value for ArrayAgg, JSONBAgg, and
StringAgg when there are no rows in the query. Now that we have a
``default`` argument for aggregates, we want to revert to returning the
default of ``None`` which most aggregate functions return and leave it
up to the user to decide what they want to be returned by default.
2021-07-19 13:41:16 +02:00
501a8db465
Fixed #10929 -- Added default argument to aggregates.
...
Thanks to Simon Charette and Adam Johnson for the reviews.
2021-07-19 13:04:27 +02:00
37ec8721df
Fixed #32942 -- Confirmed support for PostGIS 3.1.
2021-07-19 06:49:41 +02:00
66058c5758
Fixed typo in docs/ref/databases.txt.
2021-07-19 06:10:34 +02:00
f51a792c41
Fixed #32928 -- Confirmed support for GDAL 3.3.
2021-07-16 09:36:53 +02:00
7f33c1e22d
Added note about zero timeout in cache settings docs.
2021-07-14 20:28:21 +02:00
3a45fea083
Fixed #21936 -- Allowed DeleteView to work with custom Forms and SuccessMessageMixin.
...
Thanks to Mariusz Felisiak for review.
Co-authored-by: Demetris Stavrou <demestav@gmail.com>
Co-authored-by: Caroline Simpson <github@hoojiboo.com>
2021-07-14 09:47:03 +02:00
f5669fd7b5
Fixed #32899 -- Added note about avoiding non-dict objects in JsonResponse docs.
...
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-07-13 10:25:03 +02:00
013a1824d3
Refs #32880 -- Created a new logging how-to document.
...
Moved how-to material from topic document into a new document, and
added new material. Introduced minor improvements to logging
reference document.
2021-07-12 09:04:25 +02:00
6f60fa97b0
Fixed typo in docs/ref/contrib/gis/tutorial.txt.
2021-07-09 20:17:16 +02:00
f42ccdd835
Fixed #27021 -- Allowed lookup expressions in annotations, aggregations, and QuerySet.filter().
...
Thanks Hannes Ljungberg and Simon Charette for reviews.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-07-09 11:43:06 +02:00
90ba716bf0
Fixed #24522 -- Added a --shuffle option to DiscoverRunner.
2021-07-08 07:29:04 +02:00
77b88fe621
Fixed #32908 -- Allowed select_for_update(skip_locked) on MariaDB 10.6+.
2021-07-08 06:51:10 +02:00
7309393c3a
Documented in_bulk behavior with nonexistent id_list items.
...
Co-authored-by: Jacob Walls <jacobtylerwalls@gmail.com>
2021-07-07 10:13:32 +02:00
a06b977a91
Fixed #32776 -- Added support for Array subqueries on PostgreSQL.
2021-07-06 07:36:52 +02:00
fa35c8bdbc
Fixed #30934 -- Included database alias in django.db.backends log messages.
...
This is useful when working with database routing as you want to know
where each query is being executed.
Co-authored-by: David Winterbottom <david.winterbottom@gmail.com>
2021-07-02 15:36:53 +02:00
9f3cce172f
Refs #26430 -- Re-introduced empty aggregation optimization.
...
The introduction of the Expression.empty_aggregate_value interface
allows the compilation stage to enable the EmptyResultSet optimization
if all the aggregates expressions implement it.
This also removes unnecessary RegrCount/Count.convert_value() methods.
Disabling the empty result set aggregation optimization when it wasn't
appropriate prevented None returned for a Count aggregation value.
Thanks Nick Pope for the review.
2021-07-02 07:25:42 +02:00
775f7506d7
Fixed #32850 -- Doc'd Sitemap.paginator.
2021-06-30 20:11:49 +02:00
e3d55eeb14
Refs #32880 -- Moved logging reference to new document.
...
Completed a first step in moving reference and how-to material out of
the topic document.
2021-06-30 07:21:52 +02:00
cd124295d8
Fixed #32381 -- Made QuerySet.bulk_update() return the number of objects updated.
...
Co-authored-by: Diego Lima <diego.lima@lais.huol.ufrn.br>
2021-06-29 06:58:46 +02:00
3e73c65ffc
Fixed #32195 -- Added system check for invalid view in path() and improved error messages.
2021-06-09 09:06:42 +02:00
8c3bd0b708
Fixed #31653 -- Added AddConstraintNotValid()/ValidateConstraint() operations for PostgreSQL.
2021-06-08 07:46:51 +02:00
d8c17aa10c
Refs #32338 -- Improved accessibility of RadioSelect examples in docs.
...
Co-authored-by: Thibaud Colas <thibaudcolas@gmail.com>
2021-06-04 08:28:25 +02:00
f0d0d29f03
Fixed typos in docs.
2021-06-03 07:49:50 +02:00
91e21836f6
Fixed #32319 -- Added ES module support to ManifestStaticFilesStorage.
2021-05-31 11:09:48 +02:00
5685b7cd73
Fixed typos in comments and docs.
2021-05-29 12:51:14 +02:00
1143f3bb5e
Fixed #32543 -- Added search_help_text to ModelAdmin.
2021-05-26 10:20:13 +02:00
7cca22964c
Fixed #32375 -- Started deprecation toward changing the default sitemap protocol to https.
...
The default sitemap protocol, when it is built outside the context of
a request, will be changed from 'http' to 'https' in Django 5.0.
2021-05-21 11:00:54 +02:00
66491f08fe
Changed IRC references to Libera.Chat.
2021-05-20 12:23:36 +02:00
fa4e963ee7
Doc'd that HttpRequest.path doesn't contain a query string.
2021-05-19 11:23:56 +02:00
dacc307d93
Fixed typo in docs/ref/contrib/admin/index.txt.
2021-05-19 07:28:56 +02:00
8cd55021bc
Fixed #32379 -- Started deprecation toward changing default USE_TZ to True.
...
Co-authored-by: Nick Pope <nick@nickpope.me.uk>
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2021-05-18 20:26:44 +02:00
27d4573d35
Fixed #32755 -- Corrected Model.get_absolute_url() example in docs.
2021-05-18 11:30:38 +02:00
c156e36955
Refs #32720 -- Updated various links in docs to avoid redirects and use HTTPS.
2021-05-17 09:46:09 +02:00
7c4ee487c7
Refs #32720 -- Fixed some broken links in docs.
2021-05-17 09:22:17 +02:00
3733ae8957
Fixed #32031 -- Added model class for each model to AdminSite.each_context().
2021-05-13 06:57:09 +02:00
88b3982af3
Fixed a typo in docs/ref/models/fields.txt.
...
datetime.date.utcnow() doesn't exist, should be .today().
2021-05-12 11:06:29 +02:00
34363a391b
Fixed #32735 -- Made DateFormat.Y() return a zero-padded year.
2021-05-12 08:17:06 +02:00
205c36b58f
Fixed #32670 -- Allowed GDALRasters to use any GDAL virtual filesystem.
2021-05-07 20:03:46 +02:00
54da6e2ac2
Fixed #32678 -- Removed SECURE_BROWSER_XSS_FILTER setting.
2021-04-30 12:32:52 +02:00
2161db0792
Fixed capitalization of "ECMAScript" and "JavaScript".
2021-04-29 20:29:08 +02:00
907d3a7ff4
Refs #32674 -- Noted that auto-created through table PKs cannot be automatically migrated.
2021-04-29 13:53:56 +02:00
68e876c095
Corrected introduction to range field lookups docs.
...
Follow up to 24b9f50823
2021-04-28 20:35:05 +02:00
cd74aad90e
Refs #32682 -- Renamed use_distinct variable to may_have_duplicates.
...
QuerySet.distinct() is not the only way to avoid duplicate, it's also
not preferred.
2021-04-27 10:34:47 +02:00
3fec16e8ac
Fixed #32574 -- Confirmed support for PROJ 8.x.
2021-04-19 20:13:43 +02:00
725ca1fb60
Corrected File, ContentFile, and ImageFile signatures in docs.
2021-04-16 06:17:45 +02:00
ca98729055
Fixed #32645 -- Fixed QuerySet.update() crash when ordered by joined fields on MySQL/MariaDB.
...
Thanks Matt Westcott for the report.
Regression in 779e615e36
2021-04-14 21:11:17 +02:00
30e123ed35
Fixed #32575 -- Added support for SpatiaLite 5.
2021-04-08 09:36:29 +02:00
b9d156761f
Refs #31578 -- Removed outdated notes about MyISAM in GIS docs.
...
InnoDB supports spatial data types in MySQL 5.7+ and MariaDB 10.2+.
2021-04-08 09:31:57 +02:00
dc824e2668
Refs #27488 -- Corrected detection of IsValid() support on SpatiaLite.
...
LWGEOM is not required for IsValid().
2021-04-08 09:31:16 +02:00
3ae4344bbd
Dropped support for GEOS 3.5 and GDAL 2.0.
2021-04-07 20:39:30 +02:00
98abc0c90e
Fixed #32501 -- Added support for returning fields from INSERT statements on SQLite 3.35+.
2021-04-07 20:09:56 +02:00
e3cfba0029
Fixed #32544 -- Confirmed support for GDAL 3.2 and GEOS 3.9.
2021-04-07 15:54:24 +02:00
da542ccab6
Refs #30156 -- Corrected version in SpatiaLite install instructions.
2021-04-06 12:44:40 +02:00
e32722d160
Fixed #32383 -- Added source map support to ManifestStaticFilesStorage.
2021-04-02 12:21:21 +02:00
db5b75f10f
Fixed #31840 -- Added support for Cross-Origin Opener Policy header.
...
Thanks Adam Johnson and Tim Graham for the reviews.
Co-authored-by: Tim Graham <timograham@gmail.com>
2021-03-30 19:59:24 +02:00
038940cf55
Fixed #29127 -- Prevented DiscoverRunner from hiding tagged test with syntax errors.
...
This mades _FailedTest objects always match tags in DiscoverRunner.
2021-03-30 10:26:20 +02:00
2f13c476ab
Fixed #31487 -- Added precision argument to Round().
2021-03-29 09:43:08 +02:00
0860db225a
Fixed #32580 -- Doc'd that HttpRequest.get_host() may raise DisallowedHost.
2021-03-26 07:35:34 +01:00
cac9ec73db
Refs #31003 -- Moved note about return value of QuerySet.bulk_create() to the first paragraph.
2021-03-25 17:46:22 +01:00
e53159747c
Doc'd that RawSQL can be used with __in.
2021-03-25 10:28:20 +01:00
41e39c41c9
Refs #32460 -- Doc'd and tested that property names of model choice enums cannot be used as members.
2021-03-24 07:45:33 +01:00
4894a97578
Fixed page numbers in Paginator.get_elided_page_range() example in docs.
2021-03-24 07:35:24 +01:00
71ec102b01
Fixed #32483 -- Fixed QuerySet.values()/values_list() on JSONField key transforms with booleans on SQLite.
...
Thanks Matthew Cornell for the report.
2021-03-23 08:28:47 +01:00
cf2f6fc558
Fixed #32576 -- Corrected dumpdata docs for passing model names to the --exclude option.
2021-03-22 08:43:56 +01:00
d40402cfb0
Fixed #32570 -- Removed unnecessary default_auto_field in app config example.
2021-03-19 12:08:46 +01:00
2411b8b5eb
Fixed #16010 -- Added Origin header checking to CSRF middleware.
...
Thanks David Benjamin for the original patch, and Florian
Apolloner, Chris Jerdonek, and Adam Johnson for reviews.
2021-03-18 20:25:20 +01:00
dba44a7a7a
Refs #16010 -- Required CSRF_TRUSTED_ORIGINS setting to include the scheme.
2021-03-18 20:00:22 +01:00
Jacob Walls
mgaligniana
Beomsoo Kim
Wayne Lambert
David Smith
Ömer Faruk Abacı
Shreya Bamne
Hannes Ljungberg
Shivam Durgbuns
Przemysław Suliga
Chris Jerdonek
Simon Charette
Mariusz Felisiak
Baptiste Mispelon
Guilherme Martins Crocetti
Vikash Singh
Carlton Gibson
Matteo Vitali
Arkadiusz Adamski
Nick Frazier
Sih Sîng-hông薛丞宏
Bernd Wechner
Hannes Ljungberg
Sarah Abderemane
Nick Pope
David Wobrock
Claude Paroz
Nikita Marchant
Giannis Adamopoulos
Daniyal
sdwoodbury
David Sanders
Hasan Ramezani
Siburg
Muhammad Hammad
sage
Jan Szoja
Can Sarıgöl
Andrew Northall
Nick Touran
Jarosław Wygoda
Adam Johnson
David Smith
Abhyudai
Pēteris Caune
Daniele Procida
Wille Marcel
Ian Foote
Thomas Guettler
Angus Holder
Sanskar Jaiswal
Gildardo Adrian Maravilla Jacome
David Sanders
Rohith PR
David D Lowe
Girish Sontakke
Raffaele Salmaso
Jordi Castells
Tim Graham
girishsontakke
bankc
Nick Pope
sreehari1997
Simon Willison
Jannis Vajen
tim-mccurrach
kshitijraghav