Commit Graph

2609 Commits

Author SHA1 Message Date
Tim Graham b749c980a0 Added CVE-2017-7233,4 to the security release archive. 2017-04-04 21:51:50 -04:00
Tim Graham 5ea48a70af Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
This is a security fix.
2017-04-04 10:42:06 -04:00
Tim Graham a1f948b468 Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
This is a security fix.
2017-04-04 10:42:06 -04:00
Tim Graham b9ebf6c0c2 Added stub release notes for security releases. 2017-04-04 10:41:57 -04:00
Sergey Fedoseev 5e710cf4a5 Fixed #11854 -- Added Azimuth GIS function. (#8286) 2017-04-02 14:24:06 -04:00
Sergey Fedoseev 24023c6a8f Fixed #25874 -- Made GEOSGeometry read SRID from GeoJSON input. 2017-04-01 15:35:30 -04:00
Sergey Fedoseev ede4f6d48c Fixed #12410 -- Added LineLocatePoint GIS function. 2017-04-01 15:02:09 -04:00
Sergey Fedoseev 0a13b249e2 Fixed #26967 -- Added MySQL support for AsGeoJSON, GeoHash, IsValid functions, and isvalid lookup. 2017-04-01 13:43:53 -04:00
Carlton Gibson 6b3724fa11 Fixed #27359 -- Made Engine.get_default() return the first DjangoTemplates engine if multiple are defined. 2017-03-31 17:26:42 -04:00
heathervm 7d1e237753 Fixed #27993 -- Fixed model form default fallback for SelectMultiple. 2017-03-31 10:10:08 -04:00
Claude Paroz 6585ebebaa Fixed #27981 -- Doc'd date/time filter l10n changes in refs #25758. 2017-03-27 12:53:03 -04:00
Mariusz Felisiak 43380e9110 Fixed #27966 -- Bumped required psycopg2 version to 2.5.4.
Thanks Tim Graham for the review.
2017-03-21 17:23:17 +01:00
Tim Graham 4224ecb74e Fixed #27949 -- Doc'd how OpenLayers 3 widgets work. 2017-03-21 10:50:48 -04:00
Tim Graham 5bd7ffc313 Updated postgis.net and gaia-gis.it links to https. 2017-03-16 14:01:45 -04:00
Brad Melin b625907a79 Fixed #27834 -- Added StrIndex database function. 2017-03-14 19:58:56 -04:00
Mariusz Felisiak 75503a823f Fixed #27924 -- Added support for cx_Oracle 5.3.
- Fixed Oracle backend due to cx_Oracle 5.3 change in the
Cursor.description behavior i.e. "Use None instead of 0 for items in
the Cursor.description attribute that do not have any validity.".
- Used cx_Oracle.Object.size() instead of len().
Thanks Tim Graham for the review.
2017-03-10 23:02:44 +01:00
Mariusz Felisiak 94d8bea212 Fixed #24365 -- Made inspectdb translate MySQL unsigned integer columns to positive integer fields. 2017-03-08 10:56:00 -05:00
Camilo Nova 5db465d5a6 Fixed #27891 -- Added PasswordResetConfirmView.post_reset_login_backend. 2017-03-07 19:52:26 -05:00
Raphael Merx 2a3a0eb092 Fixed #27905 -- Added RelatedFieldWidgetWrapper.value_omitted_from_data(). 2017-03-07 13:56:29 -05:00
Tim Graham 6c5348b9d2 Added stub release notes for 1.10.7. 2017-03-07 13:05:35 -05:00
Grzegorz Tężycki fede65260a Fixed #26911 -- Removed NoReverseMatch silencing in RedirectView. 2017-03-01 15:56:39 -05:00
Adam Johnson c1d652c62f Fixed typo in docs/releases/1.10.6.txt. 2017-03-01 10:11:32 -05:00
Tim Graham 4f22505a9f Added release date for 1.10.6. 2017-03-01 08:27:08 -05:00
Alexey Opalev 9f21e35100 Fixed #27842 -- Added protocol kwarg to GenericSitemap.__init__(). 2017-02-28 11:48:07 -05:00
Tim Graham c31e7ab5a4 Refs #25187 -- Fixed AuthBackend.authenticate() compatibility for signatures that accept a request kwarg. 2017-02-24 10:15:41 -05:00
Claude Paroz eb97af0402 Completed 1.10.6 release note 2017-02-23 10:29:38 +01:00
Claude Paroz e6065c7b83 Fixed #25619 -- Made runserver serve with HTTP 1.1 protocol
Thanks Tim Graham for the review.
2017-02-23 09:04:53 +01:00
Tim Graham 098f181e18 Refs #27851 -- Clarified that admin.site.urls can't be passed to include(). 2017-02-22 18:01:56 -05:00
Vytis Banaitis 4045fd56cb Fixed #27856 -- Improved accuracy of date subtraction on PostgreSQL.
Accuracy was incorrect when dates differ by a month or more.
2017-02-21 12:06:16 -05:00
Vytis Banaitis d5088f838d Fixed #27828 -- Fixed a crash when subtracting Integer/DurationField from DateField on Oracle/PostgreSQL. 2017-02-16 11:46:32 -05:00
Tim Graham 80493b0871 Fixed #27829 -- Deprecated settings.DEFAULT_CONTENT_TYPE. 2017-02-16 07:59:44 -05:00
amalia 2f10216f84 Fixed #27820 -- Fixed RequestDataTooBig/TooManyFieldsSent crash. 2017-02-13 16:19:03 -05:00
Mads Jensen fb5bd38e3b Refs #26610 -- Added CIText mixin and CIChar/Email/TextField. 2017-02-11 07:16:35 -05:00
Tim Graham 7b6e42089c Fixed #25978 -- Deprecated shorcuts.render_to_response(). 2017-02-11 05:49:04 -05:00
Nadège Michel bece837829 Fixed #20238 -- Added threading support to LiveServerTestCase. 2017-02-09 19:08:32 -05:00
Mariusz Felisiak 0034e9af18 Fixed #5851 -- Allowed specifying different HTML attrs for SplitDateTimeWidget subwidgets.
Thanks Tim Graham and Nick Pope for review.
2017-02-07 11:33:37 -05:00
Atul Varma 10c47f7b47 Fixed typo in docs/releases/1.11.txt. 2017-02-07 07:49:46 -05:00
Tim Graham 4353640ea9 Fixed #27805 -- Fixed ClearableFileInput's "Clear" checkbox on model fields with a default. 2017-02-06 20:31:04 -05:00
Mariusz Felisiak 15c14f6f16 Fixed #27802 -- Unified return value of db backend datetime SQL methods. 2017-02-06 09:19:13 -05:00
Charlie Denton 8b62e5df86 Fixed typo in docs/releases/2.0.txt. 2017-02-06 07:57:11 -05:00
orf b5393028bf Fixed #27767 -- Added distinct argument to ArrayAgg. 2017-02-04 13:57:39 -05:00
Tim Graham 29f607927f Fixed spelling of "nonexistent". 2017-02-03 08:01:45 -05:00
Tim Graham 924af638e4 Fixed #27683 -- Made MySQL default to the read committed isolation level.
Thanks Shai Berger for test help and Adam Johnson for review.
2017-02-01 15:34:17 -05:00
Claude Paroz 52138b1fd0 Refs #23919 -- Removed usage of obsolete SafeBytes class
The class will be removed as part of #27753.
Thanks Tim Graham for the review.
2017-01-30 15:04:45 +01:00
Thom Wiggers d5b573d872 Fixed #26993 -- Increased User.last_name max_length to 150 characters. 2017-01-28 09:29:00 -05:00
Tim Graham 0de0699d94 Fixed #27788 -- Dropped support for Oracle < 12.1. 2017-01-28 08:19:47 -05:00
Dmitry Gladkov b09faa497e Fixed #27748 -- Switched HTTP error handlers to reference callables instead of strings. 2017-01-27 16:13:40 -05:00
Claude Paroz fee42fd99e Refs #23919 -- Replaced usage of django.utils.http utilities with Python equivalents
Thanks Tim Graham for the review.
2017-01-26 19:49:03 +01:00
chillaranand dc165ec8e5 Refs #23919 -- Replaced super(ClassName, self) with super() in docs. 2017-01-25 11:53:05 -05:00
Tim Graham 3f0c4fe18f Refs #25175 -- Deprecated db.backends.postgresql_psycopg2 module. 2017-01-25 09:23:04 -05:00