Django/django
11
0
Fork 0
Code Pull Requests Projects Releases Activity
30,161 Commits 26 Branches 382 Tags
Commit Graph

30161 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Markus Holtermann
0142204606 [4.0.x] Fixed CVE-2022-22818 -- Fixed possible XSS via {% debug %} template tag. 
Thanks Keryn Knight for the report.

Backport of 394517f07886495efcf79f95c7ee402a9437bd68 from main.

Co-authored-by: Adam Johnson <me@adamj.eu>
 2022-02-01 07:43:45 +01:00
Kirill Safronov
6928227dff [4.0.x] Fixed #33480 -- Fixed makemigrations crash when renaming field of renamed model. 
Regression in aa4acc164d1247c0de515c959f7b09648b57dc42.

Backport of 97a72744681d0993b50dee952cf32cdf9650ad9f from main
 2022-02-01 07:33:22 +01:00
Mariusz Felisiak
aff79be03a [4.0.x] Fixed #33468 -- Fixed QuerySet.aggregate() after annotate() crash on aggregates with default. 
Thanks Adam Johnson for the report.
Backport of 71e7c8e73712419626f1c2b6ec036e8559a2d667 from main
 2022-01-31 11:34:29 +01:00
Claude Paroz
7a1c6533eb
[4.0.x] Updated translations from Transifex. 
Updated Bulgarian, Czech, German, Uzbek, and Vietnamese translations.
 2022-01-29 18:59:17 +01:00
Thomas Aglassinger
9a9c5b402b [4.0.x] Fixed #33459 -- Clarified index type in full text search docs. 
Backport of 3a9b8b25d48c5768633e73edc5ddca20c3fd716c from main
 2022-01-28 06:37:14 +01:00
Mariusz Felisiak
7c2d4d943b [4.0.x] Fixed #33462 -- Fixed migration crash when altering type of primary key with MTI and foreign key. 
This prevents duplicated operations when altering type of primary key
with MTI and foreign key. Previously, a foreign key to the base model
was added twice, once directly and once by the inheritance model.

Thanks bcail for the report.

Regression in 325d7710ce9f6155bb55610ad6b4580d31263557.
Backport of e972620ada4f9ed7bc57f28e133e85c85b0a7b20 from main
 2022-01-27 18:52:35 +01:00
Kaushik Chintam
f4de87038e [4.0.x] Fixed #33048 -- Doc'd that DEBUG static files requests don't use middleware chain. 
Backport of 1625a8c8eba0b00ebdd1d7a8ba697b2729ec40ed from main
 2022-01-26 12:02:43 +01:00
Carlton Gibson
f82ca84f77 [4.0.x] Fixed #33407 -- Fixed .radiolist admin CSS. 
Regression in 5942ab5eb165ee2e759174e297148a40dd855920.

Backport of 85f2a9fb0f0973930abc84a725bc30703aa3d98b from main
 2022-01-26 10:04:08 +01:00
Mariusz Felisiak
c28a41f4f1 [4.0.x] Added stub release notes and release date for 4.0.2, 3.2.12, and 2.2.27. 
Backport of eeca9342381c8583be16f18942774e785ab7e527 from main
 2022-01-25 07:26:37 +01:00
Fabian Büchler
b32080219e [4.0.x] Fixed #33449 -- Fixed makemigrations crash on models without Meta.order_with_respect_to but with _order field. 
Regression in aa4acc164d1247c0de515c959f7b09648b57dc42.

Backport of eeff1787b0aa23016e4844c0f537d5093a95a356 from main
 2022-01-21 08:46:14 +01:00
Tilak
fc5c86c47c [4.0.x] Improved wording in running Django’s test suite in contributing tutorial. 
Backport of 2c76c27a951ee76c6f763a05c7e119305a21c78d from main
 2022-01-20 11:29:47 +01:00
Brad Solomon
519b6d6070 [4.0.x] Fixed #33443 -- Clarified when PasswordResetView sends an email. 
Backport of b55ebe32417e0884b6b8b3e1bc0379033aa221af from main
 2022-01-17 08:59:43 +01:00
Scott Pashley
92e1018178 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt. 
Backport of 367d6920ece44639e54650d9a98f8c24e10f7229 from main
 2022-01-12 07:45:30 +01:00
Zeilentaucher
89d88414dc [4.0.x] Fixed #33432 -- Fixed typo in docs/howto/outputting-csv.txt. 
Backport of 658dc7045aaba548f908bb26a370eb89fb393bca from main
 2022-01-12 07:36:55 +01:00
Victor Peralta
cf4128e6e9 [4.0.x] Fixed typo in docs/ref/contrib/admin/index.txt. 
Backport of f1905db6c0004a2b6c8b69c55a1f5f9da58ce2eb from main
 2022-01-11 06:20:30 +01:00
Keryn Knight
c8a6bf951b [4.0.x] Fixed #33426 -- Fixed ResolverMatch.__repr_() for class-based views. 
Regression in 7c08f26bf0439c1ed593b51b51ad847f7e262bc1.

Backport of f4b06a3cc1e54888ff86f36a1f9a3ddf21292314 from main
 2022-01-10 18:39:59 +01:00
Mariusz Felisiak
dfda5ff722 [4.0.x] Corrected signatures of some functions in docs. 
Backport of 178109c1734ccc16386c3e3cbae1465c7a1b8ed8 from main
 2022-01-10 13:31:25 +01:00
Mariusz Felisiak
6554f00df6 [4.0.x] Corrected directive for signals in django.contrib.auth docs. 
Backport of b0ccf74549fe138c040798e0e99fc0291a7e03ed from main
 2022-01-10 13:31:19 +01:00
Keryn Knight
2ea0321058 [4.0.x] Fixed #33425 -- Fixed view name for CBVs on technical 404 debug page. 
Regression in 0c0b87725bbcffca3bc3a7a2c649995695a5ae3b.

Backport of 2a66c102d9c674fadab252a28d8def32a8b626ec from main
 2022-01-08 14:54:10 +01:00
David
c959aa99aa [4.0.x] Fixed #33419 -- Restored marking forms.Field.help_text as HTML safe. 
Regression in 456466d932830b096d39806e291fe23ec5ed38d5.

Thanks Matt Westcott for the report.

Backport of 4c60c3edff4312303e1021fca47ed52c2152d285 from main
 2022-01-07 16:12:15 +01:00
Petter Friberg
11475958f6 [4.0.x] Fixed #33410 -- Fixed recursive capturing of callbacks by TestCase.captureOnCommitCallbacks(). 
Regression in d89f976bddb49fb168334960acc8979c3de991fa.

Backport of bc174e6ea0ce676c5a7f467bda9739e6ef6b6186 from main
 2022-01-07 16:12:01 +01:00
David
da710aa3d8 [4.0.x] Removed unused comment directive in CBV topic docs. 
Backport of 973fa566521037ac140dcece73fceae50ee522f1 from main
 2022-01-05 09:19:54 +01:00
David
17bd04e708 [4.0.x] Fixed malformed attribute directives in docs. 
Backport of cc8e771c643b4aed9f1d0b8bfcc5b4a8604385b7 from main
 2022-01-05 09:19:44 +01:00
Carlton Gibson
24fce7d134 [4.0.x] Added CVE-2021-45115, CVE-2021-45116, and CVE-2021-45452 to security archive. 
Backport of 63869ab1f191ab5781cde8b813b838300455f6d6 from main
 2022-01-04 11:30:40 +01:00
Carlton Gibson
6f9a994c47 [4.0.x] Added stub release notes for Django 4.0.2. 
Backport of f38c66b55504dfe0b7ca15b0b4ced9430abc7eaa from main
 2022-01-04 11:11:20 +01:00
Carlton Gibson
9bb9326027 [4.0.x] Post-release version bump. 2022-01-04 10:46:42 +01:00
Carlton Gibson
15aff7f22c [4.0.x] Bumped version for 4.0.1 release. 4.0.1 2022-01-04 10:42:03 +01:00
Florian Apolloner
e1592e0f26 [4.0.x] Fixed CVE-2021-45452 -- Fixed potential path traversal in storage subsystem. 
Thanks to Dennis Brinkrolf for the report.
 2022-01-04 10:10:14 +01:00
Florian Apolloner
2a8ec7f546 [4.0.x] Fixed CVE-2021-45116 -- Fixed potential information disclosure in dictsort template filter. 
Thanks to Dennis Brinkrolf for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
 2022-01-04 10:10:14 +01:00
Florian Apolloner
df79ef03ac [4.0.x] Fixed CVE-2021-45115 -- Prevented DoS vector in UserAttributeSimilarityValidator. 
Thanks Chris Bailey for the report.

Co-authored-by: Adam Johnson <me@adamj.eu>
 2022-01-04 10:10:14 +01:00
Luke Plant
7753169585 [4.0.x] Avoided suggestion of plain text database password in sessions topic. 
Backport of ccafad2e429468c518c80fb178f9e7a3f06e78e1 from main
 2022-01-04 06:48:19 +01:00
Mariusz Felisiak
fe59bf202d [4.0.x] Fixed #33391 -- Clarified Aggregate.empty_result_set_value docs. 
Backport of 4400d8568ad5695c46e8de45635a82a27a26b871 from main
 2021-12-31 06:49:55 +01:00
mangelozzi
b93fb3d6be [4.0.x] Improved @display(empty_value) example in ModelAdmin.empty_value_display docs. 
Backport of eb901681ab58c008f7bbbe555e5f43f8e0893bd3 from main
 2021-12-30 11:39:45 +01:00
Jacob Walls
c46e996307 [4.0.x] Fixed #27936 -- Rewrote spanning multi-valued relationships docs. 
Backport of 6174814dbe04fb6668aa212a6cdbca765a8b0522 from main
 2021-12-30 09:05:29 +01:00
Mariusz Felisiak
e9b023b8e4 [4.0.x] Added default values to Entry's fields in making queries docs. 
This makes it easier to create a data in examples.

Backport of 1283458baae482c2bbb22c842b1db6c832c953f3 from main
 2021-12-30 09:05:20 +01:00
Sergey Fursov
76d24d5f16 [4.0.x] Updated example of YAML serialization format in docs. 
Backport of feeb0685c62a793c55a058584ba1de45e74f80f7 from main
 2021-12-28 13:39:06 +01:00
Carlton Gibson
c9ec72ea1b [4.0.x] Added stub release notes for 4.0.1, 3.2.11, and 2.2.26 releases. 
Backport of b13d920b7b56d3e088e35311f5ee54f25d2779af from main.
 2021-12-28 10:08:54 +01:00
Mariusz Felisiak
b5f60ef5a7 [4.0.x] Refs #32355 -- Bumped required psycopg2 version to 2.8.4. 
psycopg2 2.8.4 is the first release to support Python 3.8.
Backport of ca04659b4b3f042c1bc7e557c25ed91e3c56c745 from main
 2021-12-22 20:33:49 +01:00
David Smith
a0e01b000a [4.0.x] Refs #31026 -- Updated TemplatesSetting docs to refer to forms. 
Backport of 78f062f63e7dea09c219fd1310d43950817f4c78 from main
 2021-12-22 08:43:44 +01:00
Adam Johnson
ad09b1687d [4.0.x] Added TemplatesSetting to list of built-in renderers in FORM_RENDERER docs. 
Backport of fde425051c31b240e8eca48a8eb54daa6d372c9f from main
 2021-12-22 07:59:58 +01:00
Brenton Partridge
b85ceaaba6 [4.0.x] Fixed #32600 -- Fixed Geometry collections and Polygon segmentation fault on macOS ARM64. 
Backport of 19fb838803f63eef0726a370050443b693f109be from main
 2021-12-21 13:36:08 +01:00
Simon Charette
7e6a2e3b45 [4.0.x] Fixed #33366 -- Fixed case handling with swappable setting detection in migrations autodetector. 
The migration framework uniquely identifies models by case insensitive
labels composed of their app label and model names and so does the app
registry in most of its methods (e.g. AppConfig.get_model) but it
wasn't the case for get_swappable_settings_name() until this change.

This likely slipped under the radar for so long and only regressed in
b9df2b74b98b4d63933e8061d3cfc1f6f39eb747 because prior to the changes
related to the usage of model states instead of rendered models in the
auto-detector the exact value settings value was never going through a
case folding hoop.

Thanks Andrew Chen Wang for the report and Keryn Knight for the
investigation.

Backport of 43289707809c814a70f0db38ca4f82f35f43dbfd from main
 2021-12-17 10:00:33 +01:00
Mariusz Felisiak
c1d2e8b9b8 [4.0.x] Fixed #33350 -- Reallowed using cache decorators with duck-typed HttpRequest. 
Regression in 3fd82a62415e748002435e7bad06b5017507777c.

Thanks Terence Honles for the report.
Backport of 40165eecc40f9e223702a41a0cb0958515bb1f82 from main
 2021-12-16 20:14:17 +01:00
Mariusz Felisiak
267a743bf2 [4.0.x] Refs #33365, Refs #30530 -- Doc'd re_path() behavior change in Django 2.2.25, 3.1.14, and 3.2.10. 
Follow up to d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6.
Backport of 5de12a369a7b2231e668e0460c551c504718dbf6 from main
 2021-12-15 18:54:35 +01:00
Jeremy Lainé
3b03bce122 [4.0.x] Fixed #33361 -- Fixed Redis cache backend crash on booleans. 
Backport of 2f33217ea2cad688040dd6044cdda946c62e5b65 from main
 2021-12-14 08:46:16 +01:00
mgaligniana
cc5bbd447b [4.0.x] Fixed #33338 -- Doc'd that never_cache() decorator set Expires header. 
Backport of 669dcefc04837c35fc2ec5ce906d84397005965d from main
 2021-12-13 18:38:48 +01:00
Beomsoo Kim
c607ee949d [4.0.x] Corrected example in models.DecimalField docs. 
Backport of 7e4a9a9f696574a18f5c98f34d5a88e254b2d394 from main
 2021-12-13 07:20:56 +01:00
Wayne Lambert
e39e5fa8e6 [4.0.x] Updated link to Microsoft SQL Server backend. 
Backport of 8a8c8797e81b338f3c93a5a4e2483916e68e4a54 from main
 2021-12-13 07:17:33 +01:00
Ömer Faruk Abacı
bb8435f5db [4.0.x] Refs #33319 -- Added note about commutation of QuerySet's | operator. 
Backport of f04b44bad40369ec2df74b16adb4d3f09350e4b2 from main
 2021-12-08 21:59:40 +01:00
Baptiste Mispelon
15031852c5 [4.0.x] Fixed #33346 -- Fixed SimpleTestCase.assertFormsetError() crash on a formset named "form". 
Thanks OutOfFocus4 for the report.

Regression in 456466d932830b096d39806e291fe23ec5ed38d5.

Backport of cb383753c0e0eb52306e1024d32a782549c27e61 from main.
 2021-12-08 21:13:00 +01:00