3 Commits

Author	SHA1	Message	Date
Mariusz Felisiak	2c09e68ec9	[2.2.x] Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases. ... Thanks Splunk team: Preston Elder, Jacob Davis, Jacob Moore, Matt Hanson, David Briggs, and a security researcher: Danylo Dmytriiev (DDV_UA) for the report. Backport of 93cae5cb2f9a4ef1514cf1a41f714fef08005200 from main.	2022-04-11 09:22:17 +02:00
Claude Paroz	d7b9aaa366	Refs #23919 -- Removed encoding preambles and future imports	2017-01-18 09:55:19 +01:00
Ian Foote	39f35d4b9d	Fixed #25871 -- Added expressions support to QuerySet.values().	2016-08-18 16:05:15 -04:00