Florian Apolloner 76ed1c49f8 Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri(). ...

Thanks to Guido Vranken for initial report.

2019-08-01 09:24:54 +02:00

..

apps

Fixed #30159 -- Removed unneeded use of OrderedDict.

2019-02-06 13:48:39 -05:00

bin

Reverted "Fixed #27878, refs #23919 -- Used python3 shebangs."

2017-03-07 10:10:32 -05:00

conf

Updated translations from Transifex

2019-06-29 16:17:16 +02:00

contrib

Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection.

2019-08-01 09:24:54 +02:00

core

Refs #30669 -- Removed incorrect branch in ASGIHander.read_body().

2019-07-31 13:33:01 +02:00

db

Fixed #30665 -- Added support for distinct argument to Avg() and Sum().

2019-07-31 11:22:50 +02:00

dispatch

Capitalized "Python" in docs and comments.

2018-10-09 09:26:07 -04:00

forms

Improved error message when index in __getitem__() is invalid.

2019-07-23 20:12:08 +02:00

http

Fixed CVE-2019-12781 -- Made HttpRequest always trust SECURE_PROXY_SSL_HEADER if set.

2019-07-01 07:48:04 +02:00

middleware

Removed unnecessary assignments in various code.

2019-04-24 13:09:29 +02:00

template

Fixed #27486 -- Fixed Python 3.7 DeprecationWarning in intword and filesizeformat filters.

2019-06-11 20:34:59 +02:00

templatetags

Replaced loop with dictionary comprehension.

2018-12-19 17:31:48 -06:00

test

Fixed #30451 -- Added ASGI handler and coroutine-safety.

2019-06-20 12:29:43 +02:00

urls

Fixed #29744 -- Fixed caching of URLResolver for a default URLconf.

2019-07-03 11:37:28 +02:00

utils

Fixed CVE-2019-14235 -- Fixed potential memory exhaustion in django.utils.encoding.uri_to_iri().

2019-08-01 09:24:54 +02:00

views

Fixed #30411 -- Improved formatting of text tracebacks in technical 500 templates.

2019-07-29 11:09:54 +02:00

__init__.py

Bumped version; master is now 3.0 pre-alpha.

2019-01-17 10:50:24 -05:00

__main__.py

Fixed #24857 -- Added "python -m django" entry point.

2015-09-07 19:54:32 -04:00

shortcuts.py

Refs #25978 -- Removed shortcuts.render_to_response() per deprecation timeline.

2019-01-17 10:50:25 -05:00