Luke Plant cb060f0f34 Fixed #15258 - Ajax CSRF protection doesn't apply to PUT or DELETE requests ...

Thanks to brodie for the report, and further input from tow21

This is a potentially backwards incompatible change - if you were doing
PUT/DELETE requests and relying on the lack of protection, you will need to
update your code, as noted in the releaste notes.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@16201 bcc190cf-cafb-0310-a4f2-bffc1f526a37

2011-05-09 23:45:54 +00:00

..

admin

Fixed #15960 -- Extended list filer API added in r16144 slightly to pass the current model admin to the SimpleListFilter.lookups method to support finer grained control over what is filtered over. Many thanks to Carl Meyer and Julien Phalip for the suggestion and patch.

2011-05-04 22:52:04 +00:00

comments

Fixed #14176 -- Added forwards compatibility to the legacy syndication feed view. This allows class-based feeds to be deployed using the old-style feed view, as long as the feed requires no arguments (i.e., get_object returns None). Thanks to psychcf for the report, cwhaines for the investigation, and Andrew Godwin for the assist.

2011-01-13 14:51:34 +00:00

formtools

Changed e-mail to email throughout documentation and codebase. The one exception is translation strings, which I didn't want to disrupt

2011-04-01 16:10:22 +00:00

gis

Fixed #14133 -- Updated Windows installation instructions for GeoDjango, now recommend the OSGeo4W installer for spatial libraries.

2011-03-17 20:06:19 +00:00

auth.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00

contenttypes.txt

Fixed #15865 -- correct class name for BaseGenericInlineFormset. Thanks leonelfreire for the report.

2011-04-28 01:46:46 +00:00

csrf.txt

Fixed #15258 - Ajax CSRF protection doesn't apply to PUT or DELETE requests

2011-05-09 23:45:54 +00:00

databrowse.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00

flatpages.txt

Switched to HTML5 doctype in all Django supplied templates.

2011-04-20 17:40:53 +00:00

humanize.txt

Fixed #6392 -- Made django.contrib.humanize template tags locale aware. Thanks, Dave McLain.

2011-05-06 13:29:58 +00:00

index.txt

Fixed #14000 - remove versionadded/changed tags for Django 1.0 and 1.1

2010-12-26 00:37:14 +00:00

localflavor.txt

Fixed #13729 -- Renamed UK localflavor to GB to correctly follow ISO 3166. Thanks, Claude Paroz.

2011-05-03 11:52:20 +00:00

markup.txt

Fixed #15365 -- Added a warning to the contrib.markup docs reminding users that the marked up output will not be escaped.

2011-02-28 05:39:44 +00:00

messages.txt

Advanced deprecation of user-based messages and the LegacyFallbackStorage in contrib.messages.

2011-04-02 08:36:04 +00:00

redirects.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00

sitemaps.txt

Fixed #14000 - remove versionadded/changed tags for Django 1.0 and 1.1

2010-12-26 00:37:14 +00:00

sites.txt

Changed e-mail to email throughout documentation and codebase. The one exception is translation strings, which I didn't want to disrupt

2011-04-01 16:10:22 +00:00

staticfiles.txt

Fixes #15270 -- Moved back the serve view to django.views.static due to dependency conflicts with the contrib app staticfiles (reverts parts of r14293). Added a helper function that generates URL patterns for serving static and media files during development. Thanks to Carl for reviewing the patch.

2011-02-14 01:42:26 +00:00

syndication.txt

Changed e-mail to email throughout documentation and codebase. The one exception is translation strings, which I didn't want to disrupt

2011-04-01 16:10:22 +00:00

webdesign.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00