1
0
mirror of https://github.com/django/django.git synced 2025-03-17 04:40:45 +00:00

2937 Commits

Author SHA1 Message Date
Carl Meyer
2d0c22e02d [1.5.x] Restricted the XML deserializer to prevent DoS attacks.
This is a security fix. Disclosure and advisory coming shortly.
2013-02-19 10:39:03 -07:00
Carl Meyer
a7e33c5bf3 [1.5.x] Added a new required ALLOWED_HOSTS setting for HTTP host header validation.
This is a security fix; disclosure and advisory coming shortly.
2013-02-19 10:39:03 -07:00
Claude Paroz
41848b078a [1.5.x] Fixed #19833 -- Fixed import parameter encoding in get_runner
Thanks Danilo Bargen for the report.
Backport of 63236161 from master.
2013-02-16 13:32:03 +01:00
Julien Phalip
42e87c17f2 [1.5.x] Fixed #19829 -- Fixed index lookups for NumPy arrays in templates.
Backport of 7d5e35cdb46124e2471
2013-02-15 00:18:49 -08:00
Anssi Kääriäinen
743263a105 [1.5.x] Removed try-except in django.db.close_connection()
The reason was that the except clause needed to remove a connection
from the django.db.connections dict, but other parts of Django do not
expect this to happen. In addition the except clause was silently
swallowing the exception messages.

Refs #19707, special thanks to Carl Meyer for pointing out that this
approach should be taken.
2013-02-13 00:22:10 +02:00
Anssi Kääriäinen
7b5ca126ee [1.5.x] Fixed #19112 -- Reduced the amount of query params in a test
Backpatch of 604d8763dc2c901a3557e15880895d88af5c4127.
2013-02-10 21:09:58 +02:00
Anssi Kääriäinen
b18ad807e0 [1.5.x] Fixed #19720 -- Oracle ordering related delete regression
When a query had a complex where condition (a condition targeting more
than the base table) a subquery was used for deletion. However, the
query had default ordering from the model's meta and Oracle doesn't
work with ordered subqueries.

The regression was caused by fast-path deletion code introduced in
1cd6e04cd4f768bcd4385b75de433d497d938f82 for fixing #18676.

Thanks to Dylan Klomparens for the report.

Backpatch of 8ef3235034a1a7616714a5d61486dc68536f74ee
2013-02-10 19:58:22 +02:00
Anssi Kääriäinen
60186aa2e5 [1.5.x] Fixed #19707 -- Reset transaction state after requests
Backpatch of a4e97cf315142e61bb4bc3ed8259b95d8586d09c
2013-02-10 14:09:58 +02:00
Anssi Kääriäinen
4c261c61f2 [1.5.x] Fixed #19645 -- Added tests for TransactionMiddleware
Backpatch of f556df90be995a83b979cf875705d98521ab4dc7. Backpatching
these tests so that it will be easier to backpatch the fix for #19707.
2013-02-10 14:01:49 +02:00
Julien Phalip
15796db507 [1.5.x] Cleaned up some lingering signals in the test suite that were causing spurious failures with Pypy and Postgres.
Backport of db09a2de6e1bc7121
2013-02-08 12:13:43 -08:00
Claude Paroz
20ac33100c Partially revert 9efe1a721, strip_tags improvements
The new regex seems not stable enough for being released. Stripping
with regex might need reevaluation for the next release.
Refs #19237.
2013-02-06 21:19:41 +01:00
Nick Sandford
e18bd68dbc [1.5.x] Fixed #19445 -- Skip admin fieldsets validation when the ModelAdmin.get_form() method is overridden.
Backport of 0694d2196f0fad
2013-02-02 14:55:59 -08:00
Aymeric Augustin
db49b6d2b2 [1.5.x] Fixed #19708 -- Exception in timezone.override(None).
Thanks rafales.

Backport of 9a4a1ce.
2013-01-31 16:02:03 +01:00
Aymeric Augustin
11ec0253ab [1.5.x] Fixed #19692 -- Completed deprecation of mimetype in favor of content_type.
Thanks Tim for the report and initial patch.

Backport of 89cb771 from master.
2013-01-31 13:55:00 +01:00
Aymeric Augustin
256352a790 Added file forgotten in d5ad9d3d. 2013-01-30 22:11:19 +01:00
Aymeric Augustin
d5ad9d3dfe [1.5.x] Fixed #19076 -- Added content_type attribute to TemplateView.
Thanks Gavin Wahl.

Backport of 23e319d.
2013-01-30 21:34:39 +01:00
Tim Graham
5da6ce11ed [1.5.x] Fixed typos in docs and comments
Backport of ee26797cff from master
2013-01-29 10:58:24 -07:00
Claude Paroz
2d8b0315f4 [1.5.x] Fixed #19665 -- Ensured proper stderr output for Command.run_from_argv
Thanks Stefan Koegl for the report and Simon Charette for the review.
Backport of b9c8bbf37 from master.
2013-01-25 14:57:18 +01:00
Claude Paroz
ab6ff2e0ac Fixed i18n test to match changed translation 2013-01-17 22:58:53 +01:00
Claude Paroz
b3887ab98a [1.5.x] Fixed #19488 -- Made i18n_patterns redirect work with non-slash-ending paths
Thanks Daniel Gerzo for the report and the initial patch.
Backport of bcdb4898c from master.
2013-01-11 21:35:45 +01:00
Claude Paroz
1d03ff06bb [1.5.x] Fixed #19585 -- Fixed loading cookie value as a dict
This regression was introduced by the 'unicode_literals' patch.
Backport of f08e739bc2 from master.
2013-01-11 21:14:39 +01:00
Florian Apolloner
1d3368b587 [1.5.X] Fixed lockups in jenkins, refs #19546.
Backport of ce580dd8ea04237cfe34cd02df0b8944a5345f4f from master.
2013-01-09 23:34:33 +01:00
Claude Paroz
785ec24720 [1.5.x] Skipped deprecation warning test on Python 2.6
Refs #19546. On Python 2.6, DeprecationWarnings are visible by
default.
Backport of e6949373b from master.
2013-01-09 20:02:51 +01:00
Preston Holmes
af8e858c15 [1.5.x] Fixed #19546 - ensure that deprecation warnings are shown during tests
refs #18985
2013-01-09 08:19:56 -08:00
Anssi Kääriäinen
9d6d0de7c1 [1.5.x] Fixed #17541 -- Fixed non-saved/nullable fk querying
Backpatch of 55da775ce1bfba20db33b56c29957faa63917980
2013-01-08 21:03:53 +02:00
Claude Paroz
beef02eeaa [1.5.x] Updated deprecated test assertions 2013-01-08 19:11:40 +01:00
Claude Paroz
012229914c [1.5.x] Created special PostgreSQL text indexes when unique is True
Refs #19441.
Backport of c698c55966 from master.
2013-01-07 21:02:02 +01:00
Claude Paroz
96301d21bb [1.5.x] Fixed #19192 -- Allowed running tests with dummy db backend
Thanks Simon Charette for the initial patch, and Jan Bednařík for
his work on the ticket.
Backport of b740da3504 from master.
2013-01-04 14:03:55 +01:00
Claude Paroz
5b8c0d22cc [1.5.x] Fixed #19382 -- Stopped smtp backend raising exception when already closed
Thanks Sebastian Noack for the report and the initial patch.
Backport of ffa50ca35 from master.
2013-01-03 20:45:57 +01:00
Claude Paroz
4081042ef5 [1.5.x] Fixed #19134 -- Allowed closing smtp backend when the server is stopped
Thanks Sebastian Noack for the report and the initial patch.
Backport of 1b3f832ab7 from master.
2013-01-03 20:45:29 +01:00
Simon Charette
70cc95d1cc [1.5.x] Fixed #19545 -- Make sure media/is_multipart work with empty formsets
Backport of 3fc43c964e from master.
2013-01-03 15:17:14 +01:00
Aymeric Augustin
56e5472766 [1.5.x] Fixed #19519 again -- Regression in LiveServerTestCase after fd1279a4.
Backport of 328f5b5.
2013-01-01 10:14:24 +01:00
Julien Phalip
dfd8623de4 [1.5.x] Fixed #19453 -- Ensured that the decorated function's arguments are obfuscated in the @sensitive_variables decorator's frame, in case the variables associated with those arguments were meant to be obfuscated from the decorated function's frame.
Thanks to vzima for the report.
Backport of 9180146d21cf2a31eec
2012-12-31 09:51:13 -08:00
Aymeric Augustin
fd1279a44d [1.5.x] Fixed #19519 -- Fired request_finished in the WSGI iterable's close().
Backport of acc5396.
2012-12-31 12:49:10 +01:00
Claude Paroz
814c3b2e2a [1.5.x] Fixed #19537 -- Made CheckboxInput._has_changed handle 'False' string
Thanks dibrovsd@gmail.com for the report.
Backport of d11038acb2 from master.
2012-12-31 10:24:48 +01:00
Julien Phalip
fa71536129 [1.5.x] Added further flexibility to ModelAdmin for controlling post-save redirections.
Refs #19505.
Backport of cee40c7d79930ff42bde4
2012-12-30 23:11:58 -08:00
Anssi Kääriäinen
d529d413f7 [1.5.x] Avoided having an indexed TextField installed unless using postgres
An index on TextField results in a warning message when running tests
on MySQL or SQLite, and the test using the TextField was PostgreSQL
only in any case.

Backpatch of 13a2b11425f87f674f0273af5fa70c1e4cf327ed
2012-12-29 16:38:32 +02:00
Aymeric Augustin
5097d3c5fa [1.5.x] Fix #19524 -- Incorrect caching of parents of unsaved model instances.
Thanks qcwxezdas for the report. Refs #13839.

Backport of e9c24be.
2012-12-28 23:35:08 +01:00
Ramiro Morales
3b32e5cc2d [1.5.x] Expanded tests added when fixing #14529.
To make sure changes in 35d1cd0 don't break anything. Refs #19505.

ad769efa85e0296033572315025fed9fa9aefade from master.
2012-12-24 18:13:38 -03:00
Julien Phalip
3ad34c231b [1.5.x] Fixed #19505 -- A more flexible implementation for customizable admin redirect urls.
Work by Julien Phalip.

Refs #8001, #18310, #19505. See also 0b908b92a2ca4fb74a103e96bb75c53c05d0a428.

35d1cd0b28d1d9cd7bffbfbc6cc2e02b58404415 from master.
2012-12-24 18:12:13 -03:00
Aymeric Augustin
cd914175c8 [1.5.x] Prevented caching of streaming responses.
The test introduced in 4b278131 accidentally passed because of a
limitation of Python < 3.3.

Refs #17758, #7581.

Backport of 1c8be95 from master.
2012-12-24 20:30:20 +01:00
Aymeric Augustin
1114d8203e [1.5.x] Fixed a randomly failing test under Python 3.
Refs #17758.

Backport of e8f07f0 from master.
2012-12-24 11:26:38 +01:00
Luke Plant
00aea69f06 [1.5.x] Fixed a dependence on set-ordering in tests
Backport of 1ae64e96c161229a74efc4235917dcaae7e9cd05 from master
2012-12-24 02:21:19 +00:00
Luke Plant
b362a55969 [1.5.x] Made admin generated changelist URLs independent of dict ordering
Backport of c31c2c92b8ef0b58394ac55fa4f61acc07091047 from master
2012-12-24 02:20:32 +00:00
Ian Clelland
cade3405c0 [1.5.x] Don't rely on dictionary ordering in tests
Backport of b9fc70141abd4c812b03df50452a0d3ed8cd62d2 from master
2012-12-24 02:19:53 +00:00
Ian Clelland
95b4f34b5e [1.5.x] Use HTML parser to compare html snippets
Backport of 585aa11d233b7e3e40fe45fa69ef045d8f282345 from master
2012-12-24 02:19:31 +00:00
Ian Clelland
515cf94b60 [1.5.x] Use new TestCase methods for equality comparisons
Backport of 8d35fd4c327e05b63c72a1c1e9a4a68de4dddcf0 from master
2012-12-24 02:19:16 +00:00
Aymeric Augustin
9919638137 [1.5.x] Fixed #19468 -- Decoded request.path correctly on Python 3.
Thanks aliva for the report and claudep for the feedback.

Backport of 1e4a27d from master.
2012-12-22 14:45:06 +01:00
Russell Keith-Magee
b7607003a5 [1.5.x] Fixed #19401 -- Ensure that swappable model references are case insensitive.
This is necessary because get_model() checks are case insensitive, and if the swapable check isn't, the
swappable logic gets tied up in knots with models that are partially swapped out.

Thanks to chris@cogdon.org for the report and extensive analysis, and Preston for his work on the draft patch.

Backport of c04c03d from trunk.
2012-12-20 16:14:10 +08:00
Claude Paroz
ddea0e0d7e [1.5.x] Fixed #19441 -- Created PostgreSQL varchar index when unique=True
Thanks Dylan Verheul for the report and Anssi Kääriäinen for the
review.
Backport of 55972ee5c from master.
2012-12-18 10:04:47 +01:00