Tim Graham
2d4bc5a60a
[1.8.x] Bumped version for 1.8.18 release.
1.8.18
2017-04-04 10:03:09 -04:00
Tim Graham
8339277518
[1.8.x] Fixed #27912 , CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
...
This is a security fix.
2017-03-28 12:57:34 -04:00
Tim Graham
4a6b945dff
[1.8.x] Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
...
This is a security fix.
2017-03-28 12:57:34 -04:00
Tim Graham
081c263dff
[1.8.x] Added stub release notes for security release.
2017-03-28 12:57:33 -04:00
Tim Graham
87851581a0
[1.8.x] Pinned test requirement to numpy < 1.12 for Python 3.3 compatibility.
2017-03-28 12:56:01 -04:00
Mariusz Felisiak
998bc0ced2
[1.8.x] Refs #27924 -- Doc'd that cx_Oracle < 5.3 is required.
...
Thanks Tim Graham for the review.
Backport of 46d602dcea624bef3fb6e1dbf71378d837c0957b from stable/1.10.x
2017-03-11 22:17:05 +01:00
Tim Graham
4b5aec3b0b
[1.8.x] Fixed a backends test with psycopg2 2.7.
...
Backport of 49a63d08d3b3e2ac32e391d1413a4ac99429e4af from master
2017-03-01 13:22:53 -05:00
Tim Graham
299529dca6
[1.8.x] Fixed GeoIP test failure with the latest data.
...
Backport of da2e92d25ea32a25679d99525365ac7ac8e297ee from stable/1.11.x
2017-02-14 09:48:26 -05:00
Tim Graham
b248f33130
[1.8.x] Removed deprecated html_translator_class sphinx config option.
...
Backport of bacdfbf3d1eb23ff8e8110681728a5b467443446 and
e5d3f98abcdc20d64d99609bd0aa82331835b439 from master
2017-01-23 10:24:45 -05:00
Tim Graham
0311b7e637
[1.8.x] Declared Sphinx extensions safe for parallel reading.
...
Backport of 03306a187ec3bb5e2592728a900d4a41185f9e30 from master
2017-01-23 10:24:17 -05:00
Tim Graham
c9ba3450bd
[1.8.x] Fixed #27616 -- Fixed incorrect vary_on_headers() example.
...
Backport of 5e239ae907291d07a3fcf9329f83c27fa6d72981 from master
2016-12-20 08:30:54 -05:00
Tim Graham
01b3dc2232
[1.8.x] Reverted "Fixed #27594 -- Fixed select_related() with reverse self-referential OneToOneField."
...
This reverts commit 4a9f9cc521f09c60f56024eb6688e30ab86b998f. It was
accidentally pushed to this branch.
2016-12-14 07:53:45 -05:00
Daniel Hillier
4a9f9cc521
Fixed #27594 -- Fixed select_related() with reverse self-referential OneToOneField.
...
Fix definition of `klass_info['from_parent']`. The relationship between
two models shouldn't be considered as being from a parent class if the
model classes are the same.
Thanks Tim for the review.
2016-12-14 07:38:09 -05:00
Tim Graham
fa596f82a6
[1.8.x] Post-release version bump.
2016-12-01 18:05:03 -05:00
Tim Graham
d3d12fc11d
[1.8.x] Bumped version for 1.8.17 release.
1.8.17
2016-12-01 17:20:59 -05:00
Tim Graham
b2fff69aa6
[1.8.x] Added release date for 1.8.17.
...
Backport of 9ea9686532336caefcd5fedb76ad9a68a512d243 from master
2016-12-01 17:16:55 -05:00
Tim Graham
9b6b561d4a
[1.8.x] Ignored flake8's newly added E305, E741, E743.
2016-11-14 18:34:36 -05:00
Mariusz Felisiak
32f50999cd
[1.8.x] Fixed #27420 -- Quoted the Oracle test user password in queries.
...
Backport of c4b04e1598c4325454c808183dce17b284ed9e28 from master
2016-11-08 16:45:12 -05:00
Tim Graham
90c61538ba
[1.8.x] Added CVE-2016-9013,14 to the security release archive.
...
Backport of b8ae2c16cfc4bf88c1720eafd8e35438181a7413 from master
2016-11-01 10:48:58 -04:00
Tim Graham
dd9dd58f41
[1.8.x] Post-release version bump.
2016-11-01 10:23:07 -04:00
Tim Graham
aa10ba0961
[1.8.x] Bumped version for 1.8.16 release.
1.8.16
2016-11-01 09:42:47 -04:00
Tim Graham
c401ae9a7d
[1.8.x] Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.
...
This is a security fix.
2016-10-25 15:27:45 -04:00
Marti Raudsepp
70f9995296
[1.8.x] Fixed CVE-2016-9013 -- Generated a random database user password when running tests on Oracle.
...
This is a security fix.
2016-10-25 14:24:11 -04:00
Tim Graham
33bf6220e2
[1.8.x] Added stub release notes for 1.8.16.
2016-10-25 13:56:26 -04:00
Tim Graham
aba8f2b501
[1.8.x] Fixed #27342 -- Corrected QuerySet.update_or_create() example.
...
Backport of 51b83d9e5113ea5b81d04f4d117bd5acd3c1b822 from master
2016-10-13 11:03:38 -04:00
Tim Graham
1c4334f793
[1.8.x] Fixed nonexistent tmc.edu domain in GeoIP test.
...
Backport of e1f6eba033abea25cd6b0577bd66c655ec453325 from master
2016-10-11 19:44:09 -04:00
Tim Graham
3141b79d26
[1.8.x] Fixed #27307 -- Added missing url names in sitemaps docs.
...
Backport of fe1aee6b98d2a94ecc983463938135d192ef9afc from master
2016-10-03 16:05:56 -04:00
Alasdair Nicol
6e24eeef60
[1.8.x] Fixed 27283 -- Fixed typo in 1.8 release notes.
...
Backport of 32031718320e1b4d708b15d8c67738e4c77c9bc7 from master
2016-09-28 06:51:42 -04:00
Tim Graham
d5430a5ff9
[1.8.x] Added CVE-2016-7401 to the security release archive.
...
Backport of 6fe846a8f08dc959003f298b5407e321c6fe3735 from master
2016-09-26 18:30:31 -04:00
Tim Graham
47f5d799b2
[1.8.x] Added a CVE role for Sphinx.
...
Backport of a46742e738b91f79dd7b2e6ecba6dd1604e14d05 from master
2016-09-26 18:30:16 -04:00
Tim Graham
34da092a19
[1.8.x] Post-release version bump.
2016-09-26 14:24:25 -04:00
Tim Graham
25e416ca0f
[1.8.x] Bumped version for 1.8.15 release.
1.8.15
2016-09-26 13:56:44 -04:00
Collin Anderson
6118ab7d06
[1.8.x] Fixed CVE-2016-7401 -- Fixed CSRF protection bypass on a site with Google Analytics.
...
This is a security fix.
Backport of "refs #26158 -- rewrote http.parse_cookie() to better match
browsers." 93a135d111c2569d88d65a3f4ad9e6d9ad291452 from master
2016-09-14 13:42:24 -04:00
Tim Graham
717aa88439
[1.8.x] Fixed #26807 -- Documented how to replicate SubfieldBase's assignment behavior.
...
Backport of 518eaf1fa2d86dc1b0ba7adba22b30bcc8f3a497 from master
2016-08-18 21:09:12 -04:00
Tim Graham
fdd1d247c4
[1.8.x] Fixed a GeoIP test failure with the latest data.
...
Backport of 4a696bbe13383b14b2762cc5accd45849e9dcfba from master
2016-08-03 11:19:21 -04:00
Tim Graham
33939f0183
[1.8.x] Fixed a typo in tests/middleware/test_security.py
...
Backport of 0850236a8c3647bc3c239bd34afae0488abe5c60 from master
2016-07-28 22:01:22 -04:00
Naved Khan
7665a52161
[1.8.x] Fixed #26941 -- Corrected uwsgi "env = LANG=…" configuration in docs.
...
Backport of 9a5a789da2b53a9c19ea47130507ce26839eb008 from master
2016-07-25 07:01:32 -04:00
Raphaël Hertzog
6cf35c666c
[1.8.x] Fixed #26923 -- Fixed template_tests with numpy < 1.9.0.
...
Backport of 8e5cbc884f77c85b0edbc6206810643abaf589c9 from master
2016-07-21 13:01:50 -04:00
Tim Graham
9f8ef7724d
[1.8.x] Fixed a GeoIP test failure with the latest data.
...
Backport of 081fdaf110386db940d834ba51d93e23aa293fcd from master
2016-07-19 09:28:53 -04:00
Tim Graham
2deed2ea08
[1.8.x] Added CVE-2016-6186 to the security release archive.
...
Backport of bc53af13cbf09b0cbac945426c2d51d0ca52fff3 from master
2016-07-18 15:20:55 -04:00
Tim Graham
128bbf2986
[1.8.x] Post-release version bump.
2016-07-18 14:59:55 -04:00
Tim Graham
9fbdc48c49
[1.8.x] Bumped version for 1.8.14 release.
1.8.14
2016-07-18 13:45:11 -04:00
Tim Graham
f68e5a9916
[1.8.x] Fixed XSS in admin's add/change related popup.
...
This is a security fix.
2016-07-18 13:45:11 -04:00
Marissa Zhou
358ae4a687
[1.8.x] Fixed #24796 -- Moved SecurityMiddleware in MIDDLEWARE_CLASSES docs.
...
Partial backport of 8b1f39a727be91aab40bdb37235718ed63ae1d50 from master
2016-07-18 07:57:00 -04:00
Jon Dufresne
8edfdddbc8
[1.8.x] Fixed #26889 -- Fixed missing PostgreSQL index in SchemaEditor.add_field().
...
Backport of 2e4cfcd2b9a0984ad6c4087a5deebbf33413835c from master
2016-07-13 22:15:43 -04:00
Baptiste Mispelon
3e562cf7a2
[1.8.x] Fixed numpy deprecation warning silencing in template_tests.
...
Backport of 418658f453bed7fe7949dda26651aab370003e6a from master
2016-07-09 10:24:35 -04:00
Romain Garrigues
2a49d8e9b2
[1.8.x] Fixed #25461 -- Corrected meta API code examples to account for MTI.
...
In the case of multiple-table inheritance models, get_all_related_objects() and
get_all_related_objects_with_model() don't return the auto-created
OneToOneField, but the new examples didn't account for this.
Backport of 8be84e2ac42b2556fd6fa07794b3708b143ef341 from master
2016-07-06 09:28:58 -04:00
Taylor Edmiston
787675789c
[1.8.x] Fixed typo in docs/topics/class-based-views/generic-display.txt
...
Backport of 43d0345fe11624d6b4fd960139ff653451b4f147 from master
2016-07-06 08:49:17 -04:00
Samir Shah
5079cd597c
[1.8.x] Corrected firstof template tag's docstring.
...
Since Django 1.8, firstof escapes its output.
Backport of fff5dbe59ca629c295480693f045f03537858eee from master
2016-06-21 08:12:37 -04:00
Krzysztof Jurewicz
be5dfde7c2
[1.8.x] Fixed #26774 -- Corrected value of default_zoom in GeoModelAdmin doc
...
Backport of 6dd4d2709bfe427c05842c0269860ef95a0b4f00 from master
2016-06-17 14:03:52 +02:00