mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2024-12-25 18:46:22 +00:00
Code Issues 25 Releases Wiki Activity
8,998 Commits 28 Branches 426 Tags 667 MiB
31560e31f9
Commit Graph

99 Commits

Author SHA1 Message Date
Luke Plant
45c7f427ce Fixed #14445 - Use HMAC and constant-time comparison functions where needed. 
All adhoc MAC applications have been updated to use HMAC, using SHA1 to
generate unique keys for each application based on the SECRET_KEY, which is
common practice for this situation. In all cases, backwards compatibility
with existing hashes has been maintained, aiming to phase this out as per
the normal deprecation process. In this way, under most normal
circumstances the old hashes will have expired (e.g. by session expiration
etc.) before they become invalid.

In the case of the messages framework and the cookie backend, which was
already using HMAC, there is the possibility of a backwards incompatibility
if the SECRET_KEY is shorter than the default 50 bytes, but the low
likelihood and low impact meant compatibility code was not worth it.

All known instances where tokens/hashes were compared using simple string
equality, which could potentially open timing based attacks, have also been
fixed using a constant-time comparison function.

There are no known practical attacks against the existing implementations,
so these security improvements will not be backported.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@14218 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-14 20:54:30 +00:00
Chris Beaven
b37327caae Fix a typo in my bio 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14200 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-13 06:59:45 +00:00
Honza Král
9235d24d3f Added myself to committers 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14176 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-12 01:48:21 +00:00
Gabriel Hurley
2ed554bd92 Fixed #14227 -- Added information about the "easy-pickings" keyword to the contributing docs. Thanks to Russ for the report and cmheisel for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14154 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-11 21:57:25 +00:00
Russell Keith-Magee
5e319f5194 Refs #12991 -- Added extra docs for the unittest2 changes made in r14139. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14140 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-11 13:18:00 +00:00
Chris Beaven
fc4ed4fafd Add myself to committers 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14118 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-10 09:35:06 +00:00
Carl Meyer
501546df6f Fixed #12226 -- Deprecated test client Response.template attribute in favor of templates attribute, which is always a list. Thanks Russell for patch review. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14106 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-10 02:16:33 +00:00
Russell Keith-Magee
a904e55859 Fixed #11509 -- Modified usage of "Web" to match our style guide in various documentation, comments and code. Thanks to timo and Simon Meers for the work on the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14069 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-09 08:12:50 +00:00
Gabriel Hurley
816c7d1e64 Adding myself to the specialists section (and fixing a typo in Jeremy's bio). 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14056 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-09 04:01:37 +00:00
Ramiro Morales
71a4c472ab Added myself to the committers list. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14051 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-09 03:16:22 +00:00
Carl Meyer
5b155e2a87 Added myself to contributors. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14047 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-09 01:47:42 +00:00
Andrew Godwin
37023bc0bc Adding my bio. Andrew enjoys writing about himself in the third person. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14039 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-08 22:55:46 +00:00
Simon Meers
52f763d935 Added my bio to committers.txt 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14037 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-08 22:49:46 +00:00
Alex Gaynor
cdc6b0eb98 Correct a rather embarrassing typo in my bio. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14035 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-08 21:10:57 +00:00
Alex Gaynor
5c01585450 Added myself to the committers docs. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14034 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-08 21:05:39 +00:00
Russell Keith-Magee
127a25ac27 Fixed #14383 -- Corrected the capitalization of reStructuredText. Thanks to timo for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@14017 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-08 15:37:16 +00:00
Adrian Holovaty
d405ec9b4d Fixed #14409 -- Fixed typo in docs/internals/documentation.txt. Thanks, kurtmckee 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13991 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-10-06 17:32:25 +00:00
Jacob Kaplan-Moss
136bf00615 Additions to the contributing document explaining our new decision-making process. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13962 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-09-29 17:56:27 +00:00
Russell Keith-Magee
f611ffaab3 Fixed #13820 -- Started the deprecation process for mod_python. Thanks to Robert Coup for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13648 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-08-28 02:40:57 +00:00
Jacob Kaplan-Moss
728effcfbd Fixed #14141: docs now use the :doc: construct for links between documents. 
Thanks, Ramiro Morales.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@13608 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-08-19 19:27:44 +00:00
Jannis Leidel
806c30cd63 Fixed #14111 -- Updated Sphinx version recommendation in documentation. Thanks, Ramiro Morales and Paul McMillan. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13604 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-08-18 16:34:50 +00:00
Russell Keith-Magee
7aa7943434 Fixed #13627 -- Added instructions on how to reset your Trac password. Thanks to zerok for the suggestion. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13551 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-08-07 14:55:54 +00:00
Jannis Leidel
cd8758ef4d Fixed #14005 - Removed a few unneeded workarounds in the Sphinx extension. Thanks for the report and patch, Ramiro Morales. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13447 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-07-25 20:39:40 +00:00
Russell Keith-Magee
663d17897e Fixed #13497 -- Corrected various typos and markup problems in docs. Thanks to Ramiro Morales for the report and patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13144 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-05-09 04:23:43 +00:00
Russell Keith-Magee
92983a3119 Fixed #12609 -- Updated FAQ on which version users should install. Thanks to shanx for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13109 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-05-06 01:20:11 +00:00
Justin Bronn
33d4aa8df1 Removed duplicated code from django.contrib.gis.db.backend and added a deprecation note about the module. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13103 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-05-05 16:06:39 +00:00
Jannis Leidel
77c13844ae Fixed #11068 - Introduced new language code "nb" for Norwegian Bokmål as a replacement of the current "no". 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@13047 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-04-29 14:36:09 +00:00
Jannis Leidel
b3390fede0 Fixed #13290 - Added a section about minification of admin JavaScript files to the contributing docs. Thanks to Gabriel Hurley for the report and patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12969 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-04-13 10:29:44 +00:00
Luke Plant
520ce1bab3 Fixed #13270 - typos in documentation 
Thanks to cmbeelby for the report and patch



git-svn-id: http://code.djangoproject.com/svn/django/trunk@12934 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-04-06 14:18:32 +00:00
Russell Keith-Magee
d76fc2c2a0 Fixed #12102 -- Corrected an example in the docs that suggested that you use a relative path in your PYTHONPATH. Thanks to alexkon for the report. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12570 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-02-24 14:50:37 +00:00
Jannis Leidel
c8fa110093 Fixed #6298 - Added sample settings file to run the Django test suite (SQLite). Thanks, Eric Holscher. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12547 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-02-23 20:45:50 +00:00
Russell Keith-Magee
156cdcf92d Fixed #12912 -- Placed the psycopg1-backed `postgresql` database backend on the deprecation path. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12510 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-02-23 12:24:41 +00:00
Jannis Leidel
8e1a4bd677 Fixed #12910 - Only test extracting translation strings if xgettext can be found on PATH. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12475 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-02-21 23:45:04 +00:00
Jannis Leidel
67d4289c2e Fixed #12066 - Moved auth context processor from core to the auth app. Thanks, Rob Hudson. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12466 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-02-21 23:40:47 +00:00
Jannis Leidel
f93f056c32 Fixed #10260 - Refactored internationalization documentation. Thanks, Ramiro Morales. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12440 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-02-16 12:12:53 +00:00
Russell Keith-Magee
c4c27d8a04 Fixed #6188, #6304, #6618, #6969, #8758, #8989, #10334, #11069, #11973 and #12403 -- Modified the syndication framework to use class-based views. Thanks to Ben Firshman for his work on this patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12338 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-01-28 13:46:18 +00:00
Luke Plant
8daec78cfd Fixed #12557 - AnonymousUser should check auth backends for permissions 
Thanks to hvdklauw for the idea and work on the patch.



git-svn-id: http://code.djangoproject.com/svn/django/trunk@12316 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-01-28 01:47:23 +00:00
Russell Keith-Magee
53b61d9c02 Fixed #12624 -- Modified test runners to be class based. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@12255 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2010-01-18 15:11:01 +00:00
Gary Wilson Jr
eddb478058 Removed a couple completed TODO items from the documentation documentation. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11996 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-26 06:49:54 +00:00
Gary Wilson Jr
adb74a8f2e Fixed several broken and redirecting URLs in the documentation (fixes #12219, refs #12427). 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11994 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-26 06:37:26 +00:00
Jannis Leidel
9233d04265 Fixed #7980 - Improved i18n framework to support locale aware formatting (dates and numbers) and form processing. 
Thanks to Marc Garcia for working on this during his Google Summer of Code 2009!

Additionally fixes #1061, #2203, #3940, #5526, #6449, #6231, #6693, #6783, #9366 and #10891.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@11964 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-22 17:58:49 +00:00
Luke Plant
6632739e94 Fixed typo 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11961 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-22 17:40:25 +00:00
Brian Rosner
5e54f6b263 Added missing quote in contributing settings code 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11955 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-22 16:00:49 +00:00
Russell Keith-Magee
ff60c5f9de Fixed #1142 -- Added multiple database support. 
This monster of a patch is the result of Alex Gaynor's 2009 Google Summer of Code project.
Congratulations to Alex for a job well done.

Big thanks also go to:
 * Justin Bronn for keeping GIS in line with the changes,
 * Karen Tracey and Jani Tiainen for their help testing Oracle support
 * Brett Hoerner, Jon Loyens, and Craig Kimmerer for their feedback.
 * Malcolm Treddinick for his guidance during the GSoC submission process.
 * Simon Willison for driving the original design process
 * Cal Henderson for complaining about ponies he wanted.

... and everyone else too numerous to mention that helped to bring this feature into fruition.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@11952 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-22 15:18:51 +00:00
Russell Keith-Magee
44b9076bbe Fixed #6262 -- Added a cached template loader, and modified existing template loaders and tag to be cacheable. Thanks to Mike Malone for the patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11862 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-14 12:08:23 +00:00
Jannis Leidel
9bf652dfd6 Fixed #11010 - Add a foundation for object permissions to authentication backends. Thanks to Florian Apolloner for writing the initial patch. 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11807 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-10 01:05:35 +00:00
Luke Plant
25020ddb05 Fixed #4604 - Configurable message passing system, supporting anonymous users 
This deprecates User.message_set in favour of a configurable messaging
system, with backends provided for cookie storage, session storage and
backward compatibility.

Many thanks to Tobias McNulty for the bulk of the work here, with
contributions from Chris Beaven (SmileyChris) and lots of code review from
Russell Keith-Magee, and input from many others.  Also credit to the authors
of various messaging systems for Django whose ideas may have been pinched
:-)



git-svn-id: http://code.djangoproject.com/svn/django/trunk@11804 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-09 16:57:23 +00:00
Luke Plant
bb428f3e86 Added section info on top-level use of django.conf.settings to 'contributing' documentation 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11802 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-12-09 12:47:50 +00:00
James Tauber
e6b4d1014e added myself to committers list 
git-svn-id: http://code.djangoproject.com/svn/django/trunk@11753 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-11-19 21:49:31 +00:00
Russell Keith-Magee
585b7acaa3 Fixed #10109 -- Removed the use of raw SQL in many-to-many fields by introducing an autogenerated through model. 
This is the first part of Alex Gaynor's GSoC project to add Multi-db support to Django.

git-svn-id: http://code.djangoproject.com/svn/django/trunk@11710 bcc190cf-cafb-0310-a4f2-bffc1f526a37
 2009-11-03 14:02:49 +00:00