* Move the discussion of CachedStaticFilesStorage to the section about
HTTP. It's really about client-side caching. It doesn't fit with the
caching utilities from django.utils.functional.
* Tone down the warning against Pypy as per Alex' feedback. It's a valid
choice for advanced users who are comfortable using a non-standard
stack.
* Generally reworded the 'Using different versions of available software'
section.
* Some other minor adjustments to the document.
- Noted that this does not allow for reading and writing the same open
file in different processes under Windows.
- Noted that the keyword arguments to NamedTemporaryFile no longer
match the Python version.
tearDownClass is not called if setUpClass throws an exception, in our case
this means that LiveServerTestCase leaks LiveServerThread sockets if the
test happens to be skipped later on, and AdminSeleniumWebDriverTestCase
doesn't close it's already open browser window. To prevent this leakage
we catch errors where needed and manually call _tearDownClassInternal.
_tearDownClassInternal should be written as defensively as possible since
it is not allowed to make any assumptions on how far setUpClass got.
This patch should fix the sporadic "Address already in use"-errors on jenkins
and also the "This code isn't under transaction management"-error for sqlite
(also just on jenkins).
After discussion with koniiiik, jezdez, kmtracey, tos9, lifeless, nedbat and
voidspace it was decided that this is the safest approach (thanks to everyone
for their comments and help). Manually calling tearDownClass was shut down
cause we don't know how our users override our classes.
This is a private and very specialized API on purpose and should not be used
without a strong reason!
This patch partially reverts the earlier attempts to fix those issues,
namely:
2fa0dd73b1 and
3c5775d36f
Final note: If this patch breaks in a later version of Django, please be
very careful on how you fix it, you might not see test failures locally.
That said, this patch hopefully doesn't produce even more failures.
* Limit the password length to 4096 bytes
* Password hashers will raise a ValueError
* django.contrib.auth forms will fail validation
* Document in release notes that this is a backwards incompatible change
Thanks to Josh Wright for the report, and Donald Stufft for the patch.
This is a security fix; disclosure to follow shortly.
Florian Apolloner
Simon Charette
mlissner
Aymeric Augustin
Alex Gaynor
Alexander
Curtis Maloney
Daniele Procida
tschilling
Paul McMillan
Markus Amalthea Magnuson
yokomizor
Paul McMillan
Kevin Christopher Henry
Tim Graham
Russell Keith-Magee
James Bennett
Brian Holdefehr
Berker Peksag
Anssi Kääriäinen
Markus Holtermann
Beshr Kayali
Ramiro Morales