1
0
mirror of https://github.com/django/django.git synced 2024-12-28 03:55:50 +00:00
Commit Graph

13475 Commits

Author SHA1 Message Date
Natalia
3db945a6b3 [5.0.x] Added CVE-2023-43665 to security archive.
Backport of 4e790271e3 from main
2023-10-04 13:13:06 -03:00
Natalia
8124c42601 [5.0.x] Fixed CVE-2023-43665 -- Mitigated potential DoS in django.utils.text.Truncator when truncating HTML text.
Thanks Wenchao Li of Alibaba Group for the report.
2023-10-04 09:38:26 -03:00
faishalmanzar
25a614639f [5.0.x] Fixed #32602 -- Clarified wording of TestCase class.
Backport of f4e72e6523 from main
2023-10-02 11:49:00 +02:00
Natalia
0ca421c5aa [5.0.x] Added stub release notes and release date for 4.2.6, 4.1.12, and 3.2.22.
Backport of 5e4b75b78a from main
2023-09-27 14:26:21 -03:00
Mariusz Felisiak
33ca9f91c2 [5.0.x] Added warning about flatpages and untrusted users.
Backport of 571bab9887 from main
2023-09-27 19:09:38 +02:00
Mariusz Felisiak
2566f92544 [5.0.x] Fixed #34840 -- Avoided casting string base fields on PostgreSQL.
Thanks Alex Vandiver for the report.

Regression in 09ffc5c121.

Backport of 779cd28acb from main.
2023-09-22 06:03:19 +02:00
David Sanders
fb5dd118e9 [5.0.x] Refs #34808 -- Doc'd that aggregation functions on empty groups can return None.
Backport of 78b5c90753 from main
2023-09-21 13:17:32 -03:00
Paolo Melchiorre
7e4c1e8b3d [5.0.x] Refs #31300 -- Added example to GeneratedField release notes.
Backport of 0b506bfe1a from main
2023-09-20 09:01:41 +02:00
Mariusz Felisiak
ab5124c227 [5.0.x] Added updating the Django release process on Trac to release steps.
Backport of 7c1cf585e8 from main
2023-09-19 08:25:33 -03:00
Mariusz Felisiak
1eeb84aa04 [5.0.x] Fixed typo in docs/releases/5.0.txt.
Backport of 909f8e4c24 from main
2023-09-19 09:27:58 +02:00
Natalia
fbfa1b669a [5.0.x] Bumped django_next_version in docs config. 2023-09-18 11:28:22 -03:00
Natalia
613b7ba212 Made cosmetic edits to docs/releases/5.0.txt. 2023-09-18 10:21:25 -03:00
Natalia
a7aaba0f85 Removed empty sections from 5.0 release notes. 2023-09-18 09:51:35 -03:00
Natalia
3eb7051161 Updated man page for Django 5.0 alpha. 2023-09-18 09:25:34 -03:00
Clément Escolano
cac94dd8aa Fixed #33651 -- Added support for prefetching GenericForeignKey.
Co-authored-by: revanthgss <revanthgss@almabase.com>
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-09-18 13:23:21 +02:00
Mariusz Felisiak
190874eadd
Fixed #34560 -- Updated admin's jQuery to 3.7.1. 2023-09-18 08:54:44 +02:00
Ryanwalker277
225328efd9 Fixed #31558 -- Added support for boolean attribute on properties in ModelAdmin.list_display. 2023-09-16 20:54:26 +02:00
therealrinku
aebedb7bd1 Fixed typo in docs/howto/custom-file-storage.txt. 2023-09-16 07:03:10 +02:00
Mariusz Felisiak
88b5b7b8e5
Corrected QuerySet.prefetch_related() note about GenericRelation().
GenericRelation is a reverse generic relationship so it's always
homogeneous. Mentioning this as a restriction is confusing.
2023-09-16 06:57:38 +02:00
Sarah Abderemane
814e7bc220 Fixed #34832 -- Made admin's header content render in <header> tag.
Header tag was changed to <header> get the landmark banner for
accessibility.
2023-09-15 05:36:43 +02:00
Mariusz Felisiak
e2a3a896cf
Refs #15619 -- Removed deprecated annotation about logging out via GET requests.
Follow up to 6c57c08ae5.
2023-09-14 19:49:06 +02:00
Natalia
691f70c477 Fixed #24561 -- Added support for callables on model fields' choices. 2023-09-14 10:15:33 -03:00
Michele Mazzucchi
5bfb3cbf49 Doc'd HttpResponse.cookies. 2023-09-14 11:21:47 +02:00
Sarah Abderemane
91e617c743 Fixed #34833 -- Made admin's main content render in <main> tag. 2023-09-14 05:41:31 +02:00
Nick Pope
f92e68c30a Fixed #34822 -- Added support for serializing functions decorated with functools.lru_cache in migrations.
`@functools.cache` and `@functools.lru_cache` return an object of type
`functools._lru_cache_wrapper` which prevented the migrations serializer from
working. Simply using the existing `FunctionTypeSerializer` for this additional
type works as expected.
2023-09-13 15:57:18 -03:00
Nick Pope
c131949e3e Refs #34822 -- Added tests for serializing decorated functions in migrations.
Functions decorated with a decorator that is properly wrapped, e.g. by
using `@functools.wraps`, are already supported.
2023-09-13 15:39:56 -03:00
Ben Lomax
74f7deec9e Refs #31949 -- Made make_middleware_decorator to work with async functions. 2023-09-13 11:41:01 +02:00
Nick Pope
e15174983a Renamed ChoicesMeta to ChoicesType.
This also uses enum.EnumType for Python 3.11+ as Python 3.11 renamed
EnumMeta to EnumType. While the former is still available as an alias
of the latter for now, let's prefer the canonical name for this.

Check out https://docs.python.org/3/library/enum.html#enum.EnumType
2023-09-12 11:51:01 +02:00
Sam Toyer
64cea1e48f Fixed #34752 -- Fixed handling ASGI http.disconnect for streaming responses. 2023-09-11 19:53:21 +02:00
Mariusz Felisiak
a7c73b944f
Fixed #34821 -- Prevented DEFAULT_FILE_STORAGE/STATICFILES_STORAGE settings from mutating the main STORAGES.
Regression in 6b965c6000.
2023-09-11 13:04:32 +02:00
Yves Weissig
369b498219 Fixed #34642 -- Added File.open() support for *args and **kwargs. 2023-09-11 06:07:47 +02:00
Jeremy Nauta
f333e3513e Fixed #31300 -- Added GeneratedField model field.
Thanks Adam Johnson and Paolo Melchiorre for reviews.

Co-Authored-By: Lily Foote <code@lilyf.org>
Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com>
2023-09-07 06:19:08 +02:00
François Freitag
cafe7266ee Fixed #34730 -- Added django.contrib.messages.test.MessagesTestMixin.assertMessages(). 2023-09-05 11:55:37 +02:00
Jacob Walls
6c6606aa01 Refs #34233 -- Bumped minimum supported version of docutils to 0.19. 2023-09-04 22:30:45 +02:00
Nick Pope
26a4ac7736
Fixed #34814 -- Confirmed support for PostGIS 3.4. 2023-09-04 14:58:34 +02:00
Mariusz Felisiak
a534835c7b Added stub release notes for 4.2.6. 2023-09-04 13:22:22 +02:00
Mariusz Felisiak
8a98768868 Added CVE-2023-41164 to security archive. 2023-09-04 13:09:48 +02:00
Mariusz Felisiak
3f41d6d629 Fixed CVE-2023-41164 -- Fixed potential DoS in django.utils.encoding.uri_to_iri().
Thanks MProgrammer (https://hackerone.com/mprogrammer) for the report.

Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-09-04 11:58:37 +02:00
Sulabh Katila
9a9620dda6 Fixed #34768 -- Avoided initializing colorama on non-Windows platforms. 2023-09-01 11:26:29 +02:00
willzhao
9cc0d7f7f8 Fixed #34803 -- Fixed queryset crash when filtering againts deeply nested OuterRef annotations.
Thanks Pierre-Nicolas Rigal for the report.

Regression in c67ea79aa9.
2023-09-01 10:44:20 +02:00
Bruno Alla
4c4536f744 Refs #34712 -- Added system check for staticfiles storage in STORAGES setting.
Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>
Co-authored-by: Natalia Bidart <124304+nessita@users.noreply.github.com>
2023-08-31 08:21:44 +02:00
David Smith
74b5074174 Fixed #34210 -- Added unittest's durations option to the test runner. 2023-08-31 07:14:58 +02:00
David Smith
27b399d235 Fixed #34547 -- Deprecated DatabaseOperations.field_cast_sql(). 2023-08-31 06:18:07 +02:00
Nick Pope
500e01073a
Fixed #31262 -- Added support for mappings on model fields and ChoiceField's choices. 2023-08-30 22:57:40 -03:00
Olivier Tabone
3f8dbe267d Fixed #34757 -- Added support for following redirects to AsyncClient. 2023-08-30 06:12:25 +02:00
Mariusz Felisiak
24f1a38b37 Added stub release notes and release date for 4.2.5, 4.1.11, and 3.2.21. 2023-08-28 06:10:20 +02:00
Mariusz Felisiak
11920e7795
Fixed #34709 -- Raised BadRequest for non-UTF-8 requests with the application/x-www-form-urlencoded content type.
Thanks Eki Xu for the report.
2023-08-25 21:27:22 +02:00
Mariusz Felisiak
9c37103a98
Refs #33507 -- Doc'd using UUID data type on MariaDB 10.7+ in UUIDField docs.
Follow up to 7cd187a5ba.
2023-08-25 11:24:21 +02:00
François Freitag
b7fe36ad37 Refs #34730 -- Made Message importable from django.contrib.messages. 2023-08-25 06:55:12 +02:00
Mariusz Felisiak
9942a3e49b
Avoided counting exceptions in AsyncClient docs.
Follow up to ad6bb20557.
2023-08-24 05:19:52 +02:00