mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-04-09 07:56:43 +00:00
Code Issues 32 Releases Wiki Activity
31,538 Commits 29 Branches 441 Tags
Commit Graph

12766 Commits

Author SHA1 Message Date
Mariusz Felisiak
9ec1ff7879 [4.2.x] Fixed MultipleFileFieldTest.test_file_multiple_validation() test if Pillow isn't installed. 
Follow up to fb4c55d9ec4bb812a7fb91fa20510d91645e411b.
Backport of fcfbf08abe3e6dc54894df6988024f055abc6c40 from main
 2023-05-04 08:09:27 +02:00
Mariusz Felisiak
21b1b1fc03 [4.2.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field. 
Thanks Moataz Al-Sharida and nawaik for reports.

Co-authored-by: Shai Berger <shai@platonix.com>
Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
 2023-05-03 13:43:16 +02:00
Mariusz Felisiak
290fd5ecec [4.2.x] Fixed #34529, Refs #34525 -- Reduced index operations with Meta.indexes/index_together when optimizing migrations. 
This makes squashing migrations an available path for changing
Meta.index_together, which is deprecated, to Meta.indexes.

Follow up to f81032572107846922745b68d5b7191058fdd5f5.

Backport of 8e2460d599aec95f8cfe514d3cc8acdd4ca4b1fb from main.
 2023-05-03 13:09:49 +02:00
Mariusz Felisiak
f200d83698 [4.2.x] Fixed #34515 -- Made LocaleMiddleware prefer language from paths when i18n patterns are used. 
Regression in 94e7f471c4edef845a4fe5e3160132997b4cca81.

This reverts commit 94e7f471c4edef845a4fe5e3160132997b4cca81
(refs #34069) and
partly reverts commit 3b4728310a7a64f8fcc548163b0aa5f98a5c78f5.

Thanks Anthony Baillard for the report.

Co-Authored-By: Sarah Boyce <42296566+sarahboyce@users.noreply.github.com>

Backport of 0e444e84f87d174713a2aef0c4f9704ce2865586 from main
 2023-05-02 06:33:23 +02:00
Mariusz Felisiak
fffbf85080 [4.2.x] Fixed #34512 -- Restored breadcrumbs on admin app index view. 
Thanks Adam (ataylor32) for the report.

Regression in 872b61193b013a700ff88cf50f0eb2cf2c266ff7.
Backport of 9440f6ba41e5e96458cd7949fc6d605ef5bd09e9 from main
 2023-04-26 08:37:30 +02:00
Mariusz Felisiak
f75a6977e4 [4.2.x] Refs #34483 -- Fixed timesince()/timeuntil() with timezone-aware dates on different days and interval less than 1 day. 
Follow up to 813015d67e2557fa859a07930a9becec4e5f64a0.
Regression in 8d67e16493c903adc9d049141028bc0fff43f8c8.
Backport of 198a19b692699ad3940373d9ed797fe9155f3f4a from main
 2023-04-14 17:42:33 +02:00
Scott Macpherson
090d5ccc6c [4.2.x] Fixed #34486 -- Fixed DatabaseOperations.compose_sql() crash with no existing database connection on PostgreSQL. 
Regression in 09ffc5c1212d4ced58b708cbbf3dfbfb77b782ca.

Backport of 53aee470d5b35e2708864d5221d2b5655e10c091 from main
 2023-04-14 11:02:47 +02:00
Mariusz Felisiak
cd464fbc3a
[4.2.x] Refs #34483 -- Fixed utils_tests.test_timesince crash on Python 3.8. 2023-04-14 06:10:31 +02:00
nessita
a3c14ea61b [4.2.x] Fixed #34483 -- Fixed timesince()/timeuntil() with timezone-aware dates and interval less than 1 day. 
Regression in 8d67e16493c903adc9d049141028bc0fff43f8c8.

Thanks Lorenzo Peña for the report.

Backport of 813015d67e2557fa859a07930a9becec4e5f64a0 from main
 2023-04-13 13:20:16 -03:00
Mariusz Felisiak
791407fef1 [4.2.x] Refs #34482 -- Reverted "Fixed #32969 -- Fixed pickling HttpResponse and subclasses." 
This reverts commit d7f5bfd241666c0a76e90208da1e9ef81aec44db.

Thanks Márton Salomváry for the report.

Backport of 173034b00589c083793d495e8b07e35be2cb1cf0 from main
 2023-04-12 18:53:29 +02:00
Mariusz Felisiak
2feb9333e7 [4.2.x] Fixed #34484, Refs #34482 -- Reverted "Fixed #29186 -- Fixed pickling HttpRequest and subclasses." 
This reverts commit 6220c445c40a6a7f4d442de8bde2628346153963.

Thanks Adam Johnson and Márton Salomváry for reports.

Backport of 280ca147af9cdfce1ca9cb14cc3c5527ff6c7a02 from main
 2023-04-12 18:53:22 +02:00
sarahboyce
facc153af7 [4.2.x] Fixed #34455 -- Restored i18n_patterns() respect of prefix_default_language argument when fallback language is used. 
Regression in 94e7f471c4edef845a4fe5e3160132997b4cca81.

Thanks Oussama Jarrousse for the report.

Backport of 3b4728310a7a64f8fcc548163b0aa5f98a5c78f5 from main
 2023-04-10 15:35:28 +02:00
Mariusz Felisiak
f6e0029fcd [4.2.x] Refs #34118 -- Fixed CustomChoicesTests.test_uuid_unsupported on Python 3.11.4+. 
5342f5e713

Follow up to 38e63c9e61152682f3ff982c85a73793ab6d3267.
Backport of 2eb1f37260f0e0b71ef3a77eb5522d2bb68d6489 from main
 2023-04-07 11:08:32 +02:00
Mariusz Felisiak
b0d7753d07 [4.2.x] Fixed #34470 -- Enforced UTF-8 encoding on PostgreSQL. 
Regression in 6a2165816394ab4bb259f6171e82417e098e97a6.
Backport of 5b8a043bf51ab8bcf4a758d0b4646f30a84be183 from main
 2023-04-07 10:12:19 +02:00
Anders Kaseorg
0bc2bbf041 [4.2.x] Fixed #34466 -- Reallowed setting cursor_factory in DATABASES["options"] on PostgreSQL. 
Regression in 09ffc5c1212d4ced58b708cbbf3dfbfb77b782ca.

Backport of 73cbb372baa45d1fdafd571e2f430a980831f722 from main
 2023-04-07 09:21:54 +02:00
Simon Charette
511dc3db53 [4.2.x] Fixed #34464 -- Fixed queryset aggregation over group by reference. 
Regression in 59bea9efd2768102fc9d3aedda469502c218e9b7.

Refs #28477.

Thanks Ian Cubitt for the report.

Backport of 9daf8b4109c3e133eb57349bb44d73cc60c5773c from main
 2023-04-07 06:58:24 +02:00
Mariusz Felisiak
db49def5fc [4.2.x] Fixed #34459 -- Fixed SearchVector() crash for parameters with % symbol. 
Thanks Patryk Zawadzki for the report.

Regression in 09ffc5c1212d4ced58b708cbbf3dfbfb77b782ca.

Backport of 4bf4222010fd8e413963c6c873e4088614332ef9 from main
 2023-04-06 13:33:13 +02:00
Mariusz Felisiak
dece89df81 [4.2.x] Moved SearchVectorIndexTests.test_search_vector_index to postgres_tests.test_indexes. 
Backport of 02a04ab79ae8c9e1aa10a91ee8b73fc5252a58e8 from main
 2023-04-06 13:33:08 +02:00
Mariusz Felisiak
32cfa73c6a [4.2.x] Refs #34118 -- Fixed CustomChoicesTests.test_uuid_unsupported on Python 3.12+. 
2a4d8c0a9e
Backport of 38e63c9e61152682f3ff982c85a73793ab6d3267 from main
 2023-04-05 13:59:55 +02:00
Simon Charette
647920b766 [4.2.x] Fixed #34458 -- Fixed QuerySet.defer() crash on attribute names. 
Thanks Andrew Cordery for the report.

Regression in b3db6c8dcb5145f7d45eff517bcd96460475c879.

Backport of 87c63bd8df0eb0109df333df1264c6a96707d6a4 from main
 2023-04-05 06:06:03 +02:00
Mariusz Felisiak
f12dc36754 [4.2.x] Fixed #34443 -- Fixed filtering by transforms on reverse relations. 
Regression in ce6230aa976e8d963226a3956b45a8919215dbd8.
Backport of 996c802229b93fe83c39842e56c6b8668464deaf from main
 2023-03-28 21:03:48 +02:00
Mariusz Felisiak
be6a309b1d [4.2.x] Refs #29799 -- Added field instance lookups to suggestions in FieldErrors. 
Bug in cd1afd553f9c175ebccfc0f50e72b43b9604bd97.
Backport of 3afdc9e9b47d5bdd1bd653633b4cb2357478ade5 from main
 2023-03-28 19:19:30 +02:00
Gary Jarrel
99ba5b43f0 [4.2.x] Fixed #34438 -- Reallowed extending UserCreationForm. 
Regression in 298d02a77a69321af8c0023df3250663e9d1362d.

Backport of fcc7dc5781667932bf0bf8bec76df458836e5e95 from main
 2023-03-28 12:48:25 +02:00
Tom Carrick
788f7b8100 [4.2.x] Fixed #34383 -- Fixed layout of admin fieldsets with multiple fields on the same line. 
Thanks Antonio Candido Nazareth junior for the report.

Regression in 96a598356a9ea8c2c05b22cadc12e256a3b295fd.

Co-authored-by: Mariusz Felisiak <felisiak.mariusz@gmail.com>

Backport of d687febce5868545f99974d2499a91f81a32fef5 from main
 2023-03-28 05:35:28 +02:00
Carlton Gibson
ae824eceb1 [4.2.x] Fixed #34428 -- Made ASGIStaticFilesHandler adapt response to async iterator. 
Bug in 0bd2c0c9015b53c41394a1c0989afbfd94dc2830.
Backport of 02c356f2f3945b8075735d485c3cf48cad991011 from main
 2023-03-21 20:52:59 +01:00
Mariusz Felisiak
f2923306f1 [4.2.x] Fixed #34322 -- Made ES module support to ManifestStaticFilesStorage optional. 
Co-authored-by: Author: Claude Paroz <claude@2xlibre.net>
Backport of e10c1688f96e3b2d202fe401472b7b25f6105969 from main
 2023-03-18 14:06:09 +01:00
David Wobrock
6937c92169 [4.2.x] Fixed #34384 -- Fixed session validation when rotation secret keys. 
Bug in 0dcd549bbe36c060f536ec270d34d9e7d4b8e6c7.

Thanks Eric Zarowny for the report.

Backport of 2396933ca99c6bfb53bda9e53968760316646e01 from main
 2023-03-08 11:33:03 +01:00
Tim Graham
fae76b81ce [4.2.x] Refs #34320 -- Added skipIf for a test requiring check constraints. 
Backport of 40e88ae8c899bcae3a9520f7a6519dd178185f85 from main
 2023-02-28 05:13:22 +01:00
Simon Charette
fc15d11f2e [4.2.x] Fixed #34368 -- Made subquery raise NotSupportedError when referencing outer window expression. 
Regression in f387d024fc75569d2a4a338bfda76cc2f328f627.

Co-authored-by: Jannis Vajen <jvajen@gmail.com>

Backport of c67ea79aa981ae82595d89f8018a41fcd842e7c9 from main
 2023-02-27 09:46:30 +01:00
Simon Charette
872dade29c [4.2.x] Fixed #34372 -- Fixed queryset crash on order by aggregation using OrderBy. 
Regression in 278881e37619278789942513916acafaa88d26f3 caused by a lack
of expression copying when an OrderBy expression is explicitly provided.

Thanks Jannis Vajen for the report and regression test.
Backport of b15f162f252610e3b510ade465549769ab4356cf from main
 2023-02-27 07:10:45 +01:00
Panagiotis H.M. Issaris
ce69dba000 [4.2.x] Fixed #34363 -- Fixed floatformat crash on zero with trailing zeros. 
Regression in 08c5a787262c1ae57f6517d4574b54a5fcaad124.
Follow up to 4b066bde692078b194709d517b27e55defae787c.
Backport of dcd974698301a38081c141ccba6dcafa5ed2c80e from main
 2023-02-22 20:49:04 +01:00
Laurens Verhoeven
bb94e1b7db [4.2.x] Fixed #34349 -- Fixed FormSet.empty_form crash when deleting extra forms is disabled. 
Backport of 6cbc403b8ee7014bd6dae4892d404eedb1d4a50d from main
 2023-02-20 09:33:19 +01:00
Simon Charette
aab25a69dd [4.2.x] Fixed #34346 -- Ordered selected expressions by position. 
Used the same approach as for #34176 by using selected expressions
position to prevent ambiguous aliases in collisions.

Thanks henribru for the report.

Regression in 04518e310d4552ff7595a34f5a7f93487d78a406.

Backport of 278881e37619278789942513916acafaa88d26f3 from main
 2023-02-20 06:22:18 +01:00
Simon Charette
312d0f88b4 [4.2.x] Refs #33308 -- Added tests for queryset ordered by annotation with nulls_first/nulls_last. 
Backport of a6511bc23329f1d3939571ad01d3176f8f6cb786 from main
 2023-02-18 16:29:04 +01:00
Stefan Brand
efcc0f25a7 [4.2.x] Fixed #34302 -- Fixed SpatialReference.srid for objects without top-level authority. 
Backport of eacf6b73d8eace004f840bd9b80c8c671caab9da from main
 2023-02-17 19:57:41 +01:00
Stefan Brand
341f33ed15 [4.2.x] Refs #34302 -- Fixed SpatialReference.auth_name()/auth_code() when target is None. 
force_bytes() turns None into the byte string b"None". Since
ctypes.c_char_p() also accepts None, we can bypass force_bytes() if
target is None.

Backport of d77762de038d1ab46cdcda2b7202d36c80956e25 from main
 2023-02-17 19:57:34 +01:00
Alexandre Spaeth
610cd06c3f [4.2.x] Fixed #34342, Refs #33735 -- Fixed test client handling of async streaming responses. 
Bug in 0bd2c0c9015b53c41394a1c0989afbfd94dc2830.

Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of 52b054824e899db40ba48f908a9a00dadc56cb89 from main
 2023-02-17 11:48:59 +01:00
Alexandre Spaeth
1ecbc04624 [4.2.x] Refs #34342 -- Added tests for handling sync streaming responses by test client. 
Co-authored-by: Carlton Gibson <carlton.gibson@noumenal.es>

Backport of bfb8fda3e69cc6f5c6695ba70117faff51cc25a9 from main
 2023-02-17 11:48:53 +01:00
nabil-rady
3b09f35558 [4.2.x] Fixed #34320 -- Make sure constraints names are obtained from truncated columns names. 
Backport of 6bdc3c58b65eb32fd63cd41849f00a17a36b4473 from main
 2023-02-15 16:52:31 +01:00
DevilsAutumn
5cde08f702 [4.2.x] Fixed #34250 -- Fixed renaming model with m2m relation to a model with the same name. 
Backport of ff3a2834224f527ca574b5cd0d578c8c26d51a6c from main
 2023-02-14 14:33:45 +01:00
Markus Holtermann
7ac5ff37b8 [4.2.x] Fixed CVE-2023-24580 -- Prevented DoS with too many uploaded files. 
Thanks to Jakob Ackermann for the report.
 2023-02-14 08:21:18 +01:00
sarahboyce
5510a12c90 [4.2.x] Fixed #34316 -- Fixed layout of admin password change forms and help texts. 
Regression in 96a598356a9ea8c2c05b22cadc12e256a3b295fd.

Backport of e67804668115fd388e7554c6a809bd409f70adfe from main
 2023-02-13 11:52:09 +01:00
Dhanush
a0623b117c [4.2.x] Fixed #32813 -- Made runserver display port after binding. 
Thanks Florian Apolloner for the review.

Backport of a18d20ca97e6799152c1e0b6f007fde943053dcb from main
 2023-02-10 09:55:35 +01:00
Mariusz Felisiak
836ae73a89 [4.2.x] Fixed #34319 -- Fixed Model.validate_constraints() crash on ValidationError with no code. 
Thanks Mateusz Kurowski for the report.

Regression in 667105877e6723c6985399803a364848891513cc.
Backport of 2fd755b361d3da2cd0440fc9839feb2bb69b027b from main
 2023-02-08 16:39:53 +01:00
Bakdolot
1f193f7f56 [4.2.x] Fixed #34315 -- Preserved admin changelist filters on "Close" button. 
Backport of 325c44ac6c070465ef2b3b7b8ed06cbcb88a3f10 from main
 2023-02-08 10:21:40 +01:00
Nils VAN ZUIJLEN
e8a39da396 [4.2.x] Fixed #34285 -- Fixed index/slice lookups on filtered aggregates with ArrayField. 
Thanks Simon Charette for the review.

Backport of ae1fe72e9b1f5fe3b05e5b670bd0c205cd305e71 from main
 2023-02-07 14:06:08 +01:00
Jacob Walls
714d59d57f [4.2.x] Fixed #33638 -- Fixed GIS lookups crash with geography fields on PostGIS. 
Backport of 4403432b759124aa613249373e0d2ede64ae8765 from main
 2023-02-07 12:24:24 +01:00
Frederic Mheir
d70b2a88e8 [4.2.x] Fixed #34301 -- Made admin's submit_row check add permission for "Save as new" button. 
Backport of 2878938626aed211d03db33a9a135c9b1d933069 from main
 2023-02-07 07:31:51 +01:00
Mariusz Felisiak
9a1848f48c
[4.2.x] Increased the default PBKDF2 iterations for Django 4.2. 
See https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html#pbkdf2.

Thanks Markus Holtermann for the report.
 2023-02-04 13:36:06 +01:00
Adam Johnson
beaa5f31e1 [4.2.x] Fixed #34259 -- Passed called_from_command_line to command subparsers. 
Backport of 017fa23d3b0aee9142f531c2a0002fc86c82a54c from main
 2023-02-03 07:54:15 +01:00