Tim Graham
d8725878ed
[1.9.x] Added release date for 1.9.5 and 1.8.12.
...
Backport of 93539ba2f42fe56bacefd09a9e8f93b31565f746 from master
2016-04-01 13:30:33 -04:00
Claude Paroz
6a8ba2eef4
[1.9.x] Fixed #25532 -- Properly redisplayed JSONField form input values
...
Thanks David Szotten for the report and Tommy Beadle for code inspiration.
Thanks Tim Graham for the review.
Partial backport of db19619545 from master.
2016-04-01 09:10:35 +02:00
Alex Hill
ed87af3266
[1.9.x] Fixed #26384 -- Fixed renaming the PK on a model with a self-referential FK on SQLite.
...
Backport of 4b2cf1cd27587a30b3b081091627d7ee13141afe from master
2016-03-29 13:26:59 -04:00
Simon Charette
026574e03c
[1.9.x] Fixed #26413 -- Fixed a regression with abstract model inheritance and explicit parent links.
...
Thanks Trac alias trkjgrdg for the report and Tim for investigation and review.
Backport of 67cf5efa31acb2916034afb15610b700695dfcb0 from master
2016-03-28 21:15:16 -04:00
Tim Graham
1f15d442bf
[1.9.x] Fixed #26387 -- Restored the functionality of the admin's raw_id_fields in list_editable.
...
Backport of acfaec3db5ba39de52f6e607e74343dccf72fba1 from master
2016-03-25 14:22:38 -04:00
ieatkittens
ccc367fd48
[1.9.x] Fixed #26293 -- Fixed CommonMiddleware to process PREPEND_WWW and APPEND_SLASH independently.
...
Backport of 9390da7fb6e251eaa9a785692f987296cb14523f from master
2016-03-23 09:29:37 -04:00
Jason Parrott
4e8c265319
[1.9.x] Fixed #26373 -- Fixed reverse lookup crash with a ForeignKey to_field in a subquery.
...
Backport of 4c1c93032f4a015cbb4b33958603d18ac43515b4 from master
2016-03-19 17:55:31 -04:00
Berker Peksag
b4bb2ad13d
[1.9.x] Fixed #26297 -- Fixed collectstatic --clear
crash if storage doesn't implement path().
...
Backport of 28bcff82c5ed4694f4761c303294ffafbd7096ce from master
2016-03-17 09:51:48 -04:00
Alex Hill
f49cfb76c7
[1.9.x] Fixed #26306 -- Fixed memory leak in cached template loader.
...
Backport of ecb59cc6579402b68ddfd4499bf30edacf5963be from master
2016-03-16 12:43:37 -04:00
Vincenzo Pandolfo
c6424efbc6
[1.9.x] Fixed #26334 -- Removed whitespace stripping from contrib.auth password fields.
...
Backport of d0fe6c915665fa3220e84bd691ba7002a357e5c5 from master
2016-03-14 20:24:19 -04:00
Jakub Wilk
9ed08da6c6
[1.9.x] Fixed typos in docs.
...
Backport of 402da9ab7b2bae807b7ea30c23ef524b0aeb1903 from master
2016-03-14 08:09:02 -04:00
Tim Graham
5b6c751230
[1.9.x] Fixed #26324 -- Fixed DurationField with fractional seconds on SQLite.
...
Backport of 4f0cd0fd162122da96978b357ac9fc9534529410 from master
2016-03-10 19:16:20 -05:00
Przemysław Suliga
76926f343a
[1.9.x] Fixed #26332 -- Fixed a race condition in BaseCache.get_or_set().
...
Backport of 96ec67a7cf89a136e793305343c5bba8521cdb47 from master
2016-03-08 11:45:09 -05:00
John-Mark Bell
809eb5ddee
[1.9.x] Fixed #26325 -- Made MultiPartParser ignore filenames that normalize to an empty string.
...
Backport of 4b129ac81f4fa38004950d0b307f81d1e9b44af8 from master
2016-03-07 13:22:11 -05:00
Tim Graham
52b06546c0
[1.9.x] Fixed typo in docs/releases/1.8.12.txt.
...
Backport of bc0410d98adcb70ad91f37fa9fee9a7ae71faa18 from master
2016-03-05 10:02:58 -05:00
Tim Graham
51b7f10213
[1.9.x] Added stub release notes for 1.9.5/1.8.12.
...
Backport of c960af4adb87f8ce87f5698902b68e8332e448cb from master
2016-03-05 10:01:04 -05:00
Claude Paroz
9c195d45a6
[1.9.x] Added safety to URL decoding in is_safe_url() on Python 2
...
The errors='replace' parameter to force_text altered the URL before checking
it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.
Backport of 552f03869e from master.
2016-03-04 23:38:32 +01:00
Claude Paroz
78f4830056
[1.9.x] Fixed #26308 -- Prevented crash with binary URLs in is_safe_url()
...
This fixes a regression introduced by c5544d28923.
Thanks John Eskew for the reporti and Tim Graham for the review.
Backport of ada7a4aef from master.
2016-03-04 21:15:44 +01:00
Tim Graham
067d8c3500
[1.9.x] Fixed typo in docs/releases/1.9.1.txt.
...
Backport of cecbf1bdef04e00e6947f47d96198aa57c2a0dc3 from master
2016-03-04 14:17:48 -05:00
Tim Graham
2a9ce36271
[1.9.x] Added stub release notes for 1.8.11.
...
Backport of 2f0c785a4c2353a3035ba6022cec5e25fb9d569b from master
2016-03-04 09:48:08 -05:00
Alasdair Nicol
c6d39c644d
[1.9.x] Fixed #26309 -- Documented that login URL settings no longer support dotted paths.
...
Backport of 2404d209a5e8c4573927e14587735562b79e13ed from master
2016-03-03 07:48:28 -05:00
Dmitry Dygalo
fddd79dacd
[1.9.x] Fixed typo in 1.9.3/1.8.10 release date.
...
Backport of 5155c2b4587629c4bc77a11846e5b9d3ba5a43ef from master
2016-03-02 07:09:48 -05:00
Tim Graham
e0ea4edca0
[1.9.x] Added stub release notes for 1.9.4.
...
Backport of 2e895d2870860e9855b79fcda41693783671ed12 from master
2016-03-01 12:39:22 -05:00
Tim Graham
a53ee2bbf4
[1.9.x] Added CVE-2016-2512/2513 to security release archive.
...
Backport of 24fc9352183c449a8b11d1c7b442e70aa61a8800 from master
2016-03-01 12:36:17 -05:00
Florian Apolloner
af7d09b0c5
[1.9.x] Fixed CVE-2016-2513 -- Fixed user enumeration timing attack during login.
...
This is a security fix.
2016-03-01 11:38:49 -05:00
Mark Striemer
fc6d147a63
[1.9.x] Fixed CVE-2016-2512 -- Prevented spoofing is_safe_url() with basic auth.
...
This is a security fix.
2016-03-01 11:38:49 -05:00
Tim Graham
7e799217c5
[1.9.x] Added stub release notes for security issues.
2016-03-01 11:38:49 -05:00
Simon Charette
48cf751640
[1.9.x] Fixed #26186 -- Documented how app relative relationships of abstract models behave.
...
This partially reverts commit bc7d201bdbaeac14a49f51a9ef292d6312b4c45e.
Thanks Tim for the review.
Refs #25858 .
Backport of 0223e213dd690b6b6e0669f836a20efb10998c83 from master
2016-02-29 22:13:54 -05:00
Simon Charette
ba6f83ec95
[1.9.x] Fixed #26286 -- Prevented content type managers from sharing their cache.
...
This should prevent managers methods from returning content type instances
registered to foreign apps now that these managers are also attached to models
created during migration phases.
Thanks Tim for the review.
Refs #23822 .
Backport of 3938b3ccaa85f1c366909a4839696007726a09da from master
2016-02-26 16:22:17 -05:00
Ivan Tsouvarev
cd46947ddb
[1.9.x] Fixed #26280 -- Fixed cached template loader crash when loading nonexistent template.
...
Backport of 8890c533e0b53cb0021bd5faf15668430cd3075a from master
2016-02-26 08:02:34 -05:00
Sjoerd Job Postmus
911a77fcca
[1.9.x] Fixed #26231 -- Used .get_username in admin login template.
...
Backport of bbe136e1a2f9cbf3fd10d49fbe8558a5b394752c from master
2016-02-25 19:30:37 -05:00
Jon Dufresne
04780e8a25
[1.9.x] Fixed #26267 -- Fixed BoundField to reallow slices of subwidgets.
...
Backport of b41268135995cef46d40e550f9301fab20cf330d from master
2016-02-24 07:03:24 -05:00
Tim Graham
c6ab81db79
[1.9.x] Refs #26253 -- Amended release note as this issue doesn't affect 1.8.
2016-02-22 17:18:31 -05:00
Tim Graham
3fedfc452f
[1.9.x] Fixed #26253 -- Fixed crashing deprecation shims in SimpleTemplateResponse.
...
Thanks David Reitter for the report and initial patch.
2016-02-22 17:07:07 -05:00
Tim Graham
07ffee6411
[1.9.x] Fixed #26204 -- Reallowed dashes in top-level domains for URLValidator.
...
Thanks Shai Berger for the review.
Backport of b1afebf882db5296cd9dcea26ee66d5250922e53 from master
2016-02-18 19:51:29 -05:00
Akshesh
0d2b97ca18
[1.9.x] Fixed #26219 -- Fixed crash when filtering by Decimal in RawQuery.
...
Backport of fdccc02576ae5a524338f65e629948604d80b4c8 from master
2016-02-17 14:00:38 -05:00
Claude Paroz
205cafd01e
[1.9.x] Fixed #26215 -- Fixed RangeField/ArrayField serialization with None values
...
Also added tests for HStoreField and JSONField.
Thanks Aleksey Bukin for the report and Tim Graham for the initial patch and
the review.
Backport of 928c12eb1 from master.
2016-02-16 21:09:16 +01:00
Alexey Kotlyarov
765e6c411c
[1.9.x] Fixed #26212 -- Made forms.FileField and translation.lazy_number() picklable.
...
Backport of b59f963ad2a49322725b20fac71661bd49643443 from master
2016-02-15 11:45:44 -05:00
Anssi Kääriäinen
1d9ee181fe
[1.9.x] Fixed #26196 -- Made sure __in lookups use to_field as default.
...
Thanks Simon Charette for the test.
Backport of 46ecfb9b3a11a360724e3375ba78c33c46d6a992 from master
2016-02-11 11:09:55 -05:00
Anssi Kääriäinen
25496f0f7b
[1.9.x] Fixed #26153 -- Reallowed Q-objects in ForeignObject.get_extra_descriptor_filter().
...
Backport of 353aecbf8c1a8cc6f3985149e2895d49e53dfc1c from master
2016-02-11 09:00:38 -05:00
Simon Charette
58723722e9
Fixed #26162 -- Checked query name clashes of hidden relationships.
...
Although reverse accessor clashes should be skipped query name can't be hidden.
Thanks to Ian Foote and Tim Graham for the review.
2016-02-08 10:31:01 -05:00
Tim Graham
6b689a505c
[1.9.x] Fixed #26177 -- Fixed a PostgreSQL crash with TIME_ZONE=None and USE_TZ=False.
...
Backport of 97eb3356b2a7488c8d0ca0e47ef3e538852d44a2 from master
2016-02-08 07:41:56 -05:00
Tim Graham
530f0adcf3
[1.9.x] Added stub release notes for 1.8.10.
...
Backport of d6337e65ed86ac0d2e55ebcbc710c42f87e0a3b6 from master
2016-02-06 09:24:56 -05:00
Carl Meyer
239a1f74fd
[1.9.x] Fix typos in 1.8 release notes.
...
Backport of a0ce4c09ff516af52718885120c2231404515428 from master
2016-02-03 15:27:35 -05:00
Tim Graham
194bf8ca62
[1.9.x] Refs #26089 -- Removed obsolete docs about custom user model testing.
...
Backport of 1e9150443e5696d764ed81c97b53ef0365a5d854 from master
2016-02-02 08:55:06 -05:00
Buddy Lindsey, Jr
3a063b0dcc
[1.9.x] Fixed #26155 -- Skipped URL checks if no ROOTURL_CONF setting.
...
Backport of 731bdfe68ae8dd332702b1838db44f0efe433e2e from master
2016-02-01 14:00:08 -05:00
Tim Graham
34fae0a4f7
[1.9.x] Added CVE-2016-2048 to the security archive.
...
Backport of ecd502cfdb57706dd0e84d9928934bcae6b1ef25 from master
2016-02-01 12:43:02 -05:00
Tim Graham
cc36944935
[1.9.x] Added stub release notes for 1.9.3.
...
Backport of 59654d5efe94ea7a01102f6208e33dcc259d65fb from master
2016-02-01 12:39:50 -05:00
Tim Graham
715cc35467
[1.9.x] Added release dates for 1.9.2 and 1.8.9.
2016-02-01 12:05:08 -05:00
Myk Willis
adbca5e4db
[1.9.x] Fixed incorrect permissions check for admin's "Save as new".
...
This is a security fix.
2016-02-01 12:05:08 -05:00