Claude Paroz 552f03869e Added safety to URL decoding in is_safe_url() on Python 2 ...

The errors='replace' parameter to force_text altered the URL before checking
it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.

2016-03-04 23:33:35 +01:00

..

0.95.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

0.96.txt

Fixed links to DATABASE ENGINE setting. refs #19516

2012-12-24 15:38:05 -05:00

1.0-porting-guide.txt

Added missing period to "etc.".

2016-01-11 18:05:15 -05:00

1.0.1.txt

Updated obsolete links in the documentation

2012-06-28 10:49:07 +02:00

1.0.2.txt

…

1.0.txt

Updated Wikipedia links to use https

2015-08-08 12:02:32 +02:00

1.1.2.txt

Updated capitalization in the word "JavaScript" for consistency

2015-05-01 13:26:42 -04:00

1.1.3.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.1.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.1.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.2.1.txt

Fixed a number of minor misspellings.

2013-07-27 18:46:03 -07:00

1.2.2.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.2.3.txt

Added placeholder release notes for the 1.2.1 and 1.2.3 releases.

2011-08-26 09:31:01 +00:00

1.2.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.2.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.2.6.txt

Added basic release notes for 1.2.6 and 1.3.1.

2011-09-10 03:33:54 +00:00

1.2.7.txt

Whitespace cleanup.

2013-10-10 16:49:20 -04:00

1.2.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.3.1.txt

Added basic release notes for 1.2.6 and 1.3.1.

2011-09-10 03:33:54 +00:00

1.3.2.txt

Added 1.4.1 and 1.3.2 release notes

2012-08-31 20:35:50 +02:00

1.3.3.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.3.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.3.6.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.3.7.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.1.txt

Added 1.4.1 and 1.3.2 release notes

2012-08-31 20:35:50 +02:00

1.4.2.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.3.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.5.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.4.6.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.7.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.8.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.9.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.10.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.11.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.4.12.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.4.13.txt

Fixed typo in path to is_safe_url()

2015-02-20 09:21:39 -05:00

1.4.14.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.4.15.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.4.16.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.4.17.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.4.18.txt

Fixed typo in path to is_safe_url()

2015-02-20 09:21:39 -05:00

1.4.19.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

1.4.20.txt

Made is_safe_url() reject URLs that start with control characters.

2015-03-18 19:20:07 -04:00

1.4.21.txt

Prevented newlines from being accepted in some validators.

2015-07-08 15:23:03 -04:00

1.4.22.txt

Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:28:37 -04:00

1.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.1.txt

Used https for most *.python.org links

2014-12-19 18:07:52 +01:00

1.5.2.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.3.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.6.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.5.7.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.5.8.txt

Fixed typo in path to is_safe_url()

2015-02-20 09:21:39 -05:00

1.5.9.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.5.10.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.5.11.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.5.12.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.6.1.txt

Copied 1.6.1 release notes from stable/1.6.x branch.

2013-12-12 15:08:22 -05:00

1.6.2.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.6.3.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.6.4.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.6.5.txt

Fixed typo in path to is_safe_url()

2015-02-20 09:21:39 -05:00

1.6.6.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.6.7.txt

Added dates to release notes.

2014-09-02 21:34:29 -04:00

1.6.8.txt

Added release dates to release notes.

2014-10-22 12:23:21 -04:00

1.6.9.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.6.10.txt

Fixed typo in path to is_safe_url()

2015-02-20 09:21:39 -05:00

1.6.11.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

1.6.txt

Refs #26089 -- Removed obsolete docs about custom user model testing.

2016-02-02 08:12:08 -05:00

1.7.1.txt

Added release dates to release notes.

2014-10-22 12:23:21 -04:00

1.7.2.txt

Refs #23957 -- Required session verification per deprecation timeline.

2015-09-23 19:31:10 -04:00

1.7.3.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.7.4.txt

Added 1.4.19 release notes.

2015-01-27 11:48:04 -05:00

1.7.5.txt

Added release date for 1.7.5 release.

2015-02-25 08:47:11 -05:00

1.7.6.txt

Refs #24461 -- Added test/release notes for XSS issue in ModelAdmin.readonly_fields

2015-03-09 10:12:21 -04:00

1.7.7.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

1.7.8.txt

Added dates to release notes.

2015-05-01 16:24:39 -04:00

1.7.9.txt

Prevented newlines from being accepted in some validators.

2015-07-08 15:23:03 -04:00

1.7.10.txt

Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:28:37 -04:00

1.7.11.txt

Added release date for 1.8.7/1.7.11 releases.

2015-11-24 11:20:29 -05:00

1.7.txt

Unified some doc links to OneToOneField and ManyToManyField.

2016-02-01 11:02:26 -05:00

1.8.1.txt

Fixed #23868 -- Added support for non-unique django-admin-options in docs.

2016-01-14 18:21:33 -05:00

1.8.2.txt

Added release date for 1.8.2.

2015-05-20 13:48:06 -04:00

1.8.3.txt

Fixed catastrophic backtracking in URLValidator.

2015-07-08 15:23:03 -04:00

1.8.4.txt

Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:28:37 -04:00

1.8.5.txt

Added release date for 1.8.5.

2015-10-03 19:31:45 -04:00

1.8.6.txt

Added release date for 1.8.6.

2015-11-04 17:48:49 +01:00

1.8.7.txt

Added release date for 1.8.7/1.7.11 releases.

2015-11-24 11:20:29 -05:00

1.8.8.txt

Added release date for 1.9.1/1.8.8 releases.

2016-01-02 08:35:54 -05:00

1.8.9.txt

Added release dates for 1.9.2 and 1.8.9.

2016-02-01 12:02:16 -05:00

1.8.10.txt

Fixed typo in 1.9.3/1.8.10 release date.

2016-03-02 07:08:36 -05:00

1.8.11.txt

Added safety to URL decoding in is_safe_url() on Python 2

2016-03-04 23:33:35 +01:00

1.8.txt

Fixed #26309 -- Documented that login URL settings no longer support dotted paths.

2016-03-03 07:34:14 -05:00

1.9.1.txt

Fixed typo in docs/releases/1.9.1.txt.

2016-03-04 14:16:56 -05:00

1.9.2.txt

Added release dates for 1.9.2 and 1.8.9.

2016-02-01 12:02:16 -05:00

1.9.3.txt

Fixed typo in 1.9.3/1.8.10 release date.

2016-03-02 07:08:36 -05:00

1.9.4.txt

Added safety to URL decoding in is_safe_url() on Python 2

2016-03-04 23:33:35 +01:00

1.9.txt

Fixed #25968 -- Changed project/app templates to use a "py-tpl" suffix.

2016-01-25 12:39:06 -05:00

1.10.txt

Fixed #26295 -- Allowed using i18n_patterns() in any root URLconf.

2016-03-03 12:08:49 -05:00

index.txt

Added stub release notes for 1.8.11.

2016-03-04 09:47:43 -05:00

security.txt

Added CVE-2016-2512/2513 to security release archive.

2016-03-01 12:32:42 -05:00