Tim Graham 770427c289 [1.8.x] Made is_safe_url() reject URLs that start with control characters. ...

This is a security fix; disclosure to follow shortly.

2015-03-18 19:23:21 -04:00

..

apps

[1.8.x] Sorted imports with isort; refs #23860.

2015-02-09 14:24:06 -05:00

bin

[1.8.x] Removed django-2to3.py

2015-02-06 08:56:01 -05:00

conf

[1.8.x] Updated translation catalogs

2015-03-18 09:29:12 +01:00

contrib

[1.8.x] Fixed #24495 -- Allowed unsaved model instance assignment check to be bypassed.

2015-03-18 19:12:46 -04:00

core

[1.8.x] Fixed #24427 -- Stopped writing migration files in dry run mode when merging.

2015-03-16 19:45:55 -04:00

db

[1.8.x] Fixed #24495 -- Allowed unsaved model instance assignment check to be bypassed.

2015-03-18 19:12:46 -04:00

dispatch

[1.8.x] Sorted imports with isort; refs #23860.

2015-02-09 14:24:06 -05:00

forms

[1.8.x] Refs #24469 -- Fixed escaping of forms, fields, and media in non-Django templates.

2015-03-18 09:11:44 -04:00

http

[1.8.x] Fixed #20889 -- Prevented BadHeaderError when Python inserts newline

2015-02-19 20:19:38 +01:00

middleware

[1.8.x] Sorted imports with isort; refs #23860.

2015-02-09 14:24:06 -05:00

template

[1.8.x] Fixed #24464 -- Made built-in HTML template filter functions escape their input by default.

2015-03-09 09:31:07 -04:00

templatetags

[1.8.x] Set context.template instead of context.engine while rendering.

2015-02-19 22:10:56 +01:00

test

[1.8.x] Deprecated TEMPLATE_DEBUG setting.

2015-02-15 20:48:48 +01:00

utils

[1.8.x] Made is_safe_url() reject URLs that start with control characters.

2015-03-18 19:23:21 -04:00

views

[1.8.x] Fixed a few uses of Template that relied on a default engine.

2015-02-22 23:22:19 +01:00

__init__.py

[1.8.x] Bumped version to 1.8 beta 2.

2015-03-09 10:22:51 -04:00

shortcuts.py

[1.8.x] Sorted imports with isort; refs #23860.

2015-02-09 14:24:06 -05:00