Erik Romijn 985434fb1d [1.5.x] Fixed queries that may return unexpected results on MySQL due to typecasting. ...

This is a security fix. Disclosure will follow shortly.

Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master

2014-04-21 18:31:08 -04:00

..

bin

[1.5.x] Fixed #19252 -- Added support for wheel packages.

2013-05-01 13:52:38 +02:00

conf

[1.5.x] Fixed #20922 -- Allowed customizing the serializer used by contrib.sessions

2013-08-22 17:49:11 -04:00

contrib

Fixed missing imports from 16e5fdd9cb8cca4d203b9255a9771b3c370e37d6.

2013-11-19 10:50:20 +01:00

core

[1.5.x] Fixed a remote code execution vulnerabilty in URL reversing.

2014-04-21 18:30:57 -04:00

db

[1.5.x] Fixed queries that may return unexpected results on MySQL due to typecasting.

2014-04-21 18:31:08 -04:00

dispatch

[1.5.x] Fixed #19634 -- Added proper __hash__ methods.

2013-02-25 23:37:23 +01:00

forms

[1.5.x] Fixed #20211: Document backwards-incompatible change in BoundField.label_tag

2013-04-12 10:25:44 +02:00

http

[1.5.x] Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

2013-02-19 10:39:03 -07:00

middleware

[1.5.x] Prevented leaking the CSRF token through caching.

2014-04-21 18:31:05 -04:00

shortcuts

[1.5.x] Fixed #19692 -- Completed deprecation of mimetype in favor of content_type.

2013-01-31 13:55:00 +01:00

template

[1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.

2013-09-10 21:05:03 -04:00

templatetags

Fixed #19088 -- Always escape % inside blocktrans tag

2012-10-23 18:49:22 +02:00

test

[1.5.x] Fixed "Address already in use" from liveserver.

2013-09-22 22:08:59 +02:00

utils

[1.5.x] Updated six to 1.6.1.

2014-03-24 07:34:37 -04:00

views

[1.5.x] Fixed #18923 -- Corrected usage of sensitive_post_parameters in contrib.auth

2013-09-13 09:40:15 -04:00

__init__.py

[1.5.x] Bump version post-release.

2013-10-25 07:53:39 -04:00