Jacob Walls 98e642c691 Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg. ...

Thanks cyberstan for the report, Sarah Boyce, Adam Johnson, Simon
Charette, and Jake Howard for the reviews.

2025-11-05 09:20:57 -03:00

..

__init__.py

…

models.py

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

test_bulk_update.py

Refs #36419 -- Fixed BulkUpdateTests.test_json_field_sql_null() crash on Oracle.

2025-06-10 08:40:47 +02:00

test_contains.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_db_returning.py

Refs #27222 -- Restored Model.save()'s refreshing of db_returning fields even if a value is set.

2025-09-17 07:50:08 -04:00

test_explain.py

Fixed #36624 -- Dropped support for MySQL < 8.4.

2025-10-27 15:05:23 +01:00

test_iterator.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_q.py

Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via the _connector kwarg.

2025-11-05 09:20:57 -03:00

test_qs_combinators.py

Fixed #36388 -- Made QuerySet.union() return self when called with no arguments.

2025-05-19 10:34:14 +02:00

test_query.py

Refs #33308 -- Avoided passing None to RawSQL's params.

2022-12-02 10:56:09 +01:00

test_sqlcompiler.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

tests.py

Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB.

2025-10-01 08:11:45 -04:00