Tim Graham 7fe5b656c9 Prevented arbitrary file inclusion with {% ssi %} tag and relative paths. ...

Thanks Rainer Koirikivi for the report and draft patch.

This is a security fix; disclosure to follow shortly.

2013-09-10 21:02:48 -04:00

..

eggs

…

templates

Improved {% include %} implementation

2013-08-30 10:36:36 +03:00

templatetags

Fixed #20989 -- Removed useless explicit list comprehensions.

2013-08-30 10:57:51 -04:00

__init__.py

…

alternate_urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

filters.py

Refactored code and tests that relied on django.utils.tzinfo.

2013-09-09 22:32:52 +02:00

models.py

…

test_callables.py

Stopped using django.utils.unittest in the test suite.

2013-07-01 14:29:33 +02:00

test_context.py

Fixed #17778 -- Prevented class attributes on context from resolving as template variables.

2013-08-12 12:41:39 -04:00

test_custom.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

test_loaders.py

Added further fixes, tests for #19949/f33db5a09a.

2013-08-26 08:47:24 -03:00

test_nodelist.py

Stopped using django.utils.unittest in the test suite.

2013-07-01 14:29:33 +02:00

test_parser.py

Simplify FilterExpression.args_check

2013-09-09 09:03:50 -04:00

test_response.py

Fixed a number of minor misspellings.

2013-07-27 18:46:03 -07:00

test_smartif.py

Stopped using django.utils.unittest in the test suite.

2013-07-01 14:29:33 +02:00

test_unicode.py

Stopped using django.utils.unittest in the test suite.

2013-07-01 14:29:33 +02:00

tests.py

Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.

2013-09-10 21:02:48 -04:00

urls.py

Removed most of absolute_import imports

2013-07-29 20:28:13 +02:00

views.py

…