Tim Graham 988b61c550 [1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths. ...

Thanks Rainer Koirikivi for the report and draft patch.

This is a security fix; disclosure to follow shortly.

Backport of 7fe5b656c9 from master

2013-09-10 21:05:03 -04:00

..

admin_changelist

[1.5.x] Use new TestCase methods for equality comparisons

2012-12-24 02:19:16 +00:00

admin_custom_urls

[1.5.x] Added further flexibility to ModelAdmin for controlling post-save redirections.

2012-12-30 23:11:58 -08:00

admin_filters

[1.5.x] Fixed a dependence on set-ordering in tests

2012-12-24 02:21:19 +00:00

admin_inlines

[1.5.x] Made a couple of selenium tests wait for page loaded

2013-02-21 00:01:07 +02:00

admin_ordering

Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.

2012-06-07 18:08:47 +02:00

admin_registration

Fixed #17090 -- Made the API specification for ModelAdmin.get_list_display() more consistent with that of ModelAdmin.list_display by separating out the admin action check boxes business. This is backwards-incompatible for those who have been using the still-unreleased get_list_display() method. Thanks to Ramiro Morales for the review.

2011-10-26 09:37:07 +00:00

admin_scripts

[1.5.x] Fixed test failures introduced in a5becad909.

2013-05-05 16:14:41 +02:00

admin_util

[1.5.x] Fixed #19114 -- Fixed LogEntry unicode representation

2012-11-17 19:21:09 +01:00

admin_validation

[1.5.x] Fixed #19445 -- Skip admin fieldsets validation when the ModelAdmin.get_form() method is overridden.

2013-02-02 14:55:59 -08:00

admin_views

[1.5.x] Made a couple of selenium tests wait for page loaded

2013-02-21 00:01:07 +02:00

admin_widgets

Apply autoescaping to AdminURLFieldWidget.

2013-08-13 11:04:21 -05:00

aggregation_regress

[1.5.x] Fixed qs ordering related randomly failing test

2013-07-29 14:28:41 +03:00

app_loading

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

backends

[1.5.x] Fixed #19634 -- Added proper __hash__ methods.

2013-02-25 23:37:23 +01:00

bash_completion

[py3] Used compatible imports of StringIO.

2012-08-08 14:50:01 +02:00

bug639

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

bug8245

Removed with_statement imports, useless in Python >= 2.6. Refs #17965. Thanks jonash for the patch.

2012-03-30 08:02:08 +00:00

builtin_server

[1.5.x] Fixed typos in docs and comments

2013-01-29 10:58:24 -07:00

bulk_create

[1.5.x] Fixed #19351 -- SQLite bulk_insert of more than 500 single-field objs

2012-11-24 01:20:22 +02:00

cache

[1.5.x] Prevented caching of streaming responses.

2012-12-24 20:30:20 +01:00

comment_tests

[1.5.x] Cleaned up some lingering signals in the test suite that were causing spurious failures with Pypy and Postgres.

2013-02-08 12:13:43 -08:00

conditional_processing

Fixed parse_http_date docstring and moved related tests

2012-09-26 21:10:17 +02:00

context_processors

Convert much of the regression tests to use absolute imports. There's still work to be done though.

2011-10-13 18:51:33 +00:00

createsuperuser

[py3] Used compatible imports of StringIO.

2012-08-08 14:50:01 +02:00

csrf_tests

[1.5.x] Added a new required ALLOWED_HOSTS setting for HTTP host header validation.

2013-02-19 10:39:03 -07:00

custom_columns_regress

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

custom_managers_regress

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

datatypes

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

dates

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

db_typecasts

[py3] Fixed access to dict keys/values/items.

2012-08-07 12:00:22 +02:00

decorators

[py3] Various minor syntax fixes in the test suite

2012-08-11 23:23:31 +02:00

defaultfilters

[1.5.x] Simplified smart_urlquote and added some basic tests.

2013-07-28 10:07:29 +02:00

defer_regress

[1.5.x] Fixed #20922 -- Allowed customizing the serializer used by contrib.sessions

2013-08-22 17:49:11 -04:00

delete_regress

[1.5.x] Fixed #19720 -- Oracle ordering related delete regression

2013-02-10 19:58:22 +02:00

dispatch

Fixed #18676 -- Allow fast-path deletion of objects

2012-09-28 18:16:08 +03:00

expressions_regress

Removed some uses of F() expression & and |

2012-10-10 03:31:11 +03:00

extra_regress

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

file_storage

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

file_uploads

[1.5.x] Fixed #19036 -- Fixed base64 uploads decoding

2012-11-17 17:26:24 +01:00

fixtures_regress

[1.5.x] Don't rely on dictionary ordering in tests

2012-12-24 02:19:53 +00:00

forms

[1.5.x] Fixed #20211: Document backwards-incompatible change in BoundField.label_tag

2013-04-12 10:25:44 +02:00

generic_inline_admin

[1.5.x] Added a default limit to the maximum number of forms in a formset.

2013-02-19 10:39:04 -07:00

generic_relations_regress

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

generic_views

Added file forgotten in d5ad9d3d.

2013-01-30 22:11:19 +01:00

get_or_create_regress

Convert the remainder of the relative imports in the tests to be absolute imports.

2011-10-13 21:34:56 +00:00

handlers

[1.5.x] Fixed #19519 again -- Regression in LiveServerTestCase after fd1279a4.

2013-01-01 10:14:24 +01:00

http_utils

Added tests for conditional_content_removal.

2012-10-21 22:40:31 +02:00

httpwrappers

[1.5.x] Fixed #19585 -- Fixed loading cookie value as a dict

2013-01-11 21:14:39 +01:00

i18n

[1.5.x] Fixed #20354 -- makemessages no longer crashes with UnicodeDecodeError

2013-05-07 21:36:51 +02:00

indexes

[1.5.x] Created special PostgreSQL text indexes when unique is True

2013-01-07 21:02:02 +01:00

initial_sql_regress

[1.5.x] Amended an SQL test fixture to not include an id value

2012-12-10 17:50:37 +01:00

inline_formsets

[py3k] Silence many warnings while running the tests.

2012-09-07 13:17:34 -04:00

inspectdb

[1.5.x] Fixed Oracle failure for "%" in table name

2012-10-27 19:24:48 +03:00

introspection

[1.5.x] Fixed #5805 -- it is now possible to specify multi-column indexes. Thanks to jgelens for the original patch. Backport of 4285571c5a.

2012-11-04 10:26:59 -08:00

localflavor

Removed country-specific localflavor tests.

2012-10-12 16:21:51 -05:00

logging_tests

[1.5.x] Correctly restore warning capture after logging tests.

2013-03-27 17:03:12 -05:00

m2m_regress

[1.5.x]Merge pull request #494 from mrj0/model_split

2012-11-04 14:21:49 -08:00

m2m_through_regress

[1.5.x] Use new TestCase methods for equality comparisons

2012-12-24 02:19:16 +00:00

mail

[1.5.x] Fixed #19382 -- Stopped smtp backend raising exception when already closed

2013-01-03 20:45:57 +01:00

managers_regress

Fixed #19069 -- Improved the error message when trying to query a swapped model.

2012-10-06 14:21:57 +08:00

many_to_one_regress

[1.5.x] Fixed empty strings + to_field regression on Oracle

2013-02-23 00:09:48 +02:00

max_lengths

Convert the remainder of the relative imports in the tests to be absolute imports.

2011-10-13 21:34:56 +00:00

middleware

[1.5.x] Fixed #19707 -- Reset transaction state after requests

2013-02-10 14:09:58 +02:00

middleware_exceptions

Fixed #18013 -- Use the new 'as' syntax for exceptions.

2012-04-29 20:57:15 +02:00

model_fields

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

model_forms_regress

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

model_formsets_regress

[1.5.x] Fixed #19354 -- Do not assume usermodel.pk == usermodel.id

2012-11-29 21:52:22 +01:00

model_inheritance_regress

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

model_inheritance_select_related

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

model_permalink

refs #12836 - Added a test to assure permalink wraps method attributes

2012-09-08 11:58:48 -04:00

model_regress

Revert "Fixed #18063 -- Avoid unicode in Model.__repr__ in python 2"

2012-08-22 11:48:47 +10:00

modeladmin

[py3k] Silence many warnings while running the tests.

2012-09-07 13:17:34 -04:00

multiple_database

[1.5.x] Cleaned up some lingering signals in the test suite that were causing spurious failures with Pypy and Postgres.

2013-02-08 12:13:43 -08:00

nested_foreign_keys

Fixed #16715 -- Fixed join promotion logic for nested nullable FKs

2012-08-25 14:14:45 +03:00

null_fk

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

null_fk_ordering

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

null_queries

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

one_to_one_regress

Fixed #18153 -- Reverse OneToOne lookups on unsaved instances.

2012-10-09 21:36:35 +02:00

pagination

[1.5.x] Fixed #19261 -- Delayed Queryset evaluation in paginators

2012-11-09 19:44:47 +01:00

queries

[1.5.x] Fixed #20091 -- Oracle null promotion for empty strings

2013-03-26 15:05:37 +02:00

queryset_pickle

[1.5.x] Fixed prefetch_related + pickle regressions

2013-05-21 11:45:24 +03:00

requests

[1.5.x] Fixed #20169 -- Ensured that the WSGI request's path is correctly based on the SCRIPT_NAME environment parameter or the FORCE_SCRIPT_NAME setting, regardless of whether or not those have a trailing slash. Thanks to bmispelon for the review.

2013-04-01 12:07:58 -07:00

resolve_url

Fixed #15552 -- LOGIN_URL and LOGIN_REDIRECT_URL can take URLpattern names.

2012-09-08 16:58:35 -06:00

reverse_single_related

Convert the remainder of the relative imports in the tests to be absolute imports.

2011-10-13 21:34:56 +00:00

select_related_onetoone

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

select_related_regress

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

serializers_regress

[1.5.x] Restricted the XML deserializer to prevent DoS attacks.

2013-02-19 10:39:03 -07:00

servers

[1.5.x] Fixed #19903 -- Fixed unbalanced setUp/tearDown calls in LiveServerAddress test

2013-02-25 08:59:44 +01:00

settings_tests

[1.5.x] Enabled SimpleTestCase to be decorated by override_settings

2012-11-25 19:08:51 +01:00

signals_regress

Cleaned up several test cases, to better isolate state.

2012-09-07 13:47:12 -04:00

signed_cookies_tests

Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.

2012-06-07 18:08:47 +02:00

signing

Fixed #18852 -- Restored backwards compatibility

2012-08-25 22:22:32 +02:00

sites_framework

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

special_headers

Ensured tests pass using custom PASSWORD_HASHERS.

2012-04-30 22:10:27 +03:00

staticfiles_tests

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

string_lookup

[py3] Refactored __unicode__ to __str__.

2012-08-12 14:44:40 +02:00

swappable_models

[1.5.x] Fixed #19401 -- Ensure that swappable model references are case insensitive.

2012-12-20 16:14:10 +08:00

syndication

Fixed #7936 -- Added Last-Modified header to feeds

2012-09-30 22:40:25 +02:00

templates

[1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.

2013-09-10 21:05:03 -04:00

test_client_regress

[1.5.x] Fixed #20237 (again) Allowed binary parameter to assertContains

2013-04-12 20:16:35 +02:00

test_runner

[1.5.x] assertEquals -> assertEqual

2013-07-27 18:46:55 -04:00

test_utils

Fixed assertXMLEqual when first node was a comment

2012-10-15 23:05:40 +02:00

text

Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.

2012-06-07 18:08:47 +02:00

transactions_regress

[1.5.x] Fixed #19354 -- Do not assume usermodel.pk == usermodel.id

2012-11-29 21:52:22 +01:00

urlpatterns_reverse

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

utils

[1.5.x] Fixed #20922 -- Allowed customizing the serializer used by contrib.sessions

2013-08-22 17:49:11 -04:00

version

Fixed #18224 -- Changed the dev version number.

2012-04-29 13:40:10 +02:00

views

[1.5.x] Fixed #19692 -- Completed deprecation of mimetype in favor of content_type.

2013-01-31 13:55:00 +01:00

wsgi

[py3k] Silence many warnings while running the tests.

2012-09-07 13:17:34 -04:00

__init__.py

…