Tim Graham 988b61c550 [1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths. ...

Thanks Rainer Koirikivi for the report and draft patch.

This is a security fix; disclosure to follow shortly.

Backport of 7fe5b656c9 from master

2013-09-10 21:05:03 -04:00

..

eggs

Removed executable bits from some files that don't need them.

2012-03-09 12:13:31 +00:00

templates

Fixed #18037 -- Changed behaviour of url and ssi template tags to the new syntax, as per official deprecation timeline. Thanks Ramiro Morales and Jannis Leidel for the review.

2012-04-24 19:55:52 +00:00

templatetags

[py3] Fixed access to dict keys/values/items.

2012-08-07 12:00:22 +02:00

__init__.py

Refs #2333 - Modified runtests script to use new testing framework. Migrated existing tests to use Django testing framework. All the 'othertests' have been migrated into 'regressiontests', and converted into doctests/unittests, as appropriate.

2006-08-27 13:59:47 +00:00

alternate_urls.py

Convert the remainder of the relative imports in the tests to be absolute imports.

2011-10-13 21:34:56 +00:00

callables.py

Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.

2012-06-07 18:08:47 +02:00

context.py

Converted templates doctests into unittests. We have always been at war with doctests.

2010-11-04 04:47:05 +00:00

custom.py

[py3k] Silence many warnings while running the tests.

2012-09-07 13:17:34 -04:00

filters.py

[1.5.x] Fixed #19370 -- Made date filter properly handle midnight value

2012-11-27 21:25:21 +01:00

loaders.py

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

models.py

Refs #2333 - Modified runtests script to use new testing framework. Migrated existing tests to use Django testing framework. All the 'othertests' have been migrated into 'regressiontests', and converted into doctests/unittests, as appropriate.

2006-08-27 13:59:47 +00:00

nodelist.py

Fixed #18013 -- Use the new 'as' syntax for exceptions.

2012-04-29 20:57:15 +02:00

parser.py

Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.

2012-06-07 18:08:47 +02:00

response.py

[1.5.x] Fixed #19357 -- Allow non-ASCII chars in filesystem paths

2012-12-08 11:16:03 +01:00

smartif.py

Fixed #16225 -- Removed unused imports. Many thanks to Aymeric Augustin for the work on the patch and Alex for reviewing.

2011-07-13 09:35:51 +00:00

tests.py

[1.5.x] Prevented arbitrary file inclusion with {% ssi %} tag and relative paths.

2013-09-10 21:05:03 -04:00

unicode.py

[py3] Replaced unicode/str by six.text_type/bytes.

2012-07-22 09:29:54 +02:00

urls.py

Fixed #18269 -- Applied unicode_literals for Python 3 compatibility.

2012-06-07 18:08:47 +02:00

views.py

Fixed #15083 -- Corrected the order of TemplateResponse middleware handling, ensuring that custom URLConfs are valid, and that ResponseMiddleware is invoked if the TemplateResponseMiddleware causes errors. Thanks to Sayane for the report.

2011-01-16 15:38:03 +00:00