Raphael Michel ddf169cdac Refs #16859 -- Allowed storing CSRF tokens in sessions. ...

Major thanks to Shai for helping to refactor the tests, and to
Shai, Tim, Florian, and others for extensive and helpful review.

2016-11-30 08:57:27 -05:00

..

0.95.txt

Replaced "django" with "Django" in spelling_wordlist.

2016-11-15 17:00:50 -05:00

0.96.txt

…

1.0-porting-guide.txt

Added missing period to "etc.".

2016-01-11 18:05:15 -05:00

1.0.1.txt

…

1.0.2.txt

…

1.0.txt

Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:41:49 -04:00

1.1.2.txt

Updated capitalization in the word "JavaScript" for consistency

2015-05-01 13:26:42 -04:00

1.1.3.txt

Replaced "django" with "Django" in spelling_wordlist.

2016-11-15 17:00:50 -05:00

1.1.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.1.txt

Replaced "django" with "Django" in spelling_wordlist.

2016-11-15 17:00:50 -05:00

1.2.1.txt

…

1.2.2.txt

…

1.2.3.txt

…

1.2.4.txt

Replaced "django" with "Django" in spelling_wordlist.

2016-11-15 17:00:50 -05:00

1.2.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.2.6.txt

…

1.2.7.txt

…

1.2.txt

Updated links to the current version of PostGIS docs.

2016-09-30 09:26:20 -04:00

1.3.1.txt

…

1.3.2.txt

…

1.3.3.txt

…

1.3.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.3.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.3.6.txt

Normalized spelling of "Web server/page" in docs.

2016-09-29 19:51:59 -04:00

1.3.7.txt

…

1.3.txt

Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:41:49 -04:00

1.4.1.txt

…

1.4.2.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.3.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.4.txt

Normalized spelling of "Web server/page" in docs.

2016-09-29 19:51:59 -04:00

1.4.5.txt

…

1.4.6.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.7.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.8.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.9.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.10.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.4.11.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.4.12.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.4.13.txt

…

1.4.14.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.4.15.txt

…

1.4.16.txt

…

1.4.17.txt

…

1.4.18.txt

…

1.4.19.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

1.4.20.txt

Made is_safe_url() reject URLs that start with control characters.

2015-03-18 19:20:07 -04:00

1.4.21.txt

Prevented newlines from being accepted in some validators.

2015-07-08 15:23:03 -04:00

1.4.22.txt

Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:28:37 -04:00

1.4.txt

Replaced "django" with "Django" in spelling_wordlist.

2016-11-15 17:00:50 -05:00

1.5.1.txt

…

1.5.2.txt

Unified SpatiaLite spelling

2016-08-09 18:46:28 +02:00

1.5.3.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.4.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.5.txt

Fixed #26020 -- Normalized header stylings in docs.

2016-01-22 12:12:17 -05:00

1.5.6.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.5.7.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.5.8.txt

…

1.5.9.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.5.10.txt

…

1.5.11.txt

…

1.5.12.txt

…

1.5.txt

Normalized casing of "custom user model".

2016-11-23 15:14:28 -05:00

1.6.1.txt

…

1.6.2.txt

…

1.6.3.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.6.4.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.6.5.txt

…

1.6.6.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.6.7.txt

…

1.6.8.txt

…

1.6.9.txt

…

1.6.10.txt

…

1.6.11.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

1.6.txt

Normalized casing of "custom user model".

2016-11-23 15:14:28 -05:00

1.7.1.txt

…

1.7.2.txt

Fixed #24046 -- Deprecated the "escape" half of utils.safestring.

2016-05-10 12:46:47 -04:00

1.7.3.txt

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

1.7.4.txt

…

1.7.5.txt

…

1.7.6.txt

…

1.7.7.txt

Fixed #25778 -- Updated docs links to use https when available.

2015-12-01 08:01:34 -05:00

1.7.8.txt

Added dates to release notes.

2015-05-01 16:24:39 -04:00

1.7.9.txt

Prevented newlines from being accepted in some validators.

2015-07-08 15:23:03 -04:00

1.7.10.txt

Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:28:37 -04:00

1.7.11.txt

Added release date for 1.8.7/1.7.11 releases.

2015-11-24 11:20:29 -05:00

1.7.txt

Linked "Features removed" release notes to corresponding deprecation notes.

2016-07-11 15:22:32 -04:00

1.8.1.txt

Fixed #23868 -- Added support for non-unique django-admin-options in docs.

2016-01-14 18:21:33 -05:00

1.8.2.txt

Added release date for 1.8.2.

2015-05-20 13:48:06 -04:00

1.8.3.txt

Fixed catastrophic backtracking in URLValidator.

2015-07-08 15:23:03 -04:00

1.8.4.txt

Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:28:37 -04:00

1.8.5.txt

Added release date for 1.8.5.

2015-10-03 19:31:45 -04:00

1.8.6.txt

Added release date for 1.8.6.

2015-11-04 17:48:49 +01:00

1.8.7.txt

Added release date for 1.8.7/1.7.11 releases.

2015-11-24 11:20:29 -05:00

1.8.8.txt

Added release date for 1.9.1/1.8.8 releases.

2016-01-02 08:35:54 -05:00

1.8.9.txt

Added release dates for 1.9.2 and 1.8.9.

2016-02-01 12:02:16 -05:00

1.8.10.txt

Fixed typo in 1.9.3/1.8.10 release date.

2016-03-02 07:08:36 -05:00

1.8.11.txt

Added safety to URL decoding in is_safe_url() on Python 2

2016-03-04 23:33:35 +01:00

1.8.12.txt

Added release date for 1.9.5 and 1.8.12.

2016-04-01 13:29:43 -04:00

1.8.13.txt

Added release date for 1.9.6/1.8.13.

2016-05-02 18:16:36 -04:00

1.8.14.txt

Fixed XSS in admin's add/change related popup.

2016-07-18 11:17:01 -04:00

1.8.15.txt

Added release notes for 1.9.10 and 1.8.15 releases.

2016-09-26 13:55:21 -04:00

1.8.16.txt

Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.

2016-11-01 09:30:57 -04:00

1.8.17.txt

Fixed #27420 -- Quoted the Oracle test user password in queries.

2016-11-08 16:30:22 -05:00

1.8.txt

Fixed 27283 -- Fixed typo in 1.8 release notes.

2016-09-28 06:50:49 -04:00

1.9.1.txt

Fixed typo in docs/releases/1.9.1.txt.

2016-03-04 14:16:56 -05:00

1.9.2.txt

Added release dates for 1.9.2 and 1.8.9.

2016-02-01 12:02:16 -05:00

1.9.3.txt

Fixed typo in 1.9.3/1.8.10 release date.

2016-03-02 07:08:36 -05:00

1.9.4.txt

Added safety to URL decoding in is_safe_url() on Python 2

2016-03-04 23:33:35 +01:00

1.9.5.txt

Added release date for 1.9.5 and 1.8.12.

2016-04-01 13:29:43 -04:00

1.9.6.txt

Added release date for 1.9.6/1.8.13.

2016-05-02 18:16:36 -04:00

1.9.7.txt

Added release date for 1.9.7.

2016-06-04 19:24:51 -04:00

1.9.8.txt

Fixed XSS in admin's add/change related popup.

2016-07-18 11:17:01 -04:00

1.9.9.txt

Added release dates for 1.10 and 1.9.9

2016-08-01 13:55:08 -04:00

1.9.10.txt

Added release notes for 1.9.10 and 1.8.15 releases.

2016-09-26 13:55:21 -04:00

1.9.11.txt

Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.

2016-11-01 09:30:57 -04:00

1.9.12.txt

Fixed #27420 -- Quoted the Oracle test user password in queries.

2016-11-08 16:30:22 -05:00

1.9.txt

Replaced "django" with "Django" in spelling_wordlist.

2016-11-15 17:00:50 -05:00

1.10.1.txt

Added release date for 1.10.1.

2016-09-01 16:24:46 -04:00

1.10.2.txt

Fixed #27302 -- Fixed ModelAdmin.construct_change_message() changed field detection

2016-10-01 20:14:27 +02:00

1.10.3.txt

Fixed CVE-2016-9014 -- Validated Host header when DEBUG=True.

2016-11-01 09:30:57 -04:00

1.10.4.txt

Fixed #27402 -- Fixed incorrect LocaleMiddleware redirects with prefix_default_language=False.

2016-11-29 13:06:35 -05:00

1.10.txt

Fixed #27400 -- Documented {% static %} encoding change in 1.10.

2016-10-31 16:07:00 -04:00

1.11.txt

Refs #16859 -- Allowed storing CSRF tokens in sessions.

2016-11-30 08:57:27 -05:00

index.txt

Fixed #27420 -- Quoted the Oracle test user password in queries.

2016-11-08 16:30:22 -05:00

security.txt

Added CVE-2016-9013,14 to the security release archive.

2016-11-01 10:48:11 -04:00