Erik Romijn e7b0cace45 [1.7.x] Added additional checks in is_safe_url to account for flexible parsing. ...

This is a security fix. Disclosure following shortly.

2014-05-14 10:18:27 +02:00

..

apps

Fixed #21188 -- Introduced subclasses for to-be-removed-in-django-XX warnings

2014-03-08 09:57:40 +01:00

bin

Started attackign the next flake8 violation

2013-10-31 08:42:28 -07:00

conf

[1.7.x] Also allowed a non-overridden setting to be deleted

2014-04-12 15:35:11 +02:00

contrib

[1.7.x] Added additional checks in is_safe_url to account for flexible parsing.

2014-05-14 10:18:27 +02:00

core

[1.7.x] Dropped fix_IE_for_vary/attach.

2014-05-14 10:18:26 +02:00

db

[1.7.x] Fixed #22508 -- Avoided overwriting select_related.

2014-05-10 17:03:42 +02:00

dispatch

Fixed many typos in comments and docstrings.

2014-03-03 07:38:09 -05:00

forms

[1.7.x] Fixed #22502 -- Fixed microseconds/default/form interaction

2014-05-10 10:58:51 +02:00

http

[1.7.x] Dropped fix_IE_for_vary/attach.

2014-05-14 10:18:26 +02:00

middleware

[1.7.x] Prevented leaking the CSRF token through caching.

2014-04-21 18:29:24 -04:00

template

[1.7.x] Corrected many style guide violations that the newest version of flake8 catches

2014-04-21 07:50:43 -04:00

templatetags

[1.7.x] Fix many many typos in comments throughout the codebase

2014-04-26 14:35:57 -04:00

test

[1.7.x] Revert "Fixed #15179 -- middlewares not applied for test client login()"

2014-04-28 18:49:24 -04:00

utils

[1.7.x] Added additional checks in is_safe_url to account for flexible parsing.

2014-05-14 10:18:27 +02:00

views

[1.7.x] Fix many many typos in comments throughout the codebase

2014-04-26 14:35:57 -04:00

__init__.py

[1.7.x] Bump version number for 1.7 beta 3 bugfix release.

2014-04-28 15:46:13 -05:00

shortcuts.py

Moved relative URL handling added in refs #21177 to a better place.

2014-02-15 07:54:35 -05:00