Natalia fe4a0bbe20 Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method. ...

Thanks to Josh Schneier for the report, and to Carlton Gibson and Sarah
Boyce for the reviews.

2024-07-09 09:21:19 -03:00

..

apps

Fixed #34687 -- Made Apps.clear_cache() clear get_swappable_settings_name() cache.

2023-06-30 08:27:15 +02:00

conf

Updated source translation catalogs.

2024-05-22 15:55:26 -03:00

contrib

Fixed CVE-2024-39329 -- Standarized timing of verify_password() when checking unusuable passwords.

2024-07-09 09:21:19 -03:00

core

Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method.

2024-07-09 09:21:19 -03:00

db

Fixed #35580 -- Allowed related fields referencing auto-created through models.

2024-07-09 13:50:12 +02:00

dispatch

Fixed #35174 -- Fixed Signal.asend()/asend_robust() crash when all receivers are asynchronous.

2024-02-08 11:36:28 +01:00

forms

Fixed #35483 -- Added NUL (0x00) character validation to ModelChoiceFields.

2024-06-17 12:19:26 +02:00

http

Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.

2024-05-29 10:48:27 -03:00

middleware

Removed unneeded hyphens in "counterintuitive".

2024-07-04 08:30:19 +02:00

template

Fixed #35417 -- Updated BaseContext.new() with values to create a context that can be flattened.

2024-06-13 14:22:40 +02:00

templatetags

Refs #34233 -- Used str.removeprefix()/removesuffix().

2023-01-18 19:11:18 +01:00

test

Fixed 35467 -- Replaced urlparse with urlsplit where appropriate.

2024-05-29 10:48:27 -03:00

urls

Fixed #35252 -- Optimized _route_to_regex().

2024-03-05 13:09:10 +01:00

utils

Fixed CVE-2024-38875 -- Mitigated potential DoS in urlize and urlizetrunc template filters.

2024-07-09 09:21:19 -03:00

views

Removed hardcoded docs version in csrf template.

2024-05-21 11:03:39 +02:00

__init__.py

Bumped version; main is now 5.2 pre-alpha.

2024-05-22 15:44:07 -03:00

__main__.py

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

shortcuts.py

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00