Simon Charette ff08bb6c70 [5.0.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLookup usage on Oracle. ...

Thanks Seokchan Yoon for the report, and Mariusz Felisiak and Sarah
Boyce for the reviews.

2024-12-04 14:25:15 +01:00

..

apps

Fixed #34687 -- Made Apps.clear_cache() clear get_swappable_settings_name() cache.

2023-06-30 08:27:15 +02:00

conf

[5.0.x] Updated translations from Transifex.

2024-01-29 05:22:31 +01:00

contrib

[5.0.x] Fixed CVE-2024-45231 -- Avoided server error on password reset when email sending fails.

2024-09-03 09:33:01 -03:00

core

[5.0.x] Fixed CVE-2024-39330 -- Added extra file name validation in Storage's save method.

2024-07-09 10:03:32 -03:00

db

[5.0.x] Fixed CVE-2024-53908 -- Prevented SQL injections in direct HasKeyLookup usage on Oracle.

2024-12-04 14:25:15 +01:00

dispatch

[5.0.x] Fixed #35174 -- Fixed Signal.asend()/asend_robust() crash when all receivers are asynchronous.

2024-02-08 12:56:41 +01:00

forms

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00

http

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00

middleware

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00

template

[5.0.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in floatformat.

2024-08-06 08:51:55 +02:00

templatetags

Refs #34233 -- Used str.removeprefix()/removesuffix().

2023-01-18 19:11:18 +01:00

test

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00

urls

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00

utils

[5.0.x] Fixed CVE-2024-53907 -- Mitigated potential DoS in strip_tags().

2024-12-04 14:25:05 +01:00

views

[5.0.x] Fixed #35187 -- Fixed @sensitive_variables/sensitive_post_parameters decorators crash with .pyc-only builds.

2024-02-17 08:16:36 +01:00

__init__.py

[5.0.x] Post-release version bump.

2024-09-03 09:37:31 -03:00

__main__.py

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00

shortcuts.py

[5.0.x] Applied Black's 2024 stable style.

2024-01-26 12:55:56 +01:00