Carl Meyer 27cd872e6e [1.3.x] Added ALLOWED_HOSTS setting for HTTP host header validation. ...

This is a security fix; disclosure and advisory coming shortly.

2013-02-12 11:41:43 +01:00

..

contrib

[1.3.X] Fixed #17837. Improved markdown safety.

2012-03-14 18:51:20 +00:00

files

[1.3.X] Fixed #16566 - Typo in docs/ref/files/storage.txt; thanks thejaswi_puthraya.

2011-08-06 18:41:00 +00:00

forms

[1.3.X] Altered the behavior of URLField to avoid a potential DOS vector, and to avoid potential leakage of local filesystem data. A security announcement will be made shortly.

2011-09-10 01:08:24 +00:00

models

[1.3.X] Fixed #640 - Documented that changing order_with_respect_to requires a schema change; thanks fcurella and poirier for the draft patches.

2011-12-31 15:30:41 +00:00

templates

[1.3.X] Fixed #17618 - Documented that variable names in template must not start with an underscore; thanks guillemette and krzysiumed.

2012-02-11 12:47:58 +00:00

authbackends.txt

Fixed #14000 - remove versionadded/changed tags for Django 1.0 and 1.1

2010-12-26 00:37:14 +00:00

class-based-views.txt

[1.3.X] Fixed #17685 - Typo in BaseDateListView.get_dated_items(); thanks ejb.

2012-02-18 21:40:26 +00:00

databases.txt

[1.3.X] Fixed #17573 -- Documented MySQL's switch to InnoDB as default storage engine. Backport of r17552 from trunk.

2012-02-19 07:42:02 +00:00

django-admin.txt

[1.3.X] Fixed #17573 -- Documented MySQL's switch to InnoDB as default storage engine. Backport of r17552 from trunk.

2012-02-19 07:42:02 +00:00

exceptions.txt

Corrected a number of mislinked crossrefs and added a few new crossref targets found in/via the 1.3 release.

2011-03-22 20:12:17 +00:00

generic-views.txt

[1.3.X] Fixed #15992 -- Added more references to settings. Thanks, aaugustin.

2011-05-29 17:50:52 +00:00

index.txt

Fixed #12815 -- Added TemplateResponse, a lazy-evaluated Response class. Thanks to Simon Willison for the original idea, and to Mikhail Korobov and Ivan Sagalaev for their assistance, including the draft patch from Mikhail.

2010-12-07 13:57:01 +00:00

middleware.txt

[1.3.X] Fixed #16258 - typo in middleware docs.

2011-06-19 19:40:50 +00:00

request-response.txt

[1.3.X] Fixed #17316 -- Mentionned that the MultipleProxyMiddleware provided as an example must run rather early. Backport of r17556 from trunk.

2012-02-19 08:10:20 +00:00

settings.txt

[1.3.x] Added ALLOWED_HOSTS setting for HTTP host header validation.

2013-02-12 11:41:43 +01:00

signals.txt

[1.3.X] Spelling fix for r16879.

2011-09-22 05:40:54 +00:00

template-response.txt

[1.3.X] Fixed #16004 - csrf_protect does not send cookie if view returns TemplateResponse

2011-05-25 17:31:47 +00:00

unicode.txt

[1.3.X] Fixed #15593 -- Added a note that the output of reverse is urlquoted. Thanks to guettli for the report and draft patch.

2011-04-20 19:51:54 +00:00

utils.txt

[1.3.X] Added a few cross references to the i18n docs and documented pgettext and colleagues.

2011-06-15 10:50:08 +00:00

validators.txt

Fixed #14537 -- Added documentation on where validators can be imported from to Validators Reference docs, and improved Sphinx formatting and metadata. Thanks to rfugger for the report.

2010-10-23 22:06:01 +00:00