Collin Anderson 6118ab7d06 [1.8.x] Fixed CVE-2016-7401 -- Fixed CSRF protection bypass on a site with Google Analytics. ...

This is a security fix.

Backport of "refs #26158 -- rewrote http.parse_cookie() to better match
browsers." 93a135d111c2569d88d65a3f4ad9e6d9ad291452 from master

2016-09-14 13:42:24 -04:00

..

0.95.txt

Fixed spelling mistakes in docs.

2014-02-28 21:03:46 -05:00

0.96.txt

Fixed links to DATABASE ENGINE setting. refs #19516

2012-12-24 15:38:05 -05:00

1.0-porting-guide.txt

[1.8.x] Fixed #24358 -- Corrected code-block directives for console sessions.

2015-02-22 09:36:51 -05:00

1.0.1.txt

Updated obsolete links in the documentation

2012-06-28 10:49:07 +02:00

1.0.2.txt

Fixed #14141: docs now use the :doc: construct for links between documents.

2010-08-19 19:27:44 +00:00

1.0.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.1.2.txt

[1.8.x] Updated capitalization in the word "JavaScript" for consistency

2015-05-01 13:27:40 -04:00

1.1.3.txt

Fixed #15253 -- Added 1.1.3 release notes, and added sections to the 1.2.4 and 1.3 release notes about the December security announcement.

2011-02-10 11:55:24 +00:00

1.1.4.txt

Fixed many more ReST indentation errors, somehow accidentally missed from [16955]

2011-10-14 00:12:01 +00:00

1.1.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.2.1.txt

Fixed a number of minor misspellings.

2013-07-27 18:46:03 -07:00

1.2.2.txt

Fixed #19885 -- cleaned up the django.test namespace

2013-09-09 16:03:13 -04:00

1.2.3.txt

Added placeholder release notes for the 1.2.1 and 1.2.3 releases.

2011-08-26 09:31:01 +00:00

1.2.4.txt

Fixed #17365, #17366, #18727 -- Switched to discovery test runner.

2013-05-10 23:08:45 -04:00

1.2.5.txt

Replaced http by https in djangoproject.com links

2012-03-13 17:53:31 +00:00

1.2.6.txt

Added basic release notes for 1.2.6 and 1.3.1.

2011-09-10 03:33:54 +00:00

1.2.7.txt

Whitespace cleanup.

2013-10-10 16:49:20 -04:00

1.2.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.3.1.txt

Added basic release notes for 1.2.6 and 1.3.1.

2011-09-10 03:33:54 +00:00

1.3.2.txt

Added 1.4.1 and 1.3.2 release notes

2012-08-31 20:35:50 +02:00

1.3.3.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.4.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.5.txt

Fixed docs typos.

2014-02-25 10:28:32 -05:00

1.3.6.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.7.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.3.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.4.1.txt

Added 1.4.1 and 1.3.2 release notes

2012-08-31 20:35:50 +02:00

1.4.2.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.4.3.txt

Fixed docs typos.

2014-02-25 10:28:32 -05:00

1.4.4.txt

Fixed #21035 -- Changed docs to treat the acronym SQL phonetically.

2013-09-05 20:14:58 -04:00

1.4.5.txt

Added missing release notes for older versions of Django

2013-08-12 14:05:25 -04:00

1.4.6.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.4.7.txt

Added 1.4.7/1.5.3 release notes

2013-09-10 21:07:22 -04:00

1.4.8.txt

Cleaned up 1.5.4/1.4.8 release notes

2013-09-15 14:14:26 -04:00

1.4.9.txt

Fixed typo in docs/releases/1.4.9.txt.

2013-10-25 07:55:05 -04:00

1.4.10.txt

Added 1.4.10 release notes.

2013-11-07 09:42:25 -05:00

1.4.11.txt

Moved CSRF docs out of contrib.

2014-11-03 07:47:39 -05:00

1.4.12.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.4.13.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.4.14.txt

Added dates to release notes.

2014-08-20 16:31:45 -04:00

1.4.15.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.4.16.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.4.17.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.4.18.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.4.19.txt

[1.8.x] Added 1.4.19 release notes.

2015-01-27 11:48:27 -05:00

1.4.20.txt

[1.8.x] Made is_safe_url() reject URLs that start with control characters.

2015-03-18 19:23:21 -04:00

1.4.21.txt

[1.8.x] Prevented newlines from being accepted in some validators.

2015-07-08 15:23:18 -04:00

1.4.22.txt

[1.8.x] Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:29:21 -04:00

1.4.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.5.1.txt

Used https for most *.python.org links

2014-12-19 18:07:52 +01:00

1.5.2.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.5.3.txt

Added 1.4.7/1.5.3 release notes

2013-09-10 21:07:22 -04:00

1.5.4.txt

Cleaned up 1.5.4/1.4.8 release notes

2013-09-15 14:14:26 -04:00

1.5.5.txt

Fixed spelling of compatibility.

2013-11-09 10:17:17 -05:00

1.5.6.txt

Moved CSRF docs out of contrib.

2014-11-03 07:47:39 -05:00

1.5.7.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.5.8.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.5.9.txt

Added dates to release notes.

2014-08-20 16:31:45 -04:00

1.5.10.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.5.11.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.5.12.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.5.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.6.1.txt

Copied 1.6.1 release notes from stable/1.6.x branch.

2013-12-12 15:08:22 -05:00

1.6.2.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.6.3.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.6.4.txt

Used the 🎫 syntax more extensively

2014-12-19 18:07:52 +01:00

1.6.5.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.6.6.txt

Added dates to release notes.

2014-08-20 16:31:45 -04:00

1.6.7.txt

Added dates to release notes.

2014-09-02 21:34:29 -04:00

1.6.8.txt

Added release dates to release notes.

2014-10-22 12:23:21 -04:00

1.6.9.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.6.10.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.6.11.txt

[1.8.x] Made is_safe_url() reject URLs that start with control characters.

2015-03-18 19:23:21 -04:00

1.6.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.7.1.txt

Added release dates to release notes.

2014-10-22 12:23:21 -04:00

1.7.2.txt

Added dates to release notes.

2015-01-02 19:20:18 -05:00

1.7.3.txt

[1.8.x] Fixed typo in path to is_safe_url()

2015-02-20 09:22:17 -05:00

1.7.4.txt

[1.8.x] Added 1.4.19 release notes.

2015-01-27 11:48:27 -05:00

1.7.5.txt

[1.8.x] Added release date for 1.7.5 release.

2015-02-25 09:03:38 -05:00

1.7.6.txt

[1.8.x] Refs #24461 -- Added test/release notes for XSS issue in ModelAdmin.readonly_fields

2015-03-09 10:15:12 -04:00

1.7.7.txt

[1.8.x] Fixed typos in the 1.7.7 release notes.

2015-04-14 22:14:52 -04:00

1.7.8.txt

[1.8.x] Added dates to release notes.

2015-05-01 16:25:06 -04:00

1.7.9.txt

[1.8.x] Prevented newlines from being accepted in some validators.

2015-07-08 15:23:18 -04:00

1.7.10.txt

[1.8.x] Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:29:21 -04:00

1.7.11.txt

[1.8.x] Added release dates for 1.8.7/1.7.11 releases.

2015-11-24 11:31:10 -05:00

1.7.txt

[1.8.x] Updated release notes links to prevent warnings with Sphinx 1.4.2.

2016-06-02 11:50:26 -04:00

1.8.1.txt

[1.8.x] Refs #24743 -- Clarified migrations performance note in 1.8.1 release notes.

2015-05-13 10:16:49 -04:00

1.8.2.txt

[1.8.x] Added release date for 1.8.2.

2015-05-20 13:49:44 -04:00

1.8.3.txt

[1.8.x] Fixed catastrophic backtracking in URLValidator.

2015-07-08 15:23:19 -04:00

1.8.4.txt

[1.8.x] Fixed #25489 -- Documented that SESSION_SAVE_EVERY_REQUEST doesn't create empty sessions.

2015-10-29 17:29:21 -04:00

1.8.5.txt

[1.8.x] Added release date for 1.8.5.

2015-10-03 19:35:22 -04:00

1.8.6.txt

[1.8.x] Added release date for 1.8.6.

2015-11-04 15:26:24 +01:00

1.8.7.txt

[1.8.x] Added release dates for 1.8.7/1.7.11 releases.

2015-11-24 11:31:10 -05:00

1.8.8.txt

[1.8.x] Added release date for 1.8.8 release.

2016-01-02 08:37:08 -05:00

1.8.9.txt

[1.8.x] Added release date for 1.8.9.

2016-02-01 12:13:54 -05:00

1.8.10.txt

[1.8.x] Fixed typo in 1.8.10 release date.

2016-03-02 07:10:21 -05:00

1.8.11.txt

[1.8.x] Added safety to URL decoding in is_safe_url() on Python 2

2016-03-04 23:39:46 +01:00

1.8.12.txt

[1.8.x] Added release date for 1.8.12.

2016-04-01 13:30:53 -04:00

1.8.13.txt

[1.8.x] Added release date for 1.8.13.

2016-05-02 18:17:09 -04:00

1.8.14.txt

[1.8.x] Fixed XSS in admin's add/change related popup.

2016-07-18 13:45:11 -04:00

1.8.15.txt

[1.8.x] Fixed CVE-2016-7401 -- Fixed CSRF protection bypass on a site with Google Analytics.

2016-09-14 13:42:24 -04:00

1.8.txt

[1.8.x] Fixed #26807 -- Documented how to replicate SubfieldBase's assignment behavior.

2016-08-18 21:09:12 -04:00

index.txt

[1.8.x] Fixed CVE-2016-7401 -- Fixed CSRF protection bypass on a site with Google Analytics.

2016-09-14 13:42:24 -04:00

security.txt

[1.8.x] Added CVE-2016-6186 to the security release archive.

2016-07-18 15:20:55 -04:00