https://github.com/django/django

sort by:
Revision Author Date Message Commit Date
1f5ff0b [1.5.x] Bump version numbers for security release. 20 August 2014, 20:09:42 UTC
2a446c8 [1.5.x] Prevented data leakage in contrib.admin via query string manipulation. This is a security fix. Disclosure following shortly. 20 August 2014, 15:44:02 UTC
dd68f31 [1.5.x] Fixed #23066 -- Modified RemoteUserMiddleware to logout on REMOTE_USE change. This is a security fix. Disclosure following shortly. 20 August 2014, 15:44:02 UTC
26cd48e [1.5.x] Fixed #23157 -- Removed O(n) algorithm when uploading duplicate file names. This is a security fix. Disclosure following shortly. 20 August 2014, 15:44:02 UTC
45ac9d4 [1.5.x] Prevented reverse() from generating URLs pointing to other hosts. This is a security fix. Disclosure following shortly. 20 August 2014, 15:44:02 UTC
25d9ae5 [1.5.x] Added release note stubs for 1.5.9 and 1.4.14. 20 August 2014, 15:44:02 UTC
27ab82f [1.5.x] Corrected content_type parameter name in sitemap docs. mimetype was deprecated in 1.5 per 11ec0253ab4cc926ab9e77619132cb398231ac33. Backport of a7443c24a3 from master 14 August 2014, 01:45:36 UTC
00ec30d [1.5.x] Added a warning that remove_tags() output shouldn't be considered safe. Backport of 7efce77de2 from master 11 August 2014, 11:09:56 UTC
5d6e403 [1.5.x] Fixed #23267 -- Fixed typo in Translation documentation Thanks to Tomin1 for the report. Backport of 2e7be92b4df29ac851d570e57da5dcf756c5ac52 from master. 11 August 2014, 10:10:52 UTC
bafc723 [1.5.x] Noted that django-jython requires Django 1.7. Backport of 72e98d5c16 from stable/1.6.x 08 August 2014, 16:47:54 UTC
50369c5 [1.5.x] Removed a doc reference to the deprecated `mimetype` kwarg. Backport of 61ed959235 from master 07 August 2014, 02:21:16 UTC
e0fb48c [1.5.x] Fixed #23239 -- Clarified a phrase in the contrib.markup docs. 06 August 2014, 12:28:51 UTC
12ac0bb [1.5.x] Fixed #23149 -- Clarified note on HTTPOnly in cookie-based session docs Backport of e26366da44bb343e7a95d01ff0dd18b8026c2802 from master. 02 August 2014, 17:00:50 UTC
291e837 [1.5.x] Revert "Fixed #13794 -- Fixed to_field usage in BaseInlineFormSet." This reverts commit 4ae68f677b3348765d8649d8b57beffa18fe8d3d. stable/1.5.x branch is in security-fixes-only mode. 15 July 2014, 00:12:40 UTC
4ae68f6 [1.5.x] Fixed #13794 -- Fixed to_field usage in BaseInlineFormSet. Thanks sebastien at clarisys.fr for the report and gautier for the patch. Backport of 5e2c4a4bd1 from master 14 July 2014, 15:38:43 UTC
ddc715e [1.5.x] Fixed #22966 -- Clarified which release notes appear for each doc version. Thanks haimunt at yahoo.com for the suggestion. Backport of e6b3d6c22f from master 07 July 2014, 19:31:57 UTC
ce06ef5 [1.5.x] Fixed #22859 -- Improved crossDomain technique in CSRF example. Thanks flisky for the report. Backport of 0be4d64487 from master 18 June 2014, 18:38:19 UTC
7342784 [1.5.x] Fixed #22842 Backport of 7a1f8414c3b71b6af03e5be9f5f8db115551c410 from master. 15 June 2014, 19:13:05 UTC
d57cf88 [1.5.x] Improved deprecation plan links in release notes. Backport of 7ff326928a08d4c51141768bd305a44ca5ecb2e7 from master 29 May 2014, 22:59:56 UTC
d5ca482 [1.5.x] Fixed #22644 -- Clarified documentation for NamedUrlWizardView Backport of 727d048f0991ccbd1564c6fb225ffbfd2f1a2102 from master. 17 May 2014, 13:18:32 UTC
044a4fd [1.5.x] Fixed case in form widgets docs Backport of 9494f29d from master 16 May 2014, 21:43:26 UTC
220c09e [1.5.x] Fixed #22167 -- Improved documentation on context processors Backport of e7ffba8f78849fbf60b98fb8d67ef4577b585e3b from master. 16 May 2014, 16:30:23 UTC
5c65aa9 [1.5.x] Minor edits to latest release notes. Backport of 860d31ac7a3bdd4b27db8b34b110b3d801ddaf8a from master 15 May 2014, 11:17:17 UTC
4752580 Bumped version number post release. 14 May 2014, 16:31:37 UTC
4e922f6 Bumped version numbers for release. 14 May 2014, 16:27:50 UTC
ffcb009 Added release notes for 1.4.13, 1.5.8. 14 May 2014, 16:26:26 UTC
ad32c21 [1.5.x] Added additional checks in is_safe_url to account for flexible parsing. This is a security fix. Disclosure following shortly. 12 May 2014, 13:42:06 UTC
4001ec8 [1.5.x] Dropped fix_IE_for_vary/attach. This is a security fix. Disclosure following shortly. 12 May 2014, 13:41:34 UTC
41ab97b [1.5.x] Fixed #22575 -- Fixed typo in docs/topics/class-based-views/generic-editing.txt. Thanks adminq80 at gmail.com. Backport of 87776859af from master 05 May 2014, 10:42:41 UTC
73136a8 [1.5.x] Added dates to release notes of today's release. Backport of 68d264059abb21b96c4fe68bf4d99520268a451c from master 28 April 2014, 23:07:17 UTC
ce6c665 [1.5.x] Post release version bump. 28 April 2014, 23:01:01 UTC
c47324b [1.5.x] Update version numbers for 1.5.7 bugfix release. 28 April 2014, 20:34:35 UTC
47a352f [1.5.x] Removed bad import in last commit. 23 April 2014, 13:15:41 UTC
19bd6b9 [1.5.x] Fixed #22486 -- Restored the ability to reverse views created using functools.partial. Regression in 8b93b31487d6d3b0fcbbd0498991ea0db9088054. Thanks rcoup for the report. Backport of 3c06b2f2a3 from master 23 April 2014, 13:01:38 UTC
2d450cc [1.5.x] Updated grammar in description of django.contrib.auth. Backport of 9853779805 from master 22 April 2014, 22:29:13 UTC
036b2d4 [1.5.x] Post release version bump. 22 April 2014, 15:49:50 UTC
a0f6095 [1.5.x] Add missing disclosure information to security archive. 21 April 2014, 23:28:24 UTC
486b6f3 [1.5.x] Update for 1.5.6 security release. 21 April 2014, 22:51:51 UTC
cebfbcd [1.5.x] Added information on resolved security issues to release notes. Backport of c07f3e60c2d455e36ba4ac339d4283d32bbc3814 from master 21 April 2014, 22:31:08 UTC
985434f [1.5.x] Fixed queries that may return unexpected results on MySQL due to typecasting. This is a security fix. Disclosure will follow shortly. Backport of 75c0d4ea3ae48970f788c482ee0bd6b29a7f1307 from master 21 April 2014, 22:31:08 UTC
6872f42 [1.5.x] Prevented leaking the CSRF token through caching. This is a security fix. Disclosure will follow shortly. Backport of c083e3815aec23b99833da710eea574e6f2e8566 from master 21 April 2014, 22:31:05 UTC
2a5bcb6 [1.5.x] Fixed a remote code execution vulnerabilty in URL reversing. Thanks Benjamin Bach for the report and initial patch. This is a security fix; disclosure to follow shortly. Backport of 8b93b31487d6d3b0fcbbd0498991ea0db9088054 from master 21 April 2014, 22:30:57 UTC
d6c685c [1.5.x] Corrected the section identifier for MySQL unicode reference. Backport of b2514c02e1 from master 21 April 2014, 17:20:56 UTC
1997421 [1.5.x] Fixed #22471 -- Corrected misprint in i18n docs Backport of 54d5c37de6572eae57a66339bb38719e681cee82 from master. 18 April 2014, 13:16:43 UTC
ec2d456 [1.5.x] Fixed #22457 -- Fixed contributing guide w/o github set-up The published commnand was not working when the user did not have the git client set-up with the public-key. Changed the contributing guide to clone it from https instead. Backport of 28102991172ab931d030412275f926c1b05c688d from master 16 April 2014, 13:40:32 UTC
cbc80ee [1.5.x] Fixed #22392 -- Corrected deployment instructions for Apache 2.4. Thanks zjcheah at yahoo.com for the report. Backport of 0f37d2e4c0 from master 15 April 2014, 21:46:01 UTC
5b2d17d [1.5.x] Fixed #22419 -- Typo in docs/topics/db/multi-db.txt. Thanks Josh Kupershmidt. Backport of c487b1e230 from master 10 April 2014, 23:33:50 UTC
efb0c84 [1.5.x] Updated six to 1.6.1. Backport of 2ec82c7387db071278201796208808de84c90dbf from master 24 March 2014, 11:34:37 UTC
468d060 [1.5.x] Clarified strip_tags documentation The fact that strip_tags cannot guarantee to really strip all non-safe HTML content was not clear enough. Also see: https://www.djangoproject.com/weblog/2014/mar/22/strip-tags-advisory/ Partial backport (doc-only) of 6ca6c36f82 from master. 22 March 2014, 10:14:15 UTC
b86ff4e [1.5.x] Fixed #22262 -- Added the correct line in the last example of Translator lines Backport of 958b511a80c01ac010561c8fefe4548203700fa3 from master. 13 March 2014, 13:15:48 UTC
c888bee [1.5.x] Fixed #22062 -- Corrected static files config for Apache >= 2.4 Backport of ffa238c3f7 from master 18 February 2014, 14:32:44 UTC
4e115af [1.5.x] Fix typo CRSF -> CSRF Backport of af64f829d7 from master 29 January 2014, 17:08:55 UTC
b55d0eb [1.5.x] Added release note stubs for 1.5.6 and 1.4.11. Backport of dfa28981ce from master 26 January 2014, 22:49:04 UTC
682420d [1.5.x] Fixed #21823 -- Upgraded six to 1.5.2 Backport of 780ae7e9f8 from master. 26 January 2014, 20:48:32 UTC
60054e6 [1.5.x] Fixed #21869 -- Fixed docs building with Sphinx 1.2.1. Thanks tragiclifestories for the report. Backport of e1d18b9d2e from master 24 January 2014, 14:05:55 UTC
c539a44 [1.5.x] Fixed #21824 -- Added reference to LTS in docs/internals/security.txt Backport of 4d8209431d from master 24 January 2014, 13:14:46 UTC
169bee8 [1.5.x] Fixed some punctuation; thanks Chris Jerdonek. Backport of 81830ce34f from master 23 January 2014, 14:05:14 UTC
7517768 [1.5.x] Always use parentheses when documenting a method with no arguments. Backport of 05d36dc06e6d767bb28993c65a54b703f319a386 from master. 22 January 2014, 22:28:07 UTC
126af8f [1.5.x] Don't show `self` in the list of arguments of a method. This is consistent with Python's official documentation and it's a sphinx recommendation too[1]. [1] http://sphinx-doc.org/markup/desc.html#dir-method Refs #21855. Backport of 79e1d6ebd70898d514a44b85648e3d24104c4243 from master. 22 January 2014, 22:26:05 UTC
ebed014 [1.5.x] Fixed #21726 -- Clarified that password should not be included in REQUIRED_FIELDS. Thanks russellm for the report. Backport of 6f06c749b7 from master 22 January 2014, 15:19:07 UTC
45535c8 [1.5.x] Fixed #21834 -- Clarifed usage of template_name in tutorial part 4. Backport of a292ad1105 from stable/1.6.x 21 January 2014, 01:08:59 UTC
0946aac [1.5.x] Fixed #20659 -- Fixed PublisherDetail in CBV topic documentation. Thanks to tudor.prodan, susan, and Tim Graham for the report and reviews. Backport of 88de53d4a86548016f245a1413b856aa334bc737 from master. 20 January 2014, 22:08:03 UTC
267aeab [1.5.x] Added a note about LTS releases. Backport of a44cbca2a5f1388c6511dad48443877fa660845a from master. 19 January 2014, 17:46:18 UTC
f746d1f [1.5.x] Fixed #20052 -- Discouraged use of Jython given the current state of django-jython. Thanks Josh Juneau (maintainer of django-jython) for the review. Backport of a67e327db5 from master 17 January 2014, 14:29:19 UTC
b83dae6 [1.5.x] Fixed #21768 -- Corrected TemplateView context section. Thanks nedbatchelder for the report and claudep for the patch. Backport of c05b2f58e7 from master 16 January 2014, 12:59:18 UTC
a326804 [1.5.x] Fixed typo in storage docs Backport of 82f466b571 from master 15 January 2014, 23:45:06 UTC
1ccfcbe [1.5.x] Fixed a sentence in the session security docs; thanks claudep. Backport of 4d27d311f6 from master 03 January 2014, 17:04:23 UTC
ca4cd3f [1.5.x] Fixed typos. Changed grammar. Backport of 6dd8631617 from master 02 January 2014, 21:28:10 UTC
4d05e67 [1.5.x] Fixed minor typos. Backport of 44d40ba521 from master 02 January 2014, 21:22:26 UTC
bbcdfb4 [1.5.x] Fixed version number in docs/conf.py Since there are no more alpha/beta/rcs for 1.5 we can set release=version. 01 January 2014, 16:54:04 UTC
f20da28 [1.5.x] Fixed #21708 -- Added some headings to separate unrelated topics. Thanks ashley at ashleymills.com for the suggestion. Backport of 270f7e2167 from master 30 December 2013, 22:57:47 UTC
3cf9ba5 [1.5.x] Fixed #21710 -- Documented User.get_short_name() Thanks Keryn Knight for the report. Backport of 0150830687 from master 30 December 2013, 22:46:56 UTC
66ada28 [1.5.x] Fixed #21582 -- Corrected URL namespace example. Thanks oubiga for the report. Backport of 025ec2e7fe from master 27 December 2013, 01:06:33 UTC
fc2c8ee [1.5.x] Fixed #21663 -- Added missing WSGIPythonPath in mod_wsgi config. Thanks carrie.hazelton at altamiracorp.com for the report. Backport of e82e7ae1e8 from master 25 December 2013, 11:11:25 UTC
6980059 [1.5.x] Fixed #21613 -- Removed a hardcoded input id from the tutorial. Thanks Bruno Brouard for the report. Backport of cc2d960274 from master 18 December 2013, 23:37:14 UTC
6833773 [1.5.x] Fixed #21632 -- Docs: Removed example with callable as query parameter Using callables as query parameters is undocumented and not working, so this changes an example from the ForeignKey.limit_choices_to documentation that uses it. Backport of d34c8c338a from master 18 December 2013, 17:38:00 UTC
e4174da [1.5.x] Fixed #21539 -- Added example of modelformset_factory's form argument Backport of 1fa681ee11 from master 14 December 2013, 21:36:27 UTC
a53820b [1.5.x] Fixed #21594 -- Added note about model formsets deleting objects. This behavior has been fixed in 65e03a424e. refs #10284. Backport of de1d5d5df5 from stable/1.6.x. 11 December 2013, 19:43:44 UTC
deeed42 [1.5.x] Fixed #21558 -- Support building CHM files. Thanks Michał Pasternak. Backport of cd9e85ec from master. 04 December 2013, 15:52:04 UTC
86c5115 [1.5.x] Fixed #21538 -- Added numpy to test/requirements/base.txt Thanks Tim Graham for the report Backport of c75dd664c from master 02 December 2013, 18:41:18 UTC
0e98050 [1.5.x] Fixed #21515 -- Corrected example of template.Context in documentation. Thanks to trac user oubiga for the report. Backport of 077af42139db84d88f293ab5eadc989a9169dce1 from master. 28 November 2013, 00:00:32 UTC
e19506d [1.5.x] Fixed #21507 -- Corrected default widget information for FileField Backport of 70e61310d6 from master 25 November 2013, 13:27:35 UTC
c0c7795 [1.5.x] Fixed typo in previous commit; refs #21490. Backport of 03bc0a8ac5 from master 24 November 2013, 21:29:14 UTC
0934894 [1.5.x] Fixed #21490 -- Fixed custom admin URL reverse example. Thanks glarrain for the report. Backport of bfe7377adb from master 24 November 2013, 20:19:39 UTC
01fed9c Removed obsolete deprecation notes. 23 November 2013, 13:47:41 UTC
0bb05f6 [1.5.x] Fix #20054: Removed links to modwsgi.org. Backport of 957fcd0c9fc605bbb69e03296aede3b0bac5a8d2 from master. 22 November 2013, 08:15:37 UTC
ed8814b Fixed #21468 -- Removed a ModelForm bit that doesn't apply to 1.5.x. The bit was incorrectly backported with 3860d5e8f814e26baf4deee9258392cd34a4b456. Thanks to trac user direx for the report and to Loic Bistuer for his help. 20 November 2013, 09:52:49 UTC
2fb6dbe [1.5.x] Recommended setuptools in the reuseable app tutorial. setuptools has merged with distribute. Backport of b5eef8535a from master. 19 November 2013, 21:24:42 UTC
af16a35 [1.5.x] Fixed the base class note in the Date Views docs. Backport of 42197e31aa from master 19 November 2013, 15:33:28 UTC
f89cdda Fixed missing imports from 16e5fdd9cb8cca4d203b9255a9771b3c370e37d6. 19 November 2013, 09:50:20 UTC
1135525 [1.5.x] Fixed typo in topics/http/sessions.txt. Backport of 9348fc5628 from master 19 November 2013, 00:11:37 UTC
402967f [1.5.x] Fixed #21240 -- Added 1.5 release note for OneToOneField/select_related change. Thanks marcin at sokrates.pl. Backport of ba63b9895b from master 18 November 2013, 14:35:21 UTC
b41540f [1.5.x] Fixed #21440 -- Typo #2 in topics/http/shortcuts.txt Thanks alasdair. Backport of d011714002 from master 15 November 2013, 15:22:55 UTC
47b6a7c [1.5.x] Fixed #21440 -- Typo in topics/http/shortcuts.txt Thanks olof.bjarnason at gmail.com for the report. Backport of 6e9e6ca071 from master 15 November 2013, 12:11:12 UTC
16e5fdd [1.5.x] Propagate get_user_model exception from get_user Fixes #21439 Backport of 3560ef04 from master. Conflicts: django/contrib/auth/tests/auth_backends.py 14 November 2013, 20:19:03 UTC
8d1f339 [1.5.x] Removed a mention of `Form._errors` from the documentation. Also removed a sentence that was incorrect: raising a `ValidationError` inside `Form.clean` doesn't clear the `cleaned_data` attribute. Thanks to loic84 and timograham for the review. Backport of 9aa6d4bdb6618ba4f17acc7b7c0d1462d6cbc718 and 0048ed77c7016a03aed6dbc255a6372f3df2ccd5 from master. 12 November 2013, 20:05:06 UTC
12ff162 [1.5.x] Fixed #21372 -- Corrected docs regarding translating LANGUAGES. Corrected LANGUAGES documentation on how to translate language names. Now using django.utils.translation.ugettext_lazy instead of a dummy gettext() function. Thanks to Salvatore for the report. Backport of 8bc350b38516d8c3a14aed113dd3402b9375b75c from master. Conflicts: docs/topics/i18n/translation.txt 09 November 2013, 23:09:02 UTC
1669a43 [1.5.x] Added missing parameter in npgettext_lazy docs Backport of 413307fe35 from master 08 November 2013, 23:35:52 UTC
88639d3 [1.5.x] Fixed broken link for TestCase.multi_db. 07 November 2013, 14:49:19 UTC
2d09f36 [1.5.x] Added 1.4.10 release notes. Backport of c29dd76f40 from master 07 November 2013, 14:42:52 UTC
back to top