mirror of
https://github.com/django/django.git
synced 2025-10-24 14:16:09 +00:00
[1.5.x] Added a default limit to the maximum number of forms in a formset.
This is a security fix. Disclosure and advisory coming shortly.
This commit is contained in:
committed by
Carl Meyer
parent
0e46c7f7ac
commit
3ef4bbf495
@@ -6,6 +6,7 @@ from django.contrib import admin
|
||||
from django.contrib.admin.sites import AdminSite
|
||||
from django.contrib.contenttypes.generic import (
|
||||
generic_inlineformset_factory, GenericTabularInline)
|
||||
from django.forms.formsets import DEFAULT_MAX_NUM
|
||||
from django.forms.models import ModelForm
|
||||
from django.test import TestCase
|
||||
from django.test.utils import override_settings
|
||||
@@ -244,7 +245,7 @@ class GenericInlineModelAdminTest(TestCase):
|
||||
|
||||
# Create a formset with default arguments
|
||||
formset = media_inline.get_formset(request)
|
||||
self.assertEqual(formset.max_num, None)
|
||||
self.assertEqual(formset.max_num, DEFAULT_MAX_NUM)
|
||||
self.assertEqual(formset.can_order, False)
|
||||
|
||||
# Create a formset with custom keyword arguments
|
||||
|
||||
Reference in New Issue
Block a user