1
0
mirror of https://github.com/django/django.git synced 2025-07-19 00:59:17 +00:00

3 Commits

Author SHA1 Message Date
Mariusz Felisiak
02e6592835 [3.1.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().
Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.

Thanks Wang Baohua for the report.

Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master.
2021-02-01 09:13:58 +01:00
Denis Skulimovskiy
82e1294602 [3.1.x] Fixed #32391 -- Used CSS flex properties for changelist filter.
Matched layout adjustment using flex from admin sidebar added in
d24ba1be7a53a113d19e2860c03aff9922efec24.

Filters would become squashed when viewport was
constrained or list display table became too wide.

Backport of 269a76714616fd7ad166a14113f3354bab8d9b65 from master
2021-01-28 15:55:51 +01:00
Carlton Gibson
622e37ca6d [3.1.x] Added stub release notes for 3.1.6.
Backport of 966ed414b2adfc9ecc26a9d529dec99d94262cd9 from master
2021-01-04 08:59:11 +01:00