mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-31 09:41:08 +00:00
Code Issues 32 Releases Wiki Activity
26,819 Commits 30 Branches 460 Tags
19fc6376ce67d01ca37a91ef2f55ef769f50513a
Commit Graph

4125 Commits

Author SHA1 Message Date
Shai Berger
5112e65ef2 Fixed #20869 -- made CSRF tokens change every request by salt-encrypting them 
Note that the cookie is not changed every request, just the token retrieved
by the `get_token()` method (used also by the `{% csrf_token %}` tag).

While at it, made token validation strict: Where, before, any length was
accepted and non-ASCII chars were ignored, we now treat anything other than
`[A-Za-z0-9]{64}` as invalid (except for 32-char tokens, which, for
backwards-compatibility, are accepted and replaced by 64-char ones).

Thanks Trac user patrys for reporting, github user adambrenecki
for initial patch, Tim Graham for help, and Curtis Maloney,
Collin Anderson, Florian Apolloner, Markus Holtermann & Jon Dufresne
for reviews.
 2016-05-19 05:02:19 +03:00
Tim Graham
6d9c5d46e6 Fixed #26636 -- Fixed typo in docs/ref/request-response.txt 2016-05-18 21:39:08 -04:00
Marti Raudsepp
b9ae662c97 Fixed #26620 -- Made Model.refresh_from_db() fail when passed unknown kwargs. 2016-05-18 09:27:23 -04:00
Josh Smeaton
2a4af0ea43 Fixed #25774 -- Refactor datetime expressions into public API 2016-05-18 20:14:58 +10:00
Tim Graham
354acd04af Refs #26601 -- Added a warning if both MIDDLEWARE AND MIDDLEWARE_CLASSES are set. 2016-05-17 07:24:45 -04:00
Tim Graham
ece4d24f8e Refs #26601 -- Deprecated old-style middleware. 2016-05-17 07:22:26 -04:00
Florian Apolloner
9baf692a58 Fixed #26601 -- Improved middleware per DEP 0005. 
Thanks Tim Graham for polishing the patch, updating the tests, and
writing documentation. Thanks Carl Meyer for shepherding the DEP.
 2016-05-17 07:22:22 -04:00
Tim Graham
c999c8d8f6 Updated admin's jQuery to 2.2.3. 2016-05-17 07:20:06 -04:00
Loïc Bistuer
ed0ff913c6 Fixed #10506, #13793, #14891, #25201 -- Introduced new APIs to specify models' default and base managers. 
This deprecates use_for_related_fields.

Old API:

class CustomManager(models.Model):
    use_for_related_fields = True

class Model(models.Model):
    custom_manager = CustomManager()

New API:

class Model(models.Model):
    custom_manager = CustomManager()

    class Meta:
        base_manager_name = 'custom_manager'

Refs #20932, #25897.

Thanks Carl Meyer for the guidance throughout this work.
Thanks Tim Graham for writing the docs.
 2016-05-17 12:07:22 +07:00
Claude Paroz
526575c641 Fixed #21379 -- Created auth-specific username validators 
Thanks Tim Graham for the review.
 2016-05-16 19:37:57 +02:00
Tim Graham
ee9f947e60 Fixed malformed table in docs/ref/contrib/gis/install/geolibs.txt 2016-05-16 13:27:33 -04:00
Claude Paroz
ebaa2fef27 Fixed #26592 -- Confirmed support for GDAL 2.1 
Thanks Daniel Wiesmann for the report and the appropriate fixes.
 2016-05-16 18:54:26 +02:00
Tim Graham
aa69f36984 Removed a redundant example in contenttypes docs. 2016-05-16 11:23:56 -04:00
Simon Charette
f937c9ec97 Fixed #24100 -- Made the migration signals dispatch its plan and apps. 
Thanks Markus for your contribution and Tim for your review.
 2016-05-15 19:51:15 -04:00
Tim Graham
e475e84970 Refs #26021 -- Used hanging indentation in some doc examples. 2016-05-14 19:06:31 -04:00
Matthew Somerville
1962a96a30 Fixed #24938 -- Added PostgreSQL trigram support. 2016-05-13 12:38:21 -04:00
eltronix
996cadfa5f Prevented findstatic argument from appearing as multiple options. 2016-05-12 20:26:33 -04:00
Alex Simonides
0430ac95ab Updated ECMAScript link in docs/ref/request-response.txt 2016-05-12 20:06:34 -04:00
Andre Cruz
929684d6ee Fixed #21231 -- Enforced a max size for GET/POST values read into memory. 
Thanks Tom Christie for review.
 2016-05-12 10:17:52 -04:00
Victor Oliveira da Silva
4065f429f5 Fixed typo in docs/ref/contrib/gis/layermapping.txt 2016-05-12 08:16:18 -04:00
Tim Graham
2f0e0eee45 Fixed #24046 -- Deprecated the "escape" half of utils.safestring. 2016-05-10 12:46:47 -04:00
Vasiliy Faronov
31e0314979 Fixed #26580 -- Updated references to obsolete RFC 2822. 
Didn't rename django.utils.feedgenerator.rfc2822_date()
as some external code may rely on it.
 2016-05-10 11:24:51 -04:00
Tim Graham
f5ff5010cd Fixed #26483 -- Updated docs.python.org links to use Intersphinx. 2016-05-08 18:07:43 -04:00
Tim Graham
6b5926978b Refs #8898 -- Documented requirement to use SplitDateTimeField with SplitDateTimeWidget. 2016-05-07 20:01:15 -04:00
Vitaly Bogomolov
aec4f97555 Fixed #26402 -- Added relative path support in include/extends template tags. 2016-05-07 16:21:57 -04:00
Tobias McNulty
dbd99de6fa Fixed #26508 -- Clarified docs for various FieldFile methods. 2016-05-07 12:16:42 -04:00
Daniel Wiesmann
bbfad84dd9 Fixed #25588 -- Added spatial lookups to RasterField. 
Thanks Tim Graham for the review.
 2016-05-06 09:17:18 -04:00
Tim Graham
03efa304bc Refs #25847 -- Added system check for UserModel.is_anonymous/is_authenticated methods. 2016-05-06 08:56:06 -04:00
Claude Paroz
388bb5bd9a Fixed #22936 -- Obsoleted Field.get_prep_lookup()/get_db_prep_lookup() 
Thanks Tim Graham for completing the initial patch.
 2016-05-04 20:02:01 +02:00
Ville Skyttä
575a9a791e Normalized "an SQL" spelling. 2016-05-03 19:30:48 -04:00
Vasiliy Faronov
ac77c55bc5 Fixed #26567 -- Updated references to obsolete RFC2616. 
Didn't touch comments where it wasn't obvious that the code adhered to
the newer standard.
 2016-05-03 11:14:40 -04:00
Arthur Vuillard
72ea289ab7 Added --noinput in migrate commmand's docs. 2016-05-03 09:43:16 -04:00
Alasdair Nicol
eb5d7bc2f4 Fixed #26440 -- Added a warning for non-url()s in urlpatterns. 
Thanks Burhan Khalid for the initial patch and knbk/timgraham
for review.
 2016-04-30 20:09:31 -04:00
Cristiano
914c72be2a Fixed #26058 -- Delegated os.path bits of FileField's filename generation to the Storage. 2016-04-30 17:22:40 -04:00
Anssi Kääriäinen
7f51876f99 Fixed #26207 -- Replaced dynamic classes with non-data descriptors for deferred instance loading. 2016-04-29 13:06:32 -04:00
Alasdair Nicol
dac075e910 Refs #26479 -- Documented is/is not if tag operator behavior for nonexistent variables. 2016-04-29 12:38:46 -04:00
eltronix
ce32c3e2cc Fixed typo in docs/ref/contrib/admin/index.txt 2016-04-28 18:19:21 -04:00
Tim Graham
f945fb24a3 Fixed #26554 -- Updated docs URLs to readthedocs.io 2016-04-28 10:09:57 -04:00
eltronix
fed7004b8a Fixed typo in docs/ref/contrib/admin/index.txt 2016-04-27 15:41:37 -04:00
Tim Graham
859eeaa0f0 Fixed #26533 -- Renamed Widget._format_value() to format_value(). 2016-04-23 13:15:45 -04:00
Tim Graham
a755e0657e Removed unused BaseExpression.refs_aggregate(). 
Unused since afe0bb7b13.
 2016-04-22 13:04:13 -04:00
Marc Tamlyn
9e4e20a71c Fix typos in PGFTS docs. 
Thanks for Simon Willison for the spot.
 2016-04-22 16:20:47 +01:00
Marc Tamlyn
2d877da855 Refs #3254 -- Added full text search to contrib.postgres. 
Adds a reasonably feature complete implementation of full text search
using the built in PostgreSQL engine. It uses public APIs from
Expression and Lookup.

With thanks to Tim Graham, Simon Charettes, Josh Smeaton, Mikey Ariel
and many others for their advice and review. Particular thanks also go
to the supporters of the contrib.postgres kickstarter.
 2016-04-22 10:44:37 +01:00
Claude Paroz
f4c2b8e04a Fixed #20189 -- Allowed customizing staticfiles ignored_patterns list 
Thanks Tim Graham for the review.
 2016-04-22 09:56:06 +02:00
Jon Dufresne
ec6121693f Fixed #22383 -- Added support for HTML5 required attribute on required form fields. 2016-04-21 19:16:38 -04:00
Daniel Wiesmann
65006e0b0b Refs #26455 -- Documented isvalid/makevalid in compatibility table. 2016-04-21 09:13:34 -04:00
Markus Amalthea Magnuson
08cd6a0e56 Fixed #16327 -- Redirected "Save as new" to change view instead of the changelist. 2016-04-20 11:31:44 -04:00
eltronix
7ba7d203d8 Fixed typo in docs/ref/template-response.txt. 2016-04-18 07:50:13 -04:00
Claude Paroz
9686c888d6 Fixed #25951 -- Trimmed default representation of GEOSGeometry 
Thanks Sergey Fedoseev for the report.
 2016-04-17 15:31:12 +02:00
Claude Paroz
6c9603277d Updated indentation in GEOS docs 2016-04-16 19:51:00 +02:00