Sarah Boyce af067f56c1 [6.0.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract(). ...

Thanks stackered for the report.

Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23.

Backport of 924a0c092e65fa2d0953fd1855d2dc8786d94de2 from main.

2025-10-01 08:17:44 -04:00

..

archives

…

eggs

…

files

Rewrote strip_tags test file to lorem ipsum.

2022-03-08 14:50:06 +01:00

test_module

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

traversal_archives

Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

2021-02-01 09:07:36 +01:00

__init__.py

…

deconstructible_classes.py

Refs #21275 -- Added more tests for @deconstructible decorator.

2022-01-04 13:08:36 +01:00

models.py

…

test_archive.py

[6.0.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract().

2025-10-01 08:17:44 -04:00

test_autoreload.py

[6.0.x] Fixed #36434 -- Preserved unbuffered stdio (-u) in autoreloader child.

2025-09-25 11:40:04 +02:00

test_choices.py

Refs #34899 -- Extracted Field.flatchoices to flatten_choices helper function.

2023-10-23 13:44:23 -03:00

test_connection.py

Prevented initialization of unused database connections.

2022-03-17 07:40:57 +01:00

test_crypto.py

Fixed #36572 -- Revert "Fixed #36546 -- Deprecated django.utils.crypto.constant_time_compare() in favor of hmac.compare_digest()."

2025-08-27 10:50:50 +02:00

test_csp.py

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23 20:17:55 -03:00

test_datastructures.py

Fixed #36410 -- Added support for Template Partials to the Django Template Language.

2025-08-14 21:53:14 -03:00

test_dateformat.py

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23 20:17:55 -03:00

test_dateparse.py

Fixed #36005 -- Dropped support for Python 3.10 and 3.11.

2025-01-20 14:07:28 +01:00

test_deconstruct.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_decorators.py

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23 20:17:55 -03:00

test_duration.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_encoding.py

Refs #34986 -- Fixed some test assertions for PyPy.

2023-11-28 06:19:38 +01:00

test_feedgenerator.py

Refs #36005 -- Used datetime.UTC alias instead of datetime.timezone.utc.

2025-02-18 08:35:36 +01:00

test_functional.py

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23 20:17:55 -03:00

test_hashable.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_html.py

Fixed #35533 -- Prevented urlize creating broken links given a markdown link input.

2025-08-28 08:54:56 +02:00

test_http.py

Fixed #36520 -- Reverted "Fixed #35440 -- Simplified parse_header_parameters by leveraging stdlid's Message."

2025-09-15 22:14:50 -03:00

test_inspect.py

Fixed #35859 -- Added background Tasks framework interface.

2025-09-16 17:28:32 -03:00

test_ipv6.py

Fixed #36098 -- Fixed validate_ipv6_address()/validate_ipv46_address() crash for non-string values.

2025-01-15 13:46:06 -03:00

test_json.py

Fixed #35859 -- Added background Tasks framework interface.

2025-09-16 17:28:32 -03:00

test_lazyobject.py

Fixed utils_tests.test_lazyobject.SimpleLazyObjectPickleTestCase.

2023-08-20 16:09:07 +02:00

test_lorem_ipsum.py

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23 20:17:55 -03:00

test_module_loading.py

Fixed #34233 -- Dropped support for Python 3.8 and 3.9.

2023-01-18 09:46:01 +01:00

test_no_submodule.py

…

test_numberformat.py

Refs #34000 -- Optimized handling None values in numberformat.format().

2022-09-12 13:02:50 +02:00

test_os_utils.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_regex_helper.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_safestring.py

Fixed #35648 -- Raised NotImplementedError in SafeString.__add__ for non-string RHS.

2024-08-12 14:25:05 -03:00

test_simplelazyobject.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_termcolors.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_text.py

Applied Black's 2025 stable style.

2025-03-01 19:41:37 +01:00

test_timesince.py

Refs #36500 -- Rewrapped long docstrings and block comments via a script.

2025-07-23 20:17:55 -03:00

test_timezone.py

Refs #36005 -- Used datetime.UTC alias instead of datetime.timezone.utc.

2025-02-18 08:35:36 +01:00

test_tree.py

Refs #32948 -- Renamed Node._new_instance() to Node.create().

2022-07-27 10:06:24 +02:00

utils.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00