Sarah Boyce 2cb311f7b0 [5.2.x] Fixed CVE-2025-27556 -- Mitigated potential DoS in url_has_allowed_host_and_scheme() on Windows. ...

Thank you sw0rd1ight for the report.

Backport of 39e2297210d9d2938c75fc911d45f0e863dc4821 from main.

2025-04-02 10:23:46 +02:00

..

apps

Fixed #34687 -- Made Apps.clear_cache() clear get_swappable_settings_name() cache.

2023-06-30 08:27:15 +02:00

conf

[5.2.x] Updated translations from Transifex.

2025-03-31 16:05:05 +02:00

contrib

[5.2.x] Fixed #36284, Refs #31170 -- Ensured related lookup popups are closed properly.

2025-04-01 13:55:05 -03:00

core

[5.2.x] Fixed CVE-2025-27556 -- Mitigated potential DoS in url_has_allowed_host_and_scheme() on Windows.

2025-04-02 10:23:46 +02:00

db

[5.2.x] Fixed warnings per flake8 7.2.0.

2025-03-30 17:56:41 +02:00

dispatch

Fixed #35174 -- Fixed Signal.asend()/asend_robust() crash when all receivers are asynchronous.

2024-02-08 11:36:28 +01:00

forms

[5.2.x] Applied Black's 2025 stable style.

2025-03-01 19:47:17 +01:00

http

Fixed #35784 -- Added support for preserving the HTTP request method in HttpResponseRedirectBase.

2024-11-14 15:53:49 -03:00

middleware

Removed unneeded hyphens in "counterintuitive".

2024-07-04 08:30:19 +02:00

template

[5.2.x] Applied Black's 2025 stable style.

2025-03-01 19:47:17 +01:00

templatetags

Refs #34233 -- Used str.removeprefix()/removesuffix().

2023-01-18 19:11:18 +01:00

test

[5.2.x] Fixed #35967 -- Deferred test suite fixtures serialization after all dbs setup.

2025-02-16 13:43:38 +01:00

urls

Fixed #25582 -- Added support for query and fragment to django.urls.reverse().

2024-12-11 16:40:28 -03:00

utils

[5.2.x] Fixed CVE-2025-27556 -- Mitigated potential DoS in url_has_allowed_host_and_scheme() on Windows.

2025-04-02 10:23:46 +02:00

views

Refs #26007 -- Improved the ImproperlyConfigured error message for SingleObjectTemplateResponseMixin.get_template_names().

2024-12-18 13:08:14 +01:00

__init__.py

[5.2.x] Bumped version for 5.2 release candidate 1.

2025-03-19 09:03:25 +01:00

__main__.py

Applied Black's 2024 stable style.

2024-01-26 12:45:07 +01:00

shortcuts.py

Fixed #35784 -- Added support for preserving the HTTP request method in HttpResponseRedirectBase.

2024-11-14 15:53:49 -03:00