Mariusz Felisiak 93cae5cb2f Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases. ...

Thanks Splunk team: Preston Elder, Jacob Davis, Jacob Moore,
Matt Hanson, David Briggs, and a security researcher: Danylo Dmytriiev
(DDV_UA) for the report.

2022-04-11 08:59:33 +02:00

..

__init__.py

…

models.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_bulk_update.py

Fixed #33506 -- Made QuerySet.bulk_update() perform atomic writes against write database.

2022-02-09 11:14:50 +01:00

test_contains.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_db_returning.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_explain.py

Removed redundant QuerySet.all() calls in docs and tests.

2022-02-22 10:29:38 +01:00

test_iterator.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

test_q.py

Fixed #29865 -- Added logical XOR support for Q() and querysets.

2022-03-04 12:55:37 +01:00

test_qs_combinators.py

Fixed #29865 -- Added logical XOR support for Q() and querysets.

2022-03-04 12:55:37 +01:00

test_query.py

Refs #30581 -- Allowed sql.Query to be used without model.

2022-03-16 09:33:16 +01:00

test_sqlcompiler.py

Refs #33476 -- Reformatted code with Black.

2022-02-07 20:37:05 +01:00

tests.py

Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases.

2022-04-11 08:59:33 +02:00