Claude Paroz 552f03869e Added safety to URL decoding in is_safe_url() on Python 2 ...

The errors='replace' parameter to force_text altered the URL before checking
it, which wasn't considered sane. Refs 24fc935218 and ada7a4aef.

2016-03-04 23:33:35 +01:00

..

apps

…

bin

…

conf

Fixed #26187 -- Removed weak password hashers from PASSWORD_HASHERS.

2016-02-22 18:59:23 -05:00

contrib

Fixed #26226 -- Made related managers honor the queryset used for prefetching their results.

2016-03-02 16:10:18 -05:00

core

Passed proper default value to int-type 'verbosity' option

2016-03-03 20:42:43 +01:00

db

Fixed #26316 -- Factored duplicated code in model/field migration operations.

2016-03-03 18:24:36 -05:00

dispatch

Corrected a few typos in Signal.send() docstring.

2016-01-12 08:27:02 -05:00

forms

Fixed #24974 -- Fixed inheritance of formfield_callback for modelform_factory forms.

2016-02-26 12:27:27 -05:00

http

Fixed #26014 -- Added WSGIRequest content_type and content_params attributes.

2016-02-10 18:19:23 -05:00

middleware

Fixed #26295 -- Allowed using i18n_patterns() in any root URLconf.

2016-03-03 12:08:49 -05:00

template

Fixed #26280 -- Fixed cached template loader crash when loading nonexistent template.

2016-02-26 08:02:10 -05:00

templatetags

Fixed #21221 -- Made form Media and static template tag use staticfiles if installed.

2015-12-10 14:30:19 -05:00

test

Refs #25735 -- Made @tag decorator importable from django.test.

2016-02-19 14:21:00 -05:00

urls

Removed unnecessary imports.

2016-01-23 15:11:05 +01:00

utils

Added safety to URL decoding in is_safe_url() on Python 2

2016-03-04 23:33:35 +01:00

views

Fixed #25670 -- Allowed dictsort to sort a list of lists.

2016-02-23 12:15:08 -05:00

__init__.py

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00

__main__.py

…

shortcuts.py

Fixed #26013 -- Moved django.core.urlresolvers to django.urls.

2015-12-31 14:21:29 -05:00