Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Refs #26029 -- Deprecated DEFAULT_FILE_STORAGE and STATICFILES_STORAGE settings. | Jarosław Wygoda | 2023-01-12 | 1 | -1/+6 |
| | |||||
* | Fixed #34110 -- Added in-memory file storage. | Francesco Panico | 2023-01-10 | 1 | -2/+8 |
| | | | | | Thanks Paolo Melchiorre, Carlton Gibson, and Mariusz Felisiak for reviews. | ||||
* | Refs #34100 -- Made file upload tests use Storage.exists() where appropriate. | Francesco Panico | 2022-12-30 | 3 | -6/+11 |
| | |||||
* | Updated documentation and comments for RFC updates. | Nick Pope | 2022-11-10 | 1 | -4/+2 |
| | | | | | | | | | | | | | | | - Updated references to RFC 1123 to RFC 5322 - Only partial as RFC 5322 sort of sub-references RFC 1123. - Updated references to RFC 2388 to RFC 7578 - Except RFC 2388 Section 5.3 which has no equivalent. - Updated references to RFC 2396 to RFC 3986 - Updated references to RFC 2616 to RFC 9110 - Updated references to RFC 3066 to RFC 5646 - Updated references to RFC 7230 to RFC 9112 - Updated references to RFC 7231 to RFC 9110 - Updated references to RFC 7232 to RFC 9110 - Updated references to RFC 7234 to RFC 9111 - Tidied up style of text when referring to RFC documents | ||||
* | Refs #33697 -- Used django.utils.http.parse_header_parameters() for parsing ↵ | Mehrdad | 2022-06-28 | 1 | -45/+0 |
| | | | | | | | boundary streams. This also removes unused parse_header() and _parse_header_params() helpers in django.http.multipartparser. | ||||
* | Refs #33697 -- Fixed multipart parsing of headers with double quotes and ↵ | Mehrdad | 2022-06-01 | 1 | -0/+6 |
| | | | | | | semicolons. See https://github.com/python/cpython/commit/1ef0c0349e8fdb5415e21231cb42edbf232b742a | ||||
* | Refs #33476 -- Refactored code to strictly match 88 characters line length. | Mariusz Felisiak | 2022-02-07 | 1 | -9/+14 |
| | |||||
* | Refs #33476 -- Reformatted code with Black. | django-bot | 2022-02-07 | 5 | -414/+559 |
| | |||||
* | Refs #33476 -- Refactored problematic code before reformatting by Black. | Mariusz Felisiak | 2022-02-03 | 1 | -2/+1 |
| | | | | | | | | | | | | | | | | | In these cases Black produces unexpected results, e.g. def make_random_password( self, length=10, allowed_chars='abcdefghjkmnpqrstuvwxyz' 'ABCDEFGHJKLMNPQRSTUVWXYZ' '23456789', ): or cursor.execute(""" SELECT ... """, [table name], ) | ||||
* | Fixed CVE-2022-23833 -- Fixed DoS possiblity in file uploads. | Mariusz Felisiak | 2022-02-01 | 1 | -0/+20 |
| | | | | Thanks Alan Ryan for the report and initial patch. | ||||
* | Fixed #33062 -- Made MultiPartParser remove non-printable chars from file names. | Hrushikesh Vaidya | 2022-01-20 | 1 | -0/+23 |
| | |||||
* | Fixed isolation of test_filename_traversal_upload(). | Mariusz Felisiak | 2021-07-05 | 1 | -1/+0 |
| | | | shutil.rmtree(MEDIA_ROOT) is already called as a class cleanup. | ||||
* | Refs #32355 -- Used addClassCleanup() in tests. | Mariusz Felisiak | 2021-06-04 | 1 | -10/+2 |
| | | | Inspired by Adam Johnson talk on DjangoCon Europe 2021. | ||||
* | Fixed CVE-2021-31542 -- Tightened path & file name sanitation in file uploads. | Florian Apolloner | 2021-05-04 | 1 | -1/+37 |
| | |||||
* | Fixed CVE-2021-28658 -- Fixed potential directory-traversal via uploaded files. | Mariusz Felisiak | 2021-04-06 | 4 | -16/+109 |
| | | | | | Thanks Claude Paroz for the initial patch. Thanks Dennis Brinkrolf for the report. | ||||
* | Fixed #30422 -- Made TemporaryFileUploadHandler handle interrupted uploads. | aryan | 2020-09-30 | 3 | -1/+37 |
| | | | | | | This patch allows upload handlers to handle interrupted uploads. Co-Authored-By: Mariusz Felisiak <felisiak.mariusz@gmail.com> | ||||
* | Refs #30422 -- Added test for removing temporary files in MultiPartParser ↵ | aryan | 2020-09-30 | 4 | -2/+30 |
| | | | | when StopUpload is raised. | ||||
* | Fixed #28132 -- Made MultiPartParser ignore filenames with trailing slash. | Michael Brown | 2020-06-11 | 1 | -4/+8 |
| | |||||
* | Capitalized Unicode in docs, strings, and comments. | Jon Dufresne | 2020-04-20 | 1 | -1/+1 |
| | |||||
* | Fixed #31293 -- Allowed MultiPartParser to handle double-quoted encoded headers. | 007 | 2020-02-28 | 1 | -0/+42 |
| | |||||
* | Used more specific unittest assertions in tests. | Nick Pope | 2019-10-29 | 1 | -2/+3 |
| | | | | | | | | | | | | * assertIsNone()/assertIsNotNone() instead of comparing to None. * assertLess() for < comparisons. * assertIs() for 'is' expressions. * assertIsInstance() for isinstance() expressions. * rounding of assertAlmostEqual() for round() expressions. * assertIs(..., True/False) instead of comparing to True/False. * assertIs()/assertIsNot() for ==/!= comparisons. * assertNotEqual() for == comparisons. * assertTrue()/assertFalse() instead of comparing to True/False. | ||||
* | Cleaned up exception message checking in some tests. | Jon Dufresne | 2019-03-15 | 1 | -2/+2 |
| | |||||
* | Refs #15362 -- Removed obsolete workaround in file_uploads test view. | Jon Dufresne | 2019-02-09 | 1 | -19/+2 |
| | |||||
* | Removed default empty content argument from HttpResponse calls. | Jon Dufresne | 2019-02-09 | 1 | -4/+4 |
| | |||||
* | Fixed #30147 -- Simplified directory creation with os.makedirs(..., ↵ | Jon Dufresne | 2019-01-31 | 1 | -4/+2 |
| | | | | exist_ok=True). | ||||
* | Fixed #30137 -- Replaced OSError aliases with the canonical OSError. | Jon Dufresne | 2019-01-28 | 1 | -5/+2 |
| | | | | Used more specific errors (e.g. FileExistsError) as appropriate. | ||||
* | Updated test URL patterns to use path() and re_path(). | Tim Graham | 2018-12-31 | 1 | -13/+13 |
| | |||||
* | Added tests for incorrect content type and size in MultiPartParser. | Mads Jensen | 2018-06-12 | 1 | -2/+25 |
| | |||||
* | Refs #27795 -- Removed force_bytes/text() usage in tests. | Tim Graham | 2018-02-07 | 2 | -6/+4 |
| | |||||
* | Fixed #28249 -- Removed unnecessary dict.keys() calls. | Jon Dufresne | 2017-05-27 | 1 | -1/+1 |
| | | | iter(dict) is equivalent to iter(dict.keys()). | ||||
* | Refs #23919 -- Removed default 'utf-8' argument for str.encode()/decode(). | Tim Graham | 2017-02-09 | 1 | -1/+1 |
| | |||||
* | Used JsonResponse and response.json in file_uploads tests. | Tim Graham | 2017-02-08 | 2 | -29/+16 |
| | |||||
* | Refs #23919 -- Replaced tempfile.mkdtemp() with TemporaryDirectory() context ↵ | Chillar Anand | 2017-01-26 | 1 | -15/+7 |
| | | | | manager. | ||||
* | Refs #23919 -- Replaced usage of django.utils.http utilities with Python ↵ | Claude Paroz | 2017-01-26 | 1 | -3/+3 |
| | | | | | | equivalents Thanks Tim Graham for the review. | ||||
* | Refs #23919 -- Replaced super(ClassName, self) with super(). | chillaranand | 2017-01-25 | 2 | -6/+6 |
| | |||||
* | Refs #23919 -- Replaced errno checking with PEP 3151 exceptions. | Tim Graham | 2017-01-25 | 1 | -3/+1 |
| | |||||
* | Refs #23919 -- Removed unneeded force_str calls | Claude Paroz | 2017-01-20 | 1 | -4/+2 |
| | |||||
* | Refs #23919 -- Removed obsolete contextlib.closing() calls (for Python 2). | Tim Graham | 2017-01-19 | 1 | -2/+1 |
| | |||||
* | Refs #23919 -- Removed most of remaining six usage | Claude Paroz | 2017-01-18 | 1 | -2/+1 |
| | | | | Thanks Tim Graham for the review. | ||||
* | Refs #23919 -- Removed six.<various>_types usage | Claude Paroz | 2017-01-18 | 1 | -2/+1 |
| | | | | Thanks Tim Graham and Simon Charette for the reviews. | ||||
* | Refs #23919 -- Removed six.PY2/PY3 usage | Claude Paroz | 2017-01-18 | 1 | -4/+2 |
| | | | | Thanks Tim Graham for the review. | ||||
* | Refs #23919 -- Removed encoding preambles and future imports | Claude Paroz | 2017-01-18 | 2 | -5/+0 |
| | |||||
* | Refs #27392 -- Removed "Tests that", "Ensures that", etc. from test docstrings. | za | 2016-11-10 | 2 | -4/+3 |
| | |||||
* | Replaced smart_* by force_* calls whenever possible | Claude Paroz | 2016-09-03 | 1 | -2/+2 |
| | | | | | The smart_* version should only be used when a lazy string should keep its lazy status. | ||||
* | Replaced use of TestCase.fail() with assertRaises(). | Tim Graham | 2016-06-28 | 1 | -5/+4 |
| | | | Also removed try/except/fail antipattern that hides exceptions. | ||||
* | Fixed #26601 -- Improved middleware per DEP 0005. | Florian Apolloner | 2016-05-17 | 1 | -1/+1 |
| | | | | | Thanks Tim Graham for polishing the patch, updating the tests, and writing documentation. Thanks Carl Meyer for shepherding the DEP. | ||||
* | Fixed E128 flake8 warnings in tests/. | Tim Graham | 2016-04-08 | 1 | -2/+1 |
| | |||||
* | Fixed #26325 -- Made MultiPartParser ignore filenames that normalize to an ↵ | John-Mark Bell | 2016-03-07 | 1 | -0/+35 |
| | | | | empty string. | ||||
* | Refs #26022 -- Used context manager version of assertRaises in tests. | Hasan | 2016-01-29 | 1 | -6/+2 |
| | |||||
* | Fixed typos in test comments. | Mingun Pak | 2016-01-23 | 1 | -1/+1 |
| |