Branch: refs/heads/stable/1.4.x
Home: https://github.com/django/django
Commit: 065caafa70b6c422f73e364a4c241b6538969d7b
https://github.com/django/django/commit/065caafa70b6c422f73e364a4c241b6538969d7b
Author: Simon Charette <charett...@gmail.com>
Date: 2014-09-08 (Mon, 08 Sep 2014)
Changed paths:
M django/contrib/admin/options.py
A docs/releases/1.4.16.txt
M docs/releases/index.txt
M tests/regressiontests/admin_views/admin.py
M tests/regressiontests/admin_views/models.py
M tests/regressiontests/admin_views/tests.py
Log Message:
-----------
[1.4.x] Fixed #23431 -- Allowed inline and hidden references to admin fields.
This fixes a regression introduced by the 53ff096982 security fix.
Thanks to @a1tus for the report and Tim for the review.
refs #23329.
Backport of 342ccbd from master
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/540df412b7a46_31b33fb67e8552b8138d3%40hookshot-fe3-cp1-prd.iad.github.net.mail.
For more options, visit https://groups.google.com/d/optout.
