Re: Proposal: security enhancements

2019-07-22 Thread James Bennett
I haven't forgotten about this, but it'll likely be another day or two
before I can lay out a proper plan.

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/CAL13Cg_oMP1Ak4OhB_WMcPPH5TgCrotj_3NB9iX3ZmJXgtyvXA%40mail.gmail.com.


Re: Adding generated common table expressions

2019-07-22 Thread Jacob Rief
For my better understanding, could you please elaborate on what you mean by 
Hashes.as_literal(input_hashes) ?

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/48354bd1-5bd4-4b3a-b23e-376389ab2767%40googlegroups.com.


Re: Fellow Reports - July 2019

2019-07-22 Thread Mariusz Felisiak
Week ending July 21, 2019.

*Triaged:*
https://code.djangoproject.com/ticket/30636 - mysqldump crash when 
--defaults-file is not given before other options. (accepted)
https://code.djangoproject.com/ticket/30637 - SearchVectorField and 
SearchVector should be combinable. (accepted)
https://code.djangoproject.com/ticket/30639 - Raise an error on unsupported 
operations following QuerySet.union(). (duplicate)
https://code.djangoproject.com/ticket/30640 - createsuperuser crashes when 
a custom user model contains required fields that overlap with default 
command options. (wontfix)
https://code.djangoproject.com/ticket/30641 - Update docs for using CSRF 
with Ajax. (wontfix)
https://code.djangoproject.com/ticket/30618 - AppConfig.name should be a 
full python path when using the optional directory. (wontfix)
https://code.djangoproject.com/ticket/30643 - Docs incorrectly state that 
time zone support is disabled by default. (duplicate)
https://code.djangoproject.com/ticket/30642 - Unable to include default 
value in column_sql when creating new model. (invalid)
https://code.djangoproject.com/ticket/30329 - ImproperlyConfigured 
exceptions should be raised immediately. (fixed)
https://code.djangoproject.com/ticket/3 - QuerySet constructed with 
.union() should raise an exception on unsupported filter() attempt. 
(duplicate)https://code.djangoproject.com/ticket/30644 - Postgres 
introspection don't filter on visible objects. (accepted)
https://code.djangoproject.com/ticket/30646 - close_if_unusable_or_obsolete 
fails to close unusable connections. (wontfix)
https://code.djangoproject.com/ticket/30648 - Overriding get_context_data() 
is unnecessary in the "Using FormMixin with DetailView" example. (acce[ted)
https://code.djangoproject.com/ticket/28439 - When() crashes with 
ValidationError with models using UUID as primary key. (fixed)
https://code.djangoproject.com/ticket/30649 - Implement MakeValid() for 
non-column values. (wontfix)
https://code.djangoproject.com/ticket/30638 - Allow the per-database 
TIME_ZONE option on databases that support timezones. (wontfix)
https://code.djangoproject.com/ticket/30083 - Model instance state not 
correctly set when initializing a model with Model.from_db() (wontfix)

*Reviewed/committed:*
https://github.com/django/django/pull/11565 - Fixed explanation of how to 
automatically create tables in database.
https://github.com/django/django/pull/11567 - Fixed #30636 -- Fixed options 
ordering when cloning test database on MySQL.
https://github.com/django/django/pull/10478 - Fixed #29824 -- Added support 
for database exclusion constraints on PostgreSQL.
https://github.com/django/django/pull/11575 - Fixed #30648 -- Removed 
unnecessary overriding get_context_data() from mixins with CBVs docs.
https://github.com/django/django/pull/11566 - Fixed #30593 -- Added support 
for check constraints on MariaDB 10.2+.
https://github.com/django/djangoproject.com/pull/904 - Fixed #902 -- 
Updated to Django==2.2.3
https://github.com/django/djangoproject.com/pull/893 - Trimmed 
search_results translation messages.

*Reviewed:*
https://github.com/django/django/pull/11452 - Fixed #12990 -- Added 
JSONField model field.

*Authored:*
https://github.com/django/django/pull/11574 - Refs #30547 -- Clarified that 
partial UniqueConstraints don't affect model validation.
https://github.com/django/django/pull/11576 - Refs #30083 -- Clarified 
database state of instances in signals.pre_init docs.
https://github.com/django/django/pull/11577 - Simplified 
get_key_columns()/get_relations() introspection methods for PostgreSQL.

Best regards,
Mariusz

-- 
You received this message because you are subscribed to the Google Groups 
"Django developers  (Contributions to Django itself)" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-developers+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-developers/92d51e07-4705-4f9c-a79d-87ac41288bbc%40googlegroups.com.