Meteor0id
088d3ffc21
missing quotation, not that it matters
...
award of smallest contribution of the year goes to..
2018-09-13 13:00:57 +01:00
Ben Dickinson
4c72f767ea
Add HTTP_AUTHORIZATION to values copied to dummy preview requests
2018-09-12 16:37:55 +01:00
Dan Braghis
5ddba47cc3
Add Auto-Submitted: auto-generated header to admin utils send_mail
2018-09-06 15:58:24 +01:00
Michael Borisov
38b2defc7f
Check key value
...
It fixes issue when press 'б' in russian keyboard it's trigger ','
2018-09-05 15:07:45 +01:00
Matthew Schinckel
e05dc99486
Prevent the use of a global variable.
2018-08-28 16:39:12 +01:00
Oliver Wilkerson
091ea75de7
Added a simple scale filter to image_operations.
2018-08-09 16:11:39 +01:00
Matt Westcott
a551b9a677
Fetch new translations from Transifex
2018-08-06 13:11:23 +01:00
Ryan Verner
a657a75cd7
Fixes Django 2.1 breaking changes; QUERY_TERMS & auth_views.login()
2018-07-31 18:49:00 +01:00
Matt Westcott
82b87f3989
Fetch new translations from Transifex
2018-07-30 17:29:50 +01:00
Pomax
40981b0c65
replace my name with my name
...
I do not write code under my passport name, if I have to be in a changelog, please use "Pomax" =)
2018-07-10 11:20:28 +01:00
kevin howbrook
cfcad4059b
Update editor guide for embeds and documents in rich text, fix #4558 ( #4632 )
2018-07-09 10:07:03 +03:00
Matt Westcott
ce4cd82bd9
Release note for #4496 in 2.2
2018-07-03 16:59:01 +01:00
Matt Westcott
3aff9f76e4
Revert "Strip Unicode NULL chars when normalizing paths"
...
This reverts commit 882f8f3cf8
.
Conflicts:
CHANGELOG.txt
CONTRIBUTORS.rst
docs/releases/2.2.rst
2018-07-03 16:45:27 +01:00
Matt Westcott
6c3431580a
Release note for #4480 in 1.12.4
2018-06-29 15:37:30 +01:00
acrewdson
882f8f3cf8
Strip Unicode NULL chars when normalizing paths
...
After migrating a Wagtail-based site from MySQL to Postgres, we
noticed that malicious requests to the site that included percent-
encoded Unicode NULLs (`%00`) raised a `ValueError` exception that we
hadn't seen when using MySQL: `A string literal cannot contain NUL
(0x00) characters.` This appears to relate to `psycopg2`'s decision to
raise an exception in these situations, as discussed here:
https://github.com/psycopg/psycopg2/issues/420
While newer versions of Django appear to provide some field validation
that addresses these characters, it doesn't look like Wagtail's
redirect middleware is making use of those validators, and so it seemed
reasonable to clean these characters in the context of 'normalizing'
the paths before looking for corresponding redirects -- especially
since a quick investigation on the internet suggests that U+0000 in
URLs can be used as a means of attack, and also since RFC 3986 says:
Note, however, that the "%00" percent-encoding (NUL) may require
special handling and should be rejected if the application is not
expecting to receive raw data within a component.
2018-06-27 11:19:36 -04:00
Matt Westcott
0129e4ce77
Release note for #4648
2018-06-21 12:05:26 +01:00
Matt Westcott
8f9ca18c70
Release note for #4628
2018-06-18 17:58:06 +01:00
Matt Westcott
48b5740d03
Merge branch 'docs-divio-cloud' of https://github.com/evildmp/wagtail into evildmp-docs-divio-cloud
2018-06-18 15:45:38 +01:00
Matt Westcott
e1a0fc1fab
Add Strother Scott to contributors
2018-06-18 15:07:05 +01:00
ed@sharpertool.com
4539ced8cc
Added documentation for new JS/CSS media files association with Draftail feature definitions ( #4627 )
...
Add more documentation for #4568
2018-06-17 00:13:38 +03:00
Benjamin Thurm
4a7e455004
Remove duplicate border radius of avatars
2018-06-15 10:47:01 +02:00
Karl Hobley
b38271fd27
Changelog/release note for #4550
2018-05-29 10:31:14 +01:00
Andrew Plummer
24712b4d8b
Images: handle all not found errors in get_file_size
2018-05-25 11:56:00 -04:00
Victor Miti
c38b172793
updated Django Docs Links to point to *docs.djangoproject.com/en/stable/*
2018-05-18 14:43:42 +01:00
Matt Westcott
a63988ac75
Fetch new translations from Transifex
2018-05-16 13:04:44 +01:00
Matt Westcott
6fed8400f1
Release note for #4531 in 2.0.2
2018-05-15 23:27:47 +01:00
Matt Westcott
b4a9097f34
Update translator credits
2018-05-04 20:29:48 +01:00
Matt Westcott
fa27773d16
Release note for #4462
2018-04-23 16:26:32 +01:00
David
e43ea79747
Add a per-user timezone setting
2018-04-20 12:06:52 +01:00
h.zeinstra
a03c310858
changes message.error to message.validation_error
2018-04-19 16:16:43 +01:00
codie
e49e24fa2d
Improve Domain Selection for Multiple Sites ( #4390 )
...
* improve domain selection
* add test
* add test for both sites set in request
* add Codie to contributors
* revert line refactor
* refactor test
* use better sorting
2018-04-16 15:13:11 +02:00
Sergey Fedoseev
63e824f100
Fixed #4423 -- Fixed background color in docs css.
2018-04-12 10:55:24 +02:00
Karl Hobley
e809b6addd
Changelog/release note for #4458
2018-04-11 10:04:27 +01:00
Sander Tuit
4e7ccdcdc9
Add icon template tag with accessibility options (PoC) ( #4381 )
2018-04-08 23:41:24 +03:00
Coen van der Kamp
7841f54fe8
ImageChooser now sets a default title based on filename. Fix #2844 ( #4385 )
2018-04-02 17:11:49 +03:00
Rajeev J Sebastian
35049c352a
Add request parameter to edit handlers ( #4382 )
2018-04-02 16:51:14 +03:00
alejandrogarza
5a5e6d5d2b
Added change email functionality from the account settings. Fix #4325 ( #4375 )
2018-04-02 15:42:46 +03:00
Matt Westcott
626418d348
Ensure breadcrumb respects custom get_admin_display_title methods. Fixes #4353
2018-03-29 17:36:32 +02:00
Mike Kamermans
59506ae69f
Update `jquery-datetimepicker` dependency to make Wagtail more CSP-friendly (`unsafe-eval`). Fix #4329 ( #4337 )
...
* Update jquery-datetimepicker to 2.5.19
- Fixes an `eval()` CSP violation
- includes touch scroll fix from commit #87a7a7 (L909)
2018-03-22 23:51:37 +02:00
Thibaud Colas
eb9ad812f7
Update my contributing info
2018-03-22 23:43:31 +02:00
Tony Yates
cab90e5d1b
Adding external link with selected text now includes text in link chooser. Fix #4328 ( #4366 )
2018-03-21 00:35:41 +02:00
DanAtShenTech
72e1491f39
Fix typo
2018-03-16 19:54:59 +01:00
Karl Hobley
26d452c4bb
Release notes for #4384
2018-03-16 15:16:40 +00:00
Kevin Chung
d188576af8
Adds a new HelpPanel ( #4374 )
2018-03-15 16:46:34 +01:00
Caspowned
977dbae585
Rewrite password change feedback message. Fix #4200 ( #4364 )
2018-03-15 00:53:33 +01:00
Sebastian Brestin
e8ee632b29
Permission checking consistency #4305
2018-03-05 17:18:16 +00:00
Todd Dembrey
09f8a4f38a
Draftail was failing to initialise with defined options in settings
2018-03-05 16:04:02 +00:00
Matt Westcott
530b8b32ec
Fetch new translations from Transifex
2018-02-27 19:29:55 +00:00
Michael Harrison
4da0bd7bd2
Improve redirect links search in the admin
2018-02-27 16:08:11 +11:00
Matt Westcott
501aa5ab63
Fetch new translations from Transifex
2018-02-16 11:31:07 +00:00