Wykres commitów

1059 Commity (cfcad4059bbc723b789602372e80f178468c737f)

Autor SHA1 Wiadomość Data
kevin howbrook cfcad4059b Update editor guide for embeds and documents in rich text, fix #4558 (#4632) 2018-07-09 10:07:03 +03:00
Matt Westcott e53076d949 Release note for #4669 2018-07-06 17:01:43 +01:00
Matt Westcott 4f07f228b2 Fill in release date for 2.1.1 2018-07-04 15:36:49 +01:00
Matt Westcott 1fd111cf6a Fill in release date for 1.13.2 2018-07-04 15:36:08 +01:00
Matt Westcott 815b58fbda Fill in release date for 1.12.4 2018-07-04 15:36:07 +01:00
Matt Westcott 783b128fa2 Release note for #4496 in 2.1.1 2018-07-03 17:34:49 +01:00
Matt Westcott 048a4e83f1 Release note for #4496 in 1.13.2 2018-07-03 17:34:49 +01:00
Matt Westcott 7eab2ae793 Release note for #4496 in 1.12.4 2018-07-03 17:34:48 +01:00
Matt Westcott ce4cd82bd9 Release note for #4496 in 2.2 2018-07-03 16:59:01 +01:00
Matt Westcott 3aff9f76e4 Revert "Strip Unicode NULL chars when normalizing paths"
This reverts commit 882f8f3cf8.

Conflicts:
	CHANGELOG.txt
	CONTRIBUTORS.rst
	docs/releases/2.2.rst
2018-07-03 16:45:27 +01:00
Matt Westcott 9ef8ee2d7f Release note for #4553 in 2.1.1 2018-07-03 16:10:59 +01:00
Matt Westcott b329ed4b65 Release note for #4553 in 1.12.4 2018-07-03 16:10:21 +01:00
Matt Westcott 55ddab6d14 Release note for #4553 in 1.13.x 2018-07-03 16:10:12 +01:00
Matt Westcott ed9a3a2d69 Pass all necessary template context to chooser view after upload validation error
Fixes #4548
2018-07-03 15:26:28 +01:00
Matt Westcott b4a2e13cb0 Copy 1.13.2 release notes to master 2018-06-29 15:37:58 +01:00
Matt Westcott 6c3431580a Release note for #4480 in 1.12.4 2018-06-29 15:37:30 +01:00
Matt Westcott 1a4046a676 Copy 1.12.4 release notes to master 2018-06-29 15:36:43 +01:00
acrewdson 882f8f3cf8 Strip Unicode NULL chars when normalizing paths
After migrating a Wagtail-based site from MySQL to Postgres, we
noticed that malicious requests to the site that included percent-
encoded Unicode NULLs (`%00`) raised a `ValueError` exception that we
hadn't seen when using MySQL: `A string literal cannot contain NUL
(0x00) characters.` This appears to relate to `psycopg2`'s decision to
raise an exception in these situations, as discussed here:

    https://github.com/psycopg/psycopg2/issues/420

While newer versions of Django appear to provide some field validation
that addresses these characters, it doesn't look like Wagtail's
redirect middleware is making use of those validators, and so it seemed
reasonable to clean these characters in the context of 'normalizing'
the paths before looking for corresponding redirects -- especially
since a quick investigation on the internet suggests that U+0000 in
URLs can be used as a means of attack, and also since RFC 3986 says:

   Note, however, that the "%00" percent-encoding (NUL) may require
   special handling and should be rejected if the application is not
   expecting to receive raw data within a component.
2018-06-27 11:19:36 -04:00
Matt Westcott 0129e4ce77 Release note for #4648 2018-06-21 12:05:26 +01:00
Matt Westcott ac84cea671 Add release note for #4612 in 2.1.1 2018-06-20 17:30:26 +01:00
Matt Westcott fee77469b3 Release note for #4583 2018-06-20 15:57:29 +01:00
Bertrand Bordage 806ba75497 Adds release notes for #4508. 2018-06-20 15:31:55 +02:00
Matt Westcott 8f9ca18c70 Release note for #4628 2018-06-18 17:58:06 +01:00
Andy Babic 5151c5cff2 Fix queryset ordering and add a test to confirm ordering matches expectation in all setups 2018-06-18 16:18:10 +10:00
ed@sharpertool.com 4539ced8cc Added documentation for new JS/CSS media files association with Draftail feature definitions (#4627)
Add more documentation for #4568
2018-06-17 00:13:38 +03:00
Benjamin Thurm 4a7e455004 Remove duplicate border radius of avatars 2018-06-15 10:47:01 +02:00
Matt Westcott c4325fd4e9 Release note for #4516 2018-06-14 16:33:36 +01:00
Michael Harrison e2b1c66a92 Add max_length option to redirect URL field 2018-06-14 15:02:06 +01:00
Matt Westcott 368e3b3adb Release note for #3802 2018-06-14 14:54:49 +01:00
Matt Westcott ac8905b125 Release note for #3355 2018-06-11 19:02:18 +01:00
LB b2e139bbd3 update changelog/releases for #4535 2018-06-10 12:52:10 +10:00
Karl Hobley 7bb60644dd Add file_size field to Document 2018-06-07 15:53:57 +01:00
Karl Hobley 50bff8ad5d Changelog/release note for #4500 2018-06-04 09:57:12 +01:00
Matt Westcott 607f2ec067 Allow specifying js/css imports against Draftail features 2018-05-31 17:13:33 +01:00
LB bcf6b6da77 Fixes breadcrumbs on ModelAdmin inspect and choose parent view (#4029) 2018-05-29 17:34:47 +01:00
Karl Hobley b38271fd27 Changelog/release note for #4550 2018-05-29 10:31:14 +01:00
Andrew Plummer 24712b4d8b Images: handle all not found errors in get_file_size 2018-05-25 11:56:00 -04:00
Matt Westcott 8285ba4e69 Fill in release date for 2.1
Conflicts:
	CHANGELOG.txt
2018-05-22 16:14:47 +01:00
Matt Westcott e8711a5bc2 Remove release notes for 2.0.2
There are no current plans to create another 2.0.x bugfix release; users on 2.0.x should upgrade to 2.1 instead.
2018-05-22 16:14:10 +01:00
Matt Westcott 6fed8400f1 Release note for #4531 in 2.0.2 2018-05-15 23:27:47 +01:00
Matt Westcott 7133428d92 Release note for #4531 in 2.1 2018-05-15 23:27:47 +01:00
Bertrand Bordage 32148b2b24 Changelog for #4533. 2018-05-11 19:05:55 +02:00
Karl Hobley 0e19076b1c Moved changelog/release note for #4503 to version 2.2 2018-05-08 14:50:53 +01:00
Karl Hobley 10f4c0b082 Changelog/release note for #4503 2018-05-08 13:04:31 +01:00
Matt Westcott 7f38c476be Release note for #4132 2018-05-04 16:19:27 +01:00
Matt Westcott fa27773d16 Release note for #4462 2018-04-23 16:26:32 +01:00
Karl Hobley 1849f0d54a Pass index name in URL to Bulk API
We currently index all items in Elasticsearch using the root bulk api
(at ``/_bulk``). This API is to allow multiple indices to be inserted
into at once. However, Wagtail inserts into one index at a time so this
is not needed. If we pass the index name as a parameter in the call to
``bulk()``, the index-specific bulk API will be used instead (at
``/<index name>/_bulk``.

The advantage of this change is it makes it possible to implement access
control by checking the URL an application is using. This is required in
order for the Bulk API to work on certain hosts (such as Divio).
2018-04-20 15:02:46 +01:00
David e43ea79747 Add a per-user timezone setting 2018-04-20 12:06:52 +01:00
Andy Chosak 3bd3275add more tests for ordering pages with custom titles 2018-04-19 22:40:16 -04:00
Arthur Holzner 878a5beeca Add `extra_footer_actions` template blocks 2018-04-19 12:37:52 +01:00