summaryrefslogtreecommitdiff
path: root/www/py-django
AgeCommit message (Collapse)AuthorFilesLines
2012-08-06Changes 1.4.1:adam2-6/+6
* Bug fixes.
2012-04-18PLIST fix for pgsqladam1-4/+16
2012-04-17Changes 1.4:adam3-219/+601
* Support for time zones * Support for in-browser testing frameworks * Updated default project layout and manage.py * Custom project and app templates * Improved WSGI support * Improved password hashing * HTML5 doctype * List filters in admin interface * Multiple sort in admin interface * New ModelAdmin methods More...
2012-04-08All supported python versions in pkgsrc support eggs, so removewiz1-2/+2
${PLIST.eggfile} from PLISTs and support code from lang/python.
2012-01-26distutils pkg, register egg-info.obache2-4/+5
Bump PKGREVISION.
2011-09-12Changes 1.3.1:adam3-8/+16
Fixed security issues: * Session manipulation * Denial of service attack via URLField * URLField redirection * Host header cache poisoning * Advisory: Host header and CSRF * Advisory: Cross-subdomain CSRF attacks * Advisory: DEBUG pages and sensitive POST data
2011-03-23Changes 1.3:adam3-145/+2190
Django 1.3’s focus has mostly been on resolving smaller, long-standing feature requests, but that hasn’t prevented a few fairly significant new features from landing, including: * A framework for writing class-based views. * Built-in support for using Python’s logging facilities. * Contrib support for easy handling of static files. * Django’s testing framework now supports (and ships with a copy of) the unittest2 library.
2011-02-10Changes 1.2.5:adam2-12/+11
Fixed: * Flaw in CSRF handling * Potential XSS in file field rendering * Directory-traversal vulnerability on Windows
2010-12-28Revert backup junk.joerg1-2/+2
2010-12-28Update to Django 1.2.4:joerg3-22/+15
- Fix a bug in the admin interface that could leak informations to users with staff privileges bypassing lookup arguments in the query string. - Fix a bug for running the test suite in a multi-db setup - Deprecated django.contrib.gis.tests.run_gis_tests()
2010-09-16Fix small typoadam1-2/+2
2010-09-13Update to django 1.2.3 to fix problems of the 1.2.2 security fix:joerg3-7/+20
- Properly deal with non-ASCII responses in the CSRF code - Restore compatibility with certain forms like the user-editing form in admin Reduce maintainance overhead in pkgsrc by providing PLIST print magic.
2010-09-09Changes 1.2.2:adam3-7/+44
As of the 1.2 release, the core Django framework includes a system, enabled by default, for detecting and preventing cross-site request forgery (CSRF) attacks against Django-powered applications. Previous Django releases provided a different, optionally-enabled system for the same purpose. The Django 1.2 CSRF protection system involves the generation of a random token, inserted as a hidden field in outgoing forms. The same value is also set in a cookie, and the cookie value and form value are compared on submission. The provided template tag for inserting the CSRF token into forms -- {% csrf_token %} -- explicitly trusts the cookie value, and displays it as-is. Thus, an attacker who is able to tamper with the value of the CSRF cookie can cause arbitrary content to be inserted, unescaped, into the outgoing HTML of the form, enabling cross-site scripting (XSS) attacks. This issue was first reported via a public ticket in Django's Trac instance; while being triaged it was then independently reported, with broader description, by Jeff Balogh of Mozilla.
2010-06-16Django 1.2.1:joerg3-136/+785
- Support multiple database in one Django instance - Model validation inspired by the Form validation - Vastly improved protection against Cross-Site Request Forgery - New user "message" framework, incl. support for anonymous users - Hooks for object-level permissions and permissions for anonymous users - Customization of e-mail sending via the new e-mail backend - Smarter if template tag
2010-02-11Add an option for the oracle backend.joerg3-4/+29
2010-02-10Use pgsql as option name for consistency with other packages.joerg3-38/+38
2010-02-10Retire psycopg1 option and rename psycopg2 to postgresql, making itjoerg3-48/+39
the default. Bump revision.
2009-10-19Update to Django 1.1:joerg4-77/+185
- Support for aggregates and query expression in the ORM - Suport for unamanged models and proxy models - Support for deffered fields - Mark individual fields as editable in the admin; support for custom actions - Better support for Last-Modified/ETag - Improved GIS support - {% for %} now has an {% empty %} to simplify handling empty lists - Various smaller improvements
2009-10-13Django 1.0.4:joerg2-6/+6
Fix a regular expression used by the form validation code to not trigger pathologoical performance cases for certain inputs.
2009-07-29Update to Django 1.0.3:joerg5-35/+21
- various bugfix - correctly validate file names for the admin media when using the development server
2009-07-14No need for a C compiler.joerg1-1/+3
2009-06-14Convert @exec/@unexec to @pkgdir or drop it.joerg1-274/+1
2009-05-02Add PREV_PKGPATH and/or SUPERSEDES for various packages thatreed1-1/+3
were moved or renamed. This was for some from 2008 and 2009 and one from 2001. Also I noticed that a CHANGES entry was wrong as said "Renamed" when should have said "Moved" (lua-OSBF) because PKGBASE stayed the same.
2009-04-14Fix sqlite option for Python 2.5 and higher, we always want to use thejoerg3-4/+30
newer external py-sqlite package for that. Bump revision.
2009-01-30Also remove some more directories on deinstall.joerg1-1/+5
2009-01-29Fix PLIST. No idea how that slipped through testing.joerg2-4/+14
2008-12-17Update to Django 1.0.2:joerg2-7/+7
- various bugfixes - improved documentation and i18n
2008-09-21Remove PYBINMODULE, it doesn't apply.joerg1-2/+1
2008-09-04Update Django to newly released version 1.0, fixing a cross-site requesttonnerre4-185/+1356
forgery vulnerability described in http://www.djangoproject.com/weblog/2008/sep/02/security/ .
2008-05-20Fix a CSS issue in the login page of the admin module. Bump revision.joerg3-2/+24
2008-04-25Update PYTHON_VERSIONS_COMPATIBLEjoerg1-2/+2
- assume that Python 2.4 and 2.5 are compatible and allow checking for fallout. - remove PYTHON_VERSIONS_COMPATIBLE that are obsoleted by the 2.3+ default. Modify the others to deal with the removals.
2008-04-12Convert to use PLIST_VARS instead of manually passing "@comment "jlam2-78/+72
through PLIST_SUBST to the plist module.
2007-11-01Update to Django 0.96.1: Fix a DOS in the i18n layer.joerg2-8/+7
2007-08-11Add the variations of the plist for the various options back.joerg2-34/+67
Bump revision.
2007-08-09Update to Django 0.96:joerg6-1161/+1217
The main goal of the 0.96 release is to cleanup and stabilise the features from 0.95. Incompatible changes: - constraint names changed in some cases, this can effect manage.py reset on old databases - some names in manage.py changed - backslash escaping is done more consistently - ENABLE_PSYCO is gone Important changes: - merge of newforms - URLconf takes normal callables - new test framework - passwords for users can be entered as normal text in the admin interface, no need to hash manually In addition: dropped py-setuptools dependency.
2007-02-22Whitespace cleanup, courtesy of pkglint.wiz1-3/+3
Patch provided by Sergey Svishchev in private mail.
2007-02-20Don't use the same conditional twice, works better if both versionsjoerg1-2/+2
are actually checked...
2007-02-19Fix installation when only psycopg2 support is requested, the postgresjoerg5-1116/+1142
code is shared with psycopg1. Include a small patch to make keyword mistakes in query args much more obvious (from django svn). Other users might be as stupid as the maintainer. Bump revision.
2007-01-25Update Django to 0.95.1. Changes:joerg3-1117/+1116
* A patch for a small security vulnerability in the script Django's internationalization system uses to compile translation files. * A fix for a bug in Django's authentication middleware which could cause apparent "caching" of a logged-in user. * A patch which disables debugging mode in the flup FastCGI package Django uses to launch its FastCGI server, which prevents tracebacks from bubbling up during production use.
2006-11-14Switch django and flup to use the new location of py-setuptools.joerg1-2/+6
Skip easy-install.pyth as it gets modified. Mark explicitly as not supporting DESTDIR, as setuptools doesn't like it right now.
2006-11-03Forgotten files: register/unregister egg.joerg2-0/+14
2006-11-03Require newer py24-setuptools and register/unregister egg.joerg1-2/+6
2006-09-17Point directly to media server as MASTER_SITE to catch up with thejoerg1-2/+2
layout changes.
2006-09-11Import Django 0.95 from pkgsrc-wip:joerg5-0/+1192
Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Django was designed to make common Web-development tasks fast and easy.
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-20 07:01:48 +0000