... attacker to set arbitrary cookies leading to a bypass of CSRF protection. The parser for request.COOKIES is simplified to better match the behavior of browsers and to mitigate this attack. request.COOKIES may now contain cookies that are invalid accor ... スノート September fixes security issue site interaction between parsing allow attacker arbitrary leading parser simplified better match behavior クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... attacker to set arbitrary cookies leading to a bypass of CSRF protection. The parser for request.COOKIES is simplified to better match the behavior of browsers and to mitigate this attack. request.COOKIES may now contain cookies that are invalid accor ... ノート September セキュリティ 問題 修正 site interaction between parsing allow attacker arbitrary leading parser simplified better match behavior クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... するべきです。 参考 Portland Pattern Repository に DRY に関する議論があります 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) ¶ これは、 PEP 20 にリストアップされた Python の核となる原則の1つです。つまり、Django は「魔法」を使いすぎて ... レベル (Django の使い方) までのあらゆる点で保たれなければなりません。 モデル ¶ 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) ¶ フィールド名のみに基づいてフィールドの振る舞いが決まるべきではありません。そのようにしてしまうと、システム ... 目次 設計思想 概要 疎結合 短いコード 素早い開発 同じことを繰り返さない (DRY) 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) 一貫性 モデル 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) 関連するドメインのロジック ... ... するべきです。 参考 Portland Pattern Repository に DRY に関する議論があります 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) ¶ これは、 PEP 20 にリストアップされた Python の核となる原則の1つです。つまり、Django は「魔法」を使いすぎて ... レベル (Django の使い方) までのあらゆる点で保たれなければなりません。 モデル ¶ 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) ¶ フィールド名のみに基づいてフィールドの振る舞いが決まるべきではありません。そのようにしてしまうと、システム ... 目次 設計思想 概要 疎結合 短いコード 素早い開発 同じことを繰り返さない (DRY) 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) 一貫性 モデル 暗黙よりもはっきり示した方がいい (Explicit is better than implicit) 関連するドメインのロジック ... ... めのチケット。 Cleanup/optimization (クリーンアップ/最適化) For when nothing is broken but something could be made cleaner, better, faster, stronger. Component (コンポーネント) ¶ Tickets should be classified into components indicating which area of the ... Django codebase they belong to. This makes tickets better organized and easier to find. Severity (重要度) ¶ The severity attribute is used to identify blockers, that is, issues tha ... subjective, but that's fine. You should ask, does the approach make sense to you and is there another way to do it that's better? Also ask yourself, is the scope of the change appropriate? Are things named appropriately? Renaming things is slow and ch ... ... めのチケット。 Cleanup/optimization (クリーンアップ/最適化) For when nothing is broken but something could be made cleaner, better, faster, stronger. Component (コンポーネント) ¶ Tickets should be classified into components indicating which area of the ... Django codebase they belong to. This makes tickets better organized and easier to find. Severity (重要度) ¶ The severity attribute is used to identify blockers, that is, issues tha ... subjective, but that's fine. You should ask, does the approach make sense to you and is there another way to do it that's better? Also ask yourself, is the scope of the change appropriate? Are things named appropriately? Renaming things is slow and ch ... ... attacker to set arbitrary cookies leading to a bypass of CSRF protection. The parser for request.COOKIES is simplified to better match the behavior of browsers and to mitigate this attack. request.COOKIES may now contain cookies that are invalid accor ... ... attacker to set arbitrary cookies leading to a bypass of CSRF protection. The parser for request.COOKIES is simplified to better match the behavior of browsers and to mitigate this attack. request.COOKIES may now contain cookies that are invalid accor ... ... ors.cache.never_cache() now sends more persuasive headers (added no-cache, no-store, must-revalidate to Cache-Control ) to better prevent caching ( #13008 ). This fixes a problem where a page refresh in Firefox cleared the selected entries in the admin ... ... on't respond to a request for a progress report, your claim on the ticket may be revoked. As always, more communication is better than less communication! Which tickets should be claimed? ¶ Going through the steps of claiming tickets is overkill in som ... it can take months or years for Django to iterate on an API design. If you need user feedback on a public interface, it is better to create a third-party package first. You can iterate on the public API much faster, while also validating the need for t ... 2026年10月08日