... user-supplied redirect URLs ¶ Django relies on user input in some cases (e.g. django.contrib.auth.views.login() , django.contrib.comments , and i18n ) to redirect the user to an "on success" URL ... CSRF token now rotates when a user logs in. Some Python 3 compatibility fixes including #20212 and #20025. Fixed some rare cases where get() exceptions recursed infinitely (#20278). makemessages no longer crashes with UnicodeDecodeError (#20354). Fixe ... ート 次のトピックへ Django 1.5.1 リリースノート 関連キーワード Fixed contrib user redirect safe allowed security attack URLs cases http link admin prefetch related databases aliases リリースノート August bugfix release Mitigated supplied relies input ク ... ... user-supplied redirect URLs ¶ Django relies on user input in some cases (e.g. django.contrib.auth.views.login() , django.contrib.comments , and i18n ) to redirect the user to an "on success" URL ... CSRF token now rotates when a user logs in. Some Python 3 compatibility fixes including #20212 and #20025. Fixed some rare cases where get() exceptions recursed infinitely (#20278). makemessages no longer crashes with UnicodeDecodeError (#20354). Fixe ... ngo 1.5.1 リリースノート 関連キーワード Fixed django Django contrib user redirect safe allowed Python security attack URLs cases http url put link bug admin prefetch 関連するページ Django 1.4.6 リリースノート Django 1.10.7 リリースノート Django 1.8.18 ... ... rect URLs ¶ Django relies on user input in some cases (e.g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security checks for th ... direct control characters security issue attack relies browsers ignore リリースノート March fixes Mitigated supplied input cases contrib auth views login success checks クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... ge via malformed memcached keys ¶ In cases where a memcached backend does not perform key validation, passing malformed cache keys could result in a key collision, a ... ty regression leakage malformed keys validation cache parameters encoded jQuery リリースノート June fixes issues Potential cases backend perform passing collision potential クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... via user-supplied numeric redirect URLs ¶ Django relies on user input in some cases (e.g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security check for the ... ew attack numeric URLs relies views redirects http provide serve リリースノート April fixes security issues supplied input cases contrib auth login クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... XSS attack via user-supplied numeric redirect URLs ¶ Django relies on user input in some cases (e.g. django.contrib.auth.views.login() and i18n ) to redirect the user to an "on success" URL. The security check for the ... ew attack numeric URLs relies views redirects http provide serve リリースノート April fixes security issues supplied input cases contrib auth login クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... fine when screenshots should be taken during a selenium test, the test class must use the @django.test.selenium.screenshot_cases decorator with a list of supported screenshot types ( "desktop_size" , "mobile_size" , "small_screen_size" , "rtl" , "dark ... the desired point to generate the screenshots. For example: from django.test.selenium import SeleniumTestCase , screenshot_cases from django.urls import reverse class SeleniumTests ( SeleniumTestCase ): @screenshot_cases ([ "desktop_size" , "mobile_si ... ine being "covered" only means it was executed during tests. It doesn't guarantee the line is well-tested or that all edge cases are handled. During review, assess test quality beyond just coverage numbers. Missing coverage should be considered a warn ... ... one query for updating an existing row while the old algorithm needed two. See Model.save() for more details. In some rare cases the database doesn't report that a matching row was found when doing an UPDATE . An example is the PostgreSQL ON UPDATE tr ... igger which returns NULL . In such cases it is possible to set django.db.models.Options.select_on_save flag to force saving to use the old algorithm. マイナーな機能 ... lp_text that was provided). Since this happened at the model layer, there was no way to prevent the text from appearing in cases where it wasn't applicable such as form fields that implement user interactions that don't involve a keyboard and/or a mou ... ... fine when screenshots should be taken during a selenium test, the test class must use the @django.test.selenium.screenshot_cases decorator with a list of supported screenshot types ( "desktop_size" , "mobile_size" , "small_screen_size" , "rtl" , "dark ... the desired point to generate the screenshots. For example: from django.test.selenium import SeleniumTestCase , screenshot_cases from django.urls import reverse class SeleniumTests ( SeleniumTestCase ): @screenshot_cases ([ "desktop_size" , "mobile_si ... ine being "covered" only means it was executed during tests. It doesn't guarantee the line is well-tested or that all edge cases are handled. During review, assess test quality beyond just coverage numbers. Missing coverage should be considered a warn ... ... d by some browsers. This allows a user to be redirected to an unsafe URL unexpectedly. Django relies on user input in some cases (e.g. django.contrib.auth.views.login() , django.contrib.comments , and i18n ) to redirect the user to an "on success" URL ... y a negated Q object that contains a F object. ( #22429 ). Avoided overwriting data fetched by select_related() in certain cases which could cause minor performance regressions ( #22508 ). 目次 Django 1.6.5 リリースノート Issue: Caches may incorrectly ... 2026年10月08日