... ting via HTTPS ¶ When deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme would incorrectly detect client requests made via HTTP as using HTTPS. This entails incorrect results for is_secure() , and build_absolute_u ... me connecting behind HttpRequest build absolute リリースノート July fixes security issue Incorrect detection deployed http incorrectly detect client made using entails incorrect クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... ting via HTTPS ¶ When deployed behind a reverse-proxy connecting to Django via HTTPS, django.http.HttpRequest.scheme would incorrectly detect client requests made via HTTP as using HTTPS. This entails incorrect results for is_secure() , and build_absolute_u ... me connecting behind HttpRequest build absolute リリースノート July fixes security issue Incorrect detection deployed http incorrectly detect client made using entails incorrect クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... ere not correctly deconstructed ( #31941 ). Fixed a regression in Django 3.1 where the QuerySet.ordered attribute returned incorrectly True for GROUP BY queries (e.g. .annotate().values() ) on models with Meta.ordering . A model's Meta.ordering doesn't affe ... リリースノート October FileField instances callable storage were correctly deconstructed QuerySet ordered attribute returned incorrectly クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... n tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.4.13 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated 前のトピックへ ... ... en tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.5.8 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated 前のトピックへ ... ... n tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.4.13 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated 前のトピックへ ... ... en tightened to be able to handle and correctly validate these malformed URLs. 目次 Django 1.5.8 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated 前のトピックへ ... ... rtain cases which could cause minor performance regressions ( #22508 ). 目次 Django 1.6.5 リリースノート Issue: Caches may incorrectly be allowed to store and serve private data Issue: Malformed redirect URLs from user input not correctly validated バグ修正 ... ... rtain cases which could cause minor performance regressions ( #22508 ). 目次 Django 1.6.5 リリースノート Issue: Caches may incorrectly be allowed to store and serve private data Issue: Malformed redirect URLs from user input not correctly validated バグ修正 ... ... 4: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached responses marked with private Cache-Control directives when using mixed or uppercase values (e.g. Private ). The ca ... policy . CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header ¶ UpdateCacheMiddleware incorrectly cached responses whose Vary header values contained leading or trailing whitespace. Because has_vary_header() failed to st ... 2026年10月08日