... on passwords and will fail authentication with any submitted password of greater length. Corrected usage of sensitive_post_parameters() in django.contrib.auth 's admin ¶ The decoration of the add_view and user_change_password user admin views with sensitiv ... e_post_parameters() did not include method_decorator() (required since the views are methods) resulting in the decorator not being properly ... applied. This usage has been fixed and sensitive_post_parameters() will now throw an exception if it's improperly used. 目次 Django 1.4.8 リリースノート Denial-of-service via password has ... ... n passwords, and will fail authentication with any submitted password of greater length. Corrected usage of sensitive_post_parameters() in django.contrib.auth 's admin ¶ The decoration of the add_view and user_change_password user admin views with sensitiv ... e_post_parameters() did not include method_decorator() (required since the views are methods) resulting in the decorator not being properly ... applied. This usage has been fixed and sensitive_post_parameters() will now throw an exception if it's improperly used. バグ修正 ¶ Fixed a bug that prevented a QuerySet that uses prefetch ... ... on passwords and will fail authentication with any submitted password of greater length. Corrected usage of sensitive_post_parameters() in django.contrib.auth 's admin ¶ The decoration of the add_view and user_change_password user admin views with sensitiv ... e_post_parameters() did not include method_decorator() (required since the views are methods) resulting in the decorator not being properly ... applied. This usage has been fixed and sensitive_post_parameters() will now throw an exception if it's improperly used. 目次 Django 1.4.8 リリースノート Denial-of-service via password has ... ... ートからフィルタリングされる情報を制御するのに役立つ関数デコレータを提供しています。 sensitive_variables() と sensitive_post_parameters() です。 sensitive_variables ( * variables ) [ソース] ¶ コード内の関数(ビューまたは通常のコールバック)が機密情報を含む可 ... sitive_variables ( "user" , "pw" , "cc" ) @some_decorator @another_decorator def process_info ( user ): ... sensitive_post_parameters ( * parameters ) [ソース] ¶ If one of your views receives an HttpRequest object with POST parameters susceptible to contai ... n sensitive information, you may prevent the values of those parameters from being included in the error reports using the sensitive_post_parameters decorator: from django.views.decorators.debug ... ... n passwords, and will fail authentication with any submitted password of greater length. Corrected usage of sensitive_post_parameters() in django.contrib.auth 's admin ¶ The decoration of the add_view and user_change_password user admin views with sensitiv ... e_post_parameters() did not include method_decorator() (required since the views are methods) resulting in the decorator not being properly ... applied. This usage has been fixed and sensitive_post_parameters() will now throw an exception if it's improperly used. バグ修正 ¶ Fixed a bug that prevented a QuerySet that uses prefetch ... ... ートからフィルタリングされる情報を制御するのに役立つ関数デコレータを提供しています。 sensitive_variables() と sensitive_post_parameters() です。 sensitive_variables ( * variables ) [ソース] ¶ コード内の関数(ビューまたは通常のコールバック)が機密情報を含む可 ... sitive_variables ( "user" , "pw" , "cc" ) @some_decorator @another_decorator def process_info ( user ): ... sensitive_post_parameters ( * parameters ) [ソース] ¶ If one of your views receives an HttpRequest object with POST parameters susceptible to contai ... n sensitive information, you may prevent the values of those parameters from being included in the error reports using the sensitive_post_parameters decorator: from django.views.decorators.debug ... ... validation is added to the memcached cache backends. CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget ¶ Query parameters for the admin ForeignKeyRawIdWidget were not properly URL encoded, posing an XSS attack vector. ForeignKeyRawIdWidget now ... ensures query parameters are correctly URL encoded. バグ修正 ¶ Fixed a regression in Django 2.2.12 that affected translation loading for apps provi ... 関連キーワード memcached admin ForeignKeyRawIdWidget language security regression leakage malformed keys validation cache parameters encoded jQuery リリースノート June fixes issues Potential cases backend perform passing collision potential クイック検索 L ... ... of argument, the corresponding models were not locked ( #31246 ). Fixed a regression in Django 3.0 that caused misplacing parameters in logged SQL queries on Oracle ( #31271 ). Fixed a regression in Django 3.0.3 that caused misplacing parameters of SQL qu ... using regression Oracle caused バグ 修正 injection tolerance functions aggregates were loss possibility fields misplacing parameters queries リリースノート March セキュリティ 問題 Potential parameter subject クイック検索 Last update: 2026年10月09日 « prev ... ... validation is added to the memcached cache backends. CVE-2020-13596: Possible XSS via admin ForeignKeyRawIdWidget ¶ Query parameters for the admin ForeignKeyRawIdWidget were not properly URL encoded, posing an XSS attack vector. ForeignKeyRawIdWidget now ... ensures query parameters are correctly URL encoded. バグ修正 ¶ Fixed a regression in Django 2.2.12 that affected translation loading for apps provi ... go memcached key admin ForeignKeyRawIdWidget language security regression data leakage via malformed keys validation cache parameters encoded jQuery リリースノート June 関連するページ Django 3.0.7 リリースノート Django 1.11.26 リリースノート Django 2.1.14 ... ... of argument, the corresponding models were not locked ( #31246 ). Fixed a regression in Django 3.0 that caused misplacing parameters in logged SQL queries on Oracle ( #31271 ). Fixed a regression in Django 3.0.3 that caused misplacing parameters of SQL qu ... ression Oracle caused バグ 修正 injection tolerance functions aggregates were data loss possibility file fields misplacing parameters 関連するページ Django 2.2.11 リリースノート Django 1.11.29 リリースノート Django 2.2.16 リリースノート Django 3.0.10 リリー ... 2026年10月08日