... by passing lookup arguments in the querystring portion of the URL, and options on the ModelAdmin class allow developers to specify particular fields or relationships which will generate automatic links for filtering. One historically-undocumented and -u ... as users' password hashes. To remedy this, django.contrib.admin will now validate that querystring lookup arguments either specify only fields on the model being viewed, or cross relations which have been explicitly allowed by the application developer ... ts querystring model リリースノート using features incompatible filters interface contrib filtering database relationships specify supported ability user sufficient knowledge structure access クイック検索 Last update: 2026年10月09日 « previous | up | ne ... ... in date template filter ¶ If an application allows users to specify an unvalidated format for dates and passes this format to the date filter, e.g. {{ last_updated|date:user_date_format }} , ... then a malicious user could obtain any secret in the application's settings by specifying a settings key instead of a date format. e.g. "SECRET_KEY" instead of "j/m/Y" . To remedy this, the underlying function ... er loss Fixed possibility template application allows user instead リリースノート November fixes security issue leak users specify unvalidated dates passes last malicious クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... by passing lookup arguments in the querystring portion of the URL, and options on the ModelAdmin class allow developers to specify particular fields or relationships which will generate automatic links for filtering. One historically-undocumented and -u ... as users' password hashes. To remedy this, django.contrib.admin will now validate that querystring lookup arguments either specify only fields on the model being viewed, or cross relations which have been explicitly allowed by the application developer ... ... by passing lookup arguments in the querystring portion of the URL, and options on the ModelAdmin class allow developers to specify particular fields or relationships which will generate automatic links for filtering. One historically-undocumented and -u ... as users' password hashes. To remedy this, django.contrib.admin will now validate that querystring lookup arguments either specify only fields on the model being viewed, or cross relations which have been explicitly allowed by the application developer ... ... by passing lookup arguments in the querystring portion of the URL, and options on the ModelAdmin class allow developers to specify particular fields or relationships which will generate automatic links for filtering. One historically-undocumented and -u ... as users' password hashes. To remedy this, django.contrib.admin will now validate that querystring lookup arguments either specify only fields on the model being viewed, or cross relations which have been explicitly allowed by the application developer ... ... the deletion confirmation page. The jQuery library embedded in the admin has been upgraded to version 1.11.2. You can now specify AdminSite.site_url in order to display a link to the front-end site. You can now specify ModelAdmin.show_full_result_count ... es when instantiating a ChoiceField . ジェネリックビュー (汎用ビュー) ¶ Generic views that use MultipleObjectMixin may now specify the ordering applied to the queryset by setting ordering or overriding get_ordering() . The new SingleObjectMixin.query_pk ... ts job. Commands from alternate package formats like eggs are now also discovered. The new dumpdata --output option allows specifying a file to which the serialized data is written. The new makemessages --exclude and compilemessages --exclude options al ... ... the deletion confirmation page. The jQuery library embedded in the admin has been upgraded to version 1.11.2. You can now specify AdminSite.site_url in order to display a link to the front-end site. You can now specify ModelAdmin.show_full_result_count ... es when instantiating a ChoiceField . ジェネリックビュー (汎用ビュー) ¶ Generic views that use MultipleObjectMixin may now specify the ordering applied to the queryset by setting ordering or overriding get_ordering() . The new SingleObjectMixin.query_pk ... ts job. Commands from alternate package formats like eggs are now also discovered. The new dumpdata --output option allows specifying a file to which the serialized data is written. The new makemessages --exclude and compilemessages --exclude options al ... ... らコンテキストデータを取得するために super() を呼び出し、自分のデータを追加して、修正された辞書を返すことになっています。 To specify the contents of <link> , you have two options. For each item in items() , Django first tries calling the item_link() metho ... feedgenerator.SyndicationFeed. This designates # which type of feed this should be: RSS 2.0, Atom 1.0, etc. If # you don't specify feed_type, your feed will be RSS 2.0. This # should be a class, not an instance of the class. feed_type = feedgenerator . ... ethods are used instead. title_template = None description_template = None # LANGUAGE -- Optional. This should be a string specifying a language # code. Defaults to django.utils.translation.get_language(). language = "de" # TITLE -- One of the following ... ... ood . objects . pizzas () . vegetarian () Using a custom manager when traversing reverse relations ¶ It is now possible to specify a custom manager when traversing a reverse relationship: class Blog ( models . Model ): pass class Entry ( models . Model ... object for advanced prefetch_related operations. ¶ The new Prefetch object allows customizing prefetch operations. You can specify the QuerySet used to traverse a given relation or customize the storage location of prefetch results. This enables things ... on to the existing admin.site.register syntax, you can use the new register() decorator to register a ModelAdmin . You may specify ModelAdmin.list_display_links = None to disable links on the change list page grid. You may now specify ModelAdmin.view_on ... ... らコンテキストデータを取得するために super() を呼び出し、自分のデータを追加して、修正された辞書を返すことになっています。 To specify the contents of <link> , you have two options. For each item in items() , Django first tries calling the item_link() metho ... feedgenerator.SyndicationFeed. This designates # which type of feed this should be: RSS 2.0, Atom 1.0, etc. If # you don't specify feed_type, your feed will be RSS 2.0. This # should be a class, not an instance of the class. feed_type = feedgenerator . ... ethods are used instead. title_template = None description_template = None # LANGUAGE -- Optional. This should be a string specifying a language # code. Defaults to django.utils.translation.get_language(). language = "de" # TITLE -- One of the following ... 2026年10月08日