... olicy, blocking content that violates the defined directives. Content-Security-Policy-Report-Only : Reports CSP violations without blocking content, allowing for non-intrusive testing. Each policy is composed of one or more directives and their values, ... enforce a policy that has already been tested and verified. Use SECURE_CSP_REPORT_ONLY on its own to evaluate a new policy without disrupting site behavior. This mode does not block violations, it only logs them. It's useful for testing and monitoring, ... presents 'strict-dynamic' . Allows execution of scripts loaded by a trusted script (e.g., one with a valid nonce or hash), without needing 'unsafe-inline' . UNSAFE_EVAL ¶ Represents 'unsafe-eval' . Allows use of eval() and similar JavaScript functions. ... ... alted_hmac() and django.core.signing.base64_hmac() will change from "sha1" to "sha256" . Calling QuerySet.select_related() without arguments will raise TypeError . QuerySet.select_related() will raise TypeError if passed True rather than AttributeError ... ll raise ValueError if its get_list_select_related() method returns True . Support for overriding ModelAdmin.get_actions() without the new action_location parameter will be removed. Support for unpacking or indexing the dictionary values of the ModelAdm ... ions() return value will be removed. Use Action attributes instead. Support for overriding ModelAdmin.get_action_choices() without the new action_location parameter will be removed. The django.db.transaction.savepoint() alias to django.db.transaction.sa ... ... alted_hmac() and django.core.signing.base64_hmac() will change from "sha1" to "sha256" . Calling QuerySet.select_related() without arguments will raise TypeError . QuerySet.select_related() will raise TypeError if passed True rather than AttributeError ... ll raise ValueError if its get_list_select_related() method returns True . Support for overriding ModelAdmin.get_actions() without the new action_location parameter will be removed. Support for unpacking or indexing the dictionary values of the ModelAdm ... ions() return value will be removed. Use Action attributes instead. Support for overriding ModelAdmin.get_action_choices() without the new action_location parameter will be removed. The django.db.transaction.savepoint() alias to django.db.transaction.sa ... ... Key or OneToOneField fields to perform unnecessary schema changes ( #37260 ). Fixed a bug in Django 6.1 where DecimalField without max_digits and decimal_places caused a crash when retrieving values on SQLite ( #37275 ). Fixed a regression in Django 6.1 ... that caused a crash when iterating a QuerySet of a model overriding Model.from_db() without the new fetch_mode keyword argument. Such overrides now work again, but are deprecated and should be updated to accept fet ... sh values fields used caused QuerySet using lookup lookups paths list display incorrect delete created querysets were safe without fetch mode exact annotations クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... olicy, blocking content that violates the defined directives. Content-Security-Policy-Report-Only : Reports CSP violations without blocking content, allowing for non-intrusive testing. Each policy is composed of one or more directives and their values, ... enforce a policy that has already been tested and verified. Use SECURE_CSP_REPORT_ONLY on its own to evaluate a new policy without disrupting site behavior. This mode does not block violations, it only logs them. It's useful for testing and monitoring, ... presents 'strict-dynamic' . Allows execution of scripts loaded by a trusted script (e.g., one with a valid nonce or hash), without needing 'unsafe-inline' . UNSAFE_EVAL ¶ Represents 'unsafe-eval' . Allows use of eval() and similar JavaScript functions. ... ... le "Current URL" link generated by AdminURLFieldWidget displayed the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provided as a URL query paramet ... ード AdminURLFieldWidget clickable link provided using validator リリースノート June fixes security issue Current displayed without validating safe Thus unvalidated stored database query parameter payload JavaScript validates クイック検索 Last update: 20 ... ... hen using a query expression without asc() or desc() in the page's ordering ( #29428 ). Fixed admin check crash when using a query expression in ModelAdmin.ord ... 2.0.6 リリースノート 関連キーワード Fixed crash バグ 修正 admin using query expression ordering リリースノート changelist without desc check ModelAdmin regex iregex lookups MySQL migrations namespace packages クイック検索 Last update: 2026年10月09日 « ... ... . Django 1.4 の新機能 ¶ Support for time zones ¶ In previous versions, Django used "naive" date/times (that is, date/times without an associated time zone), leaving it up to each developer to interpret what a given date/time "really means". This can cau ... nit__.py settings.py urls.py If the same code is imported inconsistently (some places with the project prefix, some places without it), the imports will need to be cleaned up when switching to the new manage.py . Custom project and app templates ¶ The s ... maintain compatibility with older browsers, this change means that you can use any HTML5 features you need in admin pages without having to lose HTML validity or override the provided templates to change the doctype. List filters in admin interface ¶ P ... ... d far more quickly than those without a solution. Typo fixes and trivial documentation changes ¶ If you are fixing a really trivial issue, for example changing ... a word in the documentation, the preferred way to provide the patch is using GitHub pull requests without a Trac ticket. See Working with Git and GitHub for more details on how to use pull requests. "Claiming" tickets ¶ In an op ... k on, or contact the developer working on the ticket to offer your help. If a ticket has been assigned for weeks or months without any activity, it's probably safe to reassign it to yourself. If a ticket hasn't been approved yet, join the conversation. ... ... . Django 1.4 の新機能 ¶ Support for time zones ¶ In previous versions, Django used "naive" date/times (that is, date/times without an associated time zone), leaving it up to each developer to interpret what a given date/time "really means". This can cau ... nit__.py settings.py urls.py If the same code is imported inconsistently (some places with the project prefix, some places without it), the imports will need to be cleaned up when switching to the new manage.py . Custom project and app templates ¶ The s ... maintain compatibility with older browsers, this change means that you can use any HTML5 features you need in admin pages without having to lose HTML validity or override the provided templates to change the doctype. List filters in admin interface ¶ P ... 2026年10月08日