Skip to content

Commit

Permalink
Merge changelog-django-autocomplete-light-version-2.3.0 into master
Browse files Browse the repository at this point in the history
  • Loading branch information
pyup-vuln-bot authored Oct 18, 2016
2 parents 4dce459 + ef88d91 commit 1fbb201
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 0 deletions.
3 changes: 3 additions & 0 deletions data/insecure.json
Original file line number Diff line number Diff line change
Expand Up @@ -108,6 +108,9 @@
"django-anonymizer-compat": [
"<0.4"
],
"django-autocomplete-light": [
"<2.3.0"
],
"django-embed-video": [
"<0.3"
],
Expand Down
6 changes: 6 additions & 0 deletions data/insecure_full.json
Original file line number Diff line number Diff line change
Expand Up @@ -1472,6 +1472,12 @@
"v": "<0.4"
}
],
"django-autocomplete-light": [
{
"changelog": "\n - 555 Django 1.4, 1.5 and 1.6 deprecation\n - 497 Enable registration by model-name by luzfcb\n - 536 551 Support proxy models by onrik\n - 553 improved jQuery integration by blueyed\n - 516 Corrected french transation by apinsard\n - 541 Use error_messages on FieldBase to allow overrides by dsanders11\n - 505 Ordering alias clash fix by sandroden\n - 515 Polish translation update by mpasternak\n - 543 ModelChoiceField requires the queryset argument\n - 494 ModelChoiceField Watch changes to 'queryset' by jonashaag\n - 514 Fixed deprecation warning on Django 1.8 by spookylukey\n - 498 548 improved i18n support\n - 547 prevents loading genericm2m if not in INSTALLED_APPS\n - JAL18 Fix: Get value.length while value is null by hongquan\n - JAL19 Clarify license by stevellis, all MIT\n - JAL17 Disable the widget input when it is not in use dsanders11\n - JAL15 Support openning results in new tab thebao\n - JAL14 Don't autohilight first choice by default pandabuilder\n - JAL13 Add option for box aligning with right edge of input dsanders11\n\nIMPORTANT\n\n536 At this point, proxy model support is untested, this is because I intend\nto refactor the test suite and documentation during the 2.3.x serie.\n\n494 Updating the queryset from outside the autocomplete class may lead to a\nsecurity problem, ie. if you don't replicate filters you apply manually on the\nautocomplete object choices into choices_for_request() then a malicious user\ncould see choices which they shouldn't by querying the autocomplete directly.\n",
"v": "<2.3.0"
}
],
"django-embed-video": [
{
"changelog": "---------------------------\n\n- Security fix: faked urls are treated as invalid. See `this page\n <https://github.com/yetty/django-embed-video/commit/d0d357b767e324a7cc21b5035357fdfbc7c8ce8e>`_\n for more details.\n\n- Fixes:\n\n - allow of empty video field.\n\n - requirements in setup.py\n\n- Added simplier way to embed video in one-line template tag::\n\n {{ 'http://www.youtube.com/watch?v=guXyvo2FfLs'|embed:'large' }}\n\n- ``backend`` variable in ``video`` template tag.\n\n Usage::\n\n {% video item.video as my_video %}\n Backend: {{ my_video.backend }}\n {% endvideo %}\n\n\n",
Expand Down

0 comments on commit 1fbb201

Please sign in to comment.