Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: django/django
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 3.1.12
Choose a base ref
...
head repository: django/django
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 3.1.13
Choose a head ref
  • 6 commits
  • 7 files changed
  • 3 contributors

Commits on Jun 2, 2021

  1. Configuration menu
    Copy the full SHA
    064c0c5 View commit details
    Browse the repository at this point in the history
  2. Configuration menu
    Copy the full SHA
    6022181 View commit details
    Browse the repository at this point in the history
  3. [3.1.x] Fixed docs header underlines in security archive.

    Backport of d9cee3f from main
    felixxm committed Jun 2, 2021
    Configuration menu
    Copy the full SHA
    1471ec4 View commit details
    Browse the repository at this point in the history

Commits on Jul 1, 2021

  1. [3.1.x] Added stub release notes for 3.1.13.

    Backport of 8e97698 from main.
    felixxm committed Jul 1, 2021
    Configuration menu
    Copy the full SHA
    8dc1cc0 View commit details
    Browse the repository at this point in the history
  2. [3.1.x] Fixed CVE-2021-35042 -- Prevented SQL injection in QuerySet.o…

    …rder_by().
    
    Regression introduced in 5139487
    by marking the raw SQL column reference feature for deprecation in
    Django 4.0 while lifting the column format validation.
    
    In retrospective the validation should have been kept around and the
    user should have been pointed at using RawSQL expressions during the
    deprecation period.
    
    The main branch is not affected because the raw SQL column reference
    support has been removed in 06eec31
    per the 4.0 deprecation life cycle.
    
    Thanks Joel Saunders for the report.
    charettes authored and felixxm committed Jul 1, 2021
    Configuration menu
    Copy the full SHA
    0bd57a8 View commit details
    Browse the repository at this point in the history
  3. Configuration menu
    Copy the full SHA
    43873b9 View commit details
    Browse the repository at this point in the history
Loading