Hopiu/django-downloadview
1
0
Fork 0
mirror of https://github.com/jazzband/django-downloadview.git synced 2026-03-16 14:30:23 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
408 commits 4 branches 18 tags 906 KiB
Commit graph

408 commits

This branch
This branch
All branches
Author SHA1 Message Date
Rémy HUBSCHER
969fb7931a
Merge pull request #228 from jazzband/pre-commit-ci-update-config 2025-11-17 21:38:55 +01:00
Rémy HUBSCHER
fe610b9c9f
Apply suggestion from @Natim 2025-11-17 21:38:36 +01:00
pre-commit-ci[bot]
187787d083
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/pre-commit/mirrors-eslint: v9.39.1 → v10.0.0-alpha.0](https://github.com/pre-commit/mirrors-eslint/compare/v9.39.1...v10.0.0-alpha.0)
- [github.com/astral-sh/ruff-pre-commit: v0.14.4 → v0.14.5](https://github.com/astral-sh/ruff-pre-commit/compare/v0.14.4...v0.14.5)
 2025-11-17 17:30:11 +00:00
Rémy HUBSCHER
614bc522d3
Merge pull request #227 from jazzband/pre-commit-ci-update-config 2025-11-12 11:29:07 +01:00
pre-commit-ci[bot]
34a83fd09b
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/pre-commit/mirrors-eslint: v9.38.0 → v9.39.1](https://github.com/pre-commit/mirrors-eslint/compare/v9.38.0...v9.39.1)
- [github.com/astral-sh/ruff-pre-commit: v0.14.2 → v0.14.4](https://github.com/astral-sh/ruff-pre-commit/compare/v0.14.2...v0.14.4)
- [github.com/tox-dev/pyproject-fmt: v2.11.0 → v2.11.1](https://github.com/tox-dev/pyproject-fmt/compare/v2.11.0...v2.11.1)
 2025-11-10 17:38:43 +00:00
Rémy Hubscher
415b76622e
Post release 2025-10-28 11:34:20 +01:00
Rémy HUBSCHER
982432a05b
Merge pull request #226 from jazzband/release/2.5.0 2025-10-28 11:31:52 +01:00
Rémy Hubscher
055ef690d2
Release 2.5.0 2025-10-28 11:23:58 +01:00
Rémy HUBSCHER
94b4a60917
Merge pull request #224 from jazzband/fix/upgrade-to-django-52 2025-10-28 11:19:59 +01:00
Rémy HUBSCHER
9194e6a11c
Merge pull request #225 from jazzband/pre-commit-ci-update-config 2025-10-28 11:19:37 +01:00
pre-commit-ci[bot]
140b631d5b
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/adamchainz/django-upgrade: 1.29.0 → 1.29.1](https://github.com/adamchainz/django-upgrade/compare/1.29.0...1.29.1)
- [github.com/astral-sh/ruff-pre-commit: v0.14.1 → v0.14.2](https://github.com/astral-sh/ruff-pre-commit/compare/v0.14.1...v0.14.2)
 2025-10-27 17:25:13 +00:00
Rémy Hubscher
e3ebf67457
Upgrade test matrix 2025-10-21 10:36:39 +02:00
Rémy Hubscher
5f2ae9a9b0
Add test matrix 2025-10-21 09:53:13 +02:00
Rémy Hubscher
f1a07c226e
Upgrade to Django 5.2 and Python 3.14 2025-10-21 09:52:06 +02:00
Rémy HUBSCHER
9b90a3326d
Merge pull request #223 from jazzband/dependabot/github_actions/codecov/codecov-action-5 2025-10-21 09:51:50 +02:00
Rémy HUBSCHER
45fb86b52c
Merge pull request #222 from jazzband/dependabot/github_actions/actions/setup-python-6 2025-10-21 09:51:40 +02:00
Rémy HUBSCHER
5dc018f17b
Merge pull request #221 from jazzband/dependabot/github_actions/actions/cache-4 2025-10-21 09:51:28 +02:00
Rémy HUBSCHER
d515804708
Merge pull request #220 from jazzband/dependabot/github_actions/actions/checkout-5 2025-10-21 09:51:13 +02:00
dependabot[bot]
4e580980fe
Bump codecov/codecov-action from 1 to 5 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 1 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v1...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-21 07:46:40 +00:00
dependabot[bot]
9b77252326
Bump actions/setup-python from 2 to 6 
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 2 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v2...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-21 07:46:37 +00:00
dependabot[bot]
f9cc2c5fab
Bump actions/cache from 2 to 4 
Bumps [actions/cache](https://github.com/actions/cache) from 2 to 4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2...v4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-21 07:46:33 +00:00
dependabot[bot]
ec0b34df5b
Bump actions/checkout from 2 to 5 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-21 07:46:30 +00:00
Rémy HUBSCHER
9e22eb8d8f
Merge pull request #219 from jazzband/pre-commit-ci-update-config 2025-10-21 09:45:49 +02:00
Rémy Hubscher
c239015d1a
Update github actions version. 2025-10-21 09:45:36 +02:00
pre-commit-ci[bot]
73f9c013cd [pre-commit.ci] auto fixes from pre-commit.com hooks 
for more information, see https://pre-commit.ci
 2025-10-20 19:50:02 +00:00
pre-commit-ci[bot]
840827da1d
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/pre-commit/pre-commit-hooks: v5.0.0 → v6.0.0](https://github.com/pre-commit/pre-commit-hooks/compare/v5.0.0...v6.0.0)
- [github.com/pycqa/doc8: v1.1.2 → v2.0.0](https://github.com/pycqa/doc8/compare/v1.1.2...v2.0.0)
- [github.com/adamchainz/django-upgrade: 1.22.2 → 1.29.0](https://github.com/adamchainz/django-upgrade/compare/1.22.2...1.29.0)
- [github.com/pre-commit/mirrors-eslint: v9.17.0 → v9.38.0](https://github.com/pre-commit/mirrors-eslint/compare/v9.17.0...v9.38.0)
- [github.com/astral-sh/ruff-pre-commit: v0.8.6 → v0.14.1](https://github.com/astral-sh/ruff-pre-commit/compare/v0.8.6...v0.14.1)
- [github.com/tox-dev/pyproject-fmt: v2.5.0 → v2.11.0](https://github.com/tox-dev/pyproject-fmt/compare/v2.5.0...v2.11.0)
- [github.com/abravalheri/validate-pyproject: v0.23 → v0.24.1](https://github.com/abravalheri/validate-pyproject/compare/v0.23...v0.24.1)
 2025-10-20 17:24:32 +00:00
Rémy HUBSCHER
31e64b6a76
Merge pull request #218 from jazzband/pre-commit-ci-update-config 
[pre-commit.ci] pre-commit autoupdate
 2025-01-07 08:50:48 +01:00
pre-commit-ci[bot]
71a1670703
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.8.4 → v0.8.6](https://github.com/astral-sh/ruff-pre-commit/compare/v0.8.4...v0.8.6)
 2025-01-06 17:54:28 +00:00
Rémy HUBSCHER
dff487aca9
Merge pull request #217 from jazzband/pre-commit-ci-update-config 
[pre-commit.ci] pre-commit autoupdate
 2024-12-24 14:42:55 +01:00
pre-commit-ci[bot]
7aa9b687aa
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.8.3 → v0.8.4](https://github.com/astral-sh/ruff-pre-commit/compare/v0.8.3...v0.8.4)
 2024-12-23 17:46:59 +00:00
Rémy HUBSCHER
b02e2f13f9
Merge pull request #216 from jazzband/pre-commit-ci-update-config 
[pre-commit.ci] pre-commit autoupdate
 2024-12-16 21:37:50 +01:00
pre-commit-ci[bot]
a7d182f0b4
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/pre-commit/mirrors-eslint: v9.16.0 → v9.17.0](https://github.com/pre-commit/mirrors-eslint/compare/v9.16.0...v9.17.0)
- [github.com/astral-sh/ruff-pre-commit: v0.8.2 → v0.8.3](https://github.com/astral-sh/ruff-pre-commit/compare/v0.8.2...v0.8.3)
 2024-12-16 17:45:43 +00:00
Rémy HUBSCHER
c8486417bb
Merge pull request #215 from jazzband/pre-commit-ci-update-config 
[pre-commit.ci] pre-commit autoupdate
 2024-12-13 09:38:59 +01:00
pre-commit-ci[bot]
ebcd3a0028
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/pre-commit/pre-commit-hooks: v4.6.0 → v5.0.0](https://github.com/pre-commit/pre-commit-hooks/compare/v4.6.0...v5.0.0)
- [github.com/pycqa/doc8: v1.1.1 → v1.1.2](https://github.com/pycqa/doc8/compare/v1.1.1...v1.1.2)
- [github.com/adamchainz/django-upgrade: 1.20.0 → 1.22.2](https://github.com/adamchainz/django-upgrade/compare/1.20.0...1.22.2)
- [github.com/pre-commit/mirrors-eslint: v9.8.0 → v9.16.0](https://github.com/pre-commit/mirrors-eslint/compare/v9.8.0...v9.16.0)
- [github.com/astral-sh/ruff-pre-commit: v0.5.6 → v0.8.2](https://github.com/astral-sh/ruff-pre-commit/compare/v0.5.6...v0.8.2)
- [github.com/tox-dev/pyproject-fmt: 2.2.1 → v2.5.0](https://github.com/tox-dev/pyproject-fmt/compare/2.2.1...v2.5.0)
- [github.com/abravalheri/validate-pyproject: v0.18 → v0.23](https://github.com/abravalheri/validate-pyproject/compare/v0.18...v0.23)
 2024-12-09 17:44:37 +00:00
Rémy HUBSCHER
6c0e0a8c82
Merge pull request #214 from jazzband/pre-commit-ci-update-config 
[pre-commit.ci] pre-commit autoupdate
 2024-08-06 09:26:57 +02:00
pre-commit-ci[bot]
d3a8f6b725
[pre-commit.ci] pre-commit autoupdate 
updates:
- [github.com/astral-sh/ruff-pre-commit: v0.5.5 → v0.5.6](https://github.com/astral-sh/ruff-pre-commit/compare/v0.5.5...v0.5.6)
- [github.com/tox-dev/pyproject-fmt: 2.1.4 → 2.2.1](https://github.com/tox-dev/pyproject-fmt/compare/2.1.4...2.2.1)
 2024-08-05 17:54:35 +00:00
Rémy HUBSCHER
13a502bc4a
Post release 2.4.0 2024-08-05 14:51:35 +02:00
Rémy HUBSCHER
9f42cde8cb
Merge pull request #213 from jazzband/prepare-2.4 
Prepare 2.4 release
 2024-08-05 14:49:32 +02:00
Rémy HUBSCHER
5c8bbda4b3
Update AUTHORS 2024-08-05 14:03:55 +02:00
Rémy HUBSCHER
eab4fa7abf
Deduplicate names 2024-08-05 11:00:37 +02:00
Rémy HUBSCHER
711b2e50b5
Run pre-commit on all files 2024-08-05 10:53:19 +02:00
Rémy HUBSCHER
dd35f867e0
Add .pre-commit-config.yaml file 2024-08-05 10:51:09 +02:00
Rémy HUBSCHER
402c77b332
Add readthedocs config 2024-08-05 10:50:24 +02:00
Rémy HUBSCHER
347f0202ab
Prepare 2.4 release 2024-08-05 10:45:59 +02:00
Rémy HUBSCHER
18cb41f760
Merge pull request #211 from tari/196-rfd 
Guard against reflected file download
 2024-08-05 10:26:15 +02:00
Rémy HUBSCHER
1b294f00fa
Merge pull request #212 from sevdog/xaccel-headers 
Allow XResponses to keep original headers provided to base response
 2024-08-05 10:23:48 +02:00
Davide
51deef0a7e
Allow XResponses to keep original headers provided to base response 2024-08-01 08:35:53 +02:00
Peter Marheine
e7e25e68dd Add missing import in packaging test 
This test was broken when changed to begin using importlib,
but that wasn't evident because the tests directory
wasn't being automatically tested.
 2024-08-01 06:28:06 +00:00
Peter Marheine
0568c3c559 Prevent reflected file downloads on specially-named files 
This fixes #196, where it was observed that django_downloadview
was vulnerable to reflected file download attacks with
specially-named files, similar to CVE-2022-36359 in Django.
This change adopts the same replacement rules as used in Django's fix
in commit b3e4494d759202a3b6bf247fd34455bf13be5b80.
 2024-08-01 06:24:00 +00:00
Peter Marheine
e2b4470c5b Ensure tests are actually run 
pytest by default only discovers tests in files named test_*.py,
so none of the tests were actually being executed. Set the appropriate
pytest option
to discover the tests so they are automatically run.
 2024-08-01 06:24:00 +00:00