django/django
Aymeric Augustin b8ba73cd0c Raised SuspiciousFileOperation in safe_join.
Added a test for the condition safe_join is designed to prevent.

Previously, a generic ValueError was raised. It was impossible to tell
an intentional exception raised to implement safe_join's contract from
an unintentional exception caused by incorrect inputs or unexpected
conditions. That resulted in bizarre exception catching patterns, which
this patch removes.

Since safe_join is a private API and since the change is unlikely to
create security issues for users who use it anyway -- at worst, an
uncaught SuspiciousFileOperation exception will bubble up -- it isn't
documented.
2014-11-11 19:05:14 +01:00
..
apps Improved warning message when reloading models. Refs #23621. 2014-10-23 01:46:04 +07:00
bin Started attackign the next flake8 violation 2013-10-31 08:42:28 -07:00
conf Updated FIRST_DAY_OF_WEEK for Ukrainian to Monday. 2014-10-30 09:19:32 -04:00
contrib Fixed #23750 -- Allowed core.checks.register to be used as a function 2014-11-11 16:29:32 +01:00
core Raised SuspiciousFileOperation in safe_join. 2014-11-11 19:05:14 +01:00
db Simplified Query.build_lookup() 2014-11-11 08:14:29 +02:00
dispatch Fixed #16245 -- Included traceback in send_robust()'s response 2014-05-16 18:41:40 -04:00
forms Fixed #13181 -- Added support for callable choices to forms.ChoiceField 2014-11-04 11:23:58 -05:00
http Fixed #18523 -- Added stream-like API to HttpResponse. 2014-11-03 12:29:19 -05:00
middleware Fixed #23531 -- Added CommonMiddleware.response_redirect_class. 2014-11-04 17:56:57 -05:00
template Raised SuspiciousFileOperation in safe_join. 2014-11-11 19:05:14 +01:00
templatetags Fix many many typos in comments throughout the codebase 2014-04-26 10:18:45 -07:00
test Fixed negligible formatting error. 2014-11-10 21:41:35 +01:00
utils Raised SuspiciousFileOperation in safe_join. 2014-11-11 19:05:14 +01:00
views Fixed #23656 -- Made FormMixin.get_form's form_class argument optional. 2014-10-30 19:10:52 -04:00
__init__.py Fixed #23442 -- Added django.__version__ per PEP 396. 2014-09-09 14:27:05 -04:00
shortcuts.py Moved relative URL handling added in refs #21177 to a better place. 2014-02-15 07:54:35 -05:00