Branch: refs/heads/stable/1.6.x
Home: https://github.com/django/django
Commit: a7af6ad96a35634383c2d73fa049127e85a886a6
https://github.com/django/django/commit/a7af6ad96a35634383c2d73fa049127e85a886a6
Author: Simon Charette <[email protected]>
Date: 2014-09-08 (Mon, 08 Sep 2014)
Changed paths:
M django/contrib/admin/options.py
A docs/releases/1.4.16.txt
A docs/releases/1.5.11.txt
A docs/releases/1.6.8.txt
M docs/releases/index.txt
M tests/admin_views/admin.py
M tests/admin_views/models.py
M tests/admin_views/tests.py
Log Message:
-----------
[1.6.x] Fixed #23431 -- Allowed inline and hidden references to admin fields.
This fixes a regression introduced by the 53ff096982 security fix.
Thanks to @a1tus for the report and Tim for the review.
refs #23329.
Backport of 342ccbd from master
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/540df02c7533f_35ea3fdfe3f1f2b8110250%40hookshot-fe3-cp1-prd.iad.github.net.mail.
For more options, visit https://groups.google.com/d/optout.
